Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa
File:                     d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa (raw, json)
Hash identifier:          A7sJ2DzoeYF5rylKI2Z2PvBcwcNjTx7HdgGuGuNcXes=
Subject key identifier:   0A:D6:22:41:E5:62:B9:FA:D1:37:60:56:7F:C2:27:69:95:39:24:2A
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845D0D3A606E1F359E6626EE3C0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     13213
IP address blocks:        206.190.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 07:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a6:06:e1:f3:59:e6:62:6e:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=0c581e4e-fae5-4bca-b08e-f06f0a9c5c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:8d:ba:93:50:32:25:4d:d6:5d:14:6f:7f:
                    c0:8e:28:79:43:19:1c:21:52:56:8b:77:b7:40:19:
                    97:79:8f:71:21:3d:8d:ed:6c:16:eb:4e:e4:d2:87:
                    d6:5a:c1:09:a9:64:03:d1:64:28:46:e4:14:b2:0c:
                    cc:d8:a0:7c:d1:69:e9:44:1c:8a:0f:52:5b:72:d7:
                    6f:38:2e:0d:7f:54:08:5a:84:ca:ff:50:92:b0:85:
                    b6:da:41:85:37:05:b1:78:49:c3:36:19:89:7f:ae:
                    c2:6f:b4:05:76:3b:17:ae:c7:52:da:6e:b1:df:6a:
                    0b:39:aa:97:4a:66:4c:fa:5c:77:5b:1a:0b:a1:ed:
                    f0:2b:d8:d0:be:f5:f3:3b:d0:66:2c:e7:d6:60:9b:
                    af:48:74:2c:24:58:88:bb:15:b9:dc:c6:30:85:e9:
                    ee:c8:2f:ff:21:d8:51:54:b1:01:26:e4:b6:a4:24:
                    f1:9f:28:cb:73:76:ce:1e:9c:d1:eb:56:db:08:36:
                    72:9f:87:14:57:9f:3e:f5:24:9b:b2:f9:cf:54:87:
                    02:1d:36:00:fe:3c:17:f5:a3:e9:e6:81:1f:f7:24:
                    0e:08:58:3f:b3:2c:7a:75:e0:a1:41:87:bd:06:fb:
                    62:86:b5:0d:18:f0:f9:79:a3:09:30:0f:e1:80:16:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D6:22:41:E5:62:B9:FA:D1:37:60:56:7F:C2:27:69:95:39:24:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.190.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:e5:1a:83:de:fa:15:a0:e3:aa:fa:ec:0d:84:50:1b:5f:
         50:e2:13:14:c0:60:89:e4:90:bd:0a:7e:de:9c:e9:aa:09:44:
         f1:eb:48:12:b4:3a:d0:89:55:eb:53:3c:4a:f9:14:4d:8e:8c:
         bd:07:35:1a:bd:31:12:de:ba:60:62:ea:1e:a4:b8:8a:6b:61:
         b2:b6:03:54:b8:6f:de:eb:70:18:d0:76:08:f9:41:11:75:22:
         67:39:e9:a1:92:f3:dc:6b:e1:ea:de:a7:43:0c:e8:77:85:bc:
         30:11:62:c8:06:b0:43:8e:56:9c:c2:11:39:25:ba:66:04:ba:
         62:d6:68:d3:03:25:80:e5:ab:fd:e9:70:6f:26:a8:ed:73:c7:
         41:fd:1c:6f:dc:45:80:15:03:a7:32:9f:79:1a:82:2a:db:4a:
         fc:6c:4e:c5:a6:37:4f:81:97:5a:b1:a9:f4:81:85:a7:75:a7:
         9b:ed:4e:1a:40:5e:f3:12:5e:7d:88:c7:f5:40:a5:8f:c2:ef:
         e3:da:18:ab:90:93:e8:57:8c:bb:6b:c2:50:16:13:27:7b:30:
         fd:b5:e7:7a:ba:08:16:7e:72:8c:4e:21:95:23:b2:ae:ac:f6:
         6c:95:ea:70:0d:07:6f:b1:94:0a:43:4e:da:2d:8b:65:f2:3d:
         ef:ef:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----