Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa
File:                     d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa (raw, json)
Hash identifier:          D/q/Bmu/hItYmGLGAhv/25rtSVlcXtcy82O0k5s24Jw=
Subject key identifier:   1F:D4:B1:75:21:E8:D2:60:E1:1C:B3:8E:5B:DD:D9:FE:F3:81:0B:3F
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858461969775029A0C77C50F4CE80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa
Signing time:             Tue 04 Jun 2024 13:00:34 +0000
ROA not before:           Tue 04 Jun 2024 13:00:34 +0000
ROA not after:            Mon 02 Sep 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        174.127.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:19:69:77:50:29:a0:c7:7c:50:f4:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jun  4 13:00:34 2024 GMT
            Not After : Sep  2 13:00:34 2024 GMT
        Subject: CN=48e6caa4-a60c-40b5-ace0-7f96d6fe9ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:2e:60:ad:1e:b3:2f:f5:a4:d4:f8:d1:19:
                    76:12:75:3b:40:99:20:8b:fe:fc:dd:e2:b3:d0:db:
                    73:ef:4d:50:9e:70:55:91:60:09:3c:0c:25:06:3f:
                    d5:c9:99:aa:a0:cc:94:31:b9:3b:70:c5:c8:69:7f:
                    93:9a:ff:6a:f4:26:5a:32:0a:34:ca:75:98:ec:d0:
                    55:e6:0f:a5:9d:7a:67:52:c6:03:8c:6f:36:5d:82:
                    3d:d0:e7:20:e9:ef:6a:66:69:b0:bf:a3:5f:b8:1a:
                    7a:79:58:b8:03:49:4c:d2:02:5e:0e:f3:20:f2:b9:
                    cf:50:41:b4:90:72:28:a7:d1:ca:98:e4:7b:32:fa:
                    13:87:6d:36:64:3b:22:0e:2d:9b:a0:c9:fa:1a:db:
                    e4:1d:60:de:bf:e7:ee:c1:63:cc:9b:3d:6a:97:53:
                    20:e1:cd:b4:90:88:30:34:cd:8b:bb:c3:7e:12:e0:
                    a4:73:7d:03:dd:28:5f:19:68:94:b0:5d:26:64:94:
                    8a:80:4b:92:c2:b5:6e:11:75:2f:5b:02:5d:5a:00:
                    36:db:bc:03:71:37:37:62:ae:f8:3e:84:2e:2b:d7:
                    9d:0c:b6:6e:1d:8c:80:ee:9f:2d:ed:94:4a:81:c2:
                    a6:65:ef:12:4d:0d:86:44:28:16:e2:35:62:dd:43:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:B1:75:21:E8:D2:60:E1:1C:B3:8E:5B:DD:D9:FE:F3:81:0B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cd:d1:22:ce:a5:32:14:1f:a2:bb:9f:4f:43:17:95:3d:3e:
         8d:54:44:ec:7d:e8:0d:0e:0e:be:25:c8:59:58:52:f0:7b:79:
         ee:41:a8:80:f6:47:9b:21:dc:96:35:a0:04:cd:a9:f5:81:da:
         4d:57:ec:23:aa:ac:83:a5:93:d4:d6:2f:36:53:78:98:df:32:
         08:2c:da:02:11:75:a0:a4:91:f4:3d:ba:34:6b:ed:d2:62:89:
         57:1e:4c:f7:1f:93:be:dd:0f:c1:28:eb:70:fc:96:29:70:61:
         5a:d0:65:de:21:28:fa:3c:1d:23:87:4a:f4:26:09:cf:67:7f:
         d7:e5:b6:76:86:26:6d:9e:41:a0:6f:86:a6:89:d7:1c:fa:db:
         10:c4:91:35:f1:7b:08:a1:58:ab:a5:2c:48:6c:dd:3f:cd:8c:
         bc:9d:00:44:32:65:0f:31:fd:c3:66:01:66:05:7c:cc:1c:cf:
         f7:5d:8c:7c:36:fe:c0:bd:82:df:1d:91:71:b9:43:33:6d:7f:
         4d:fe:41:10:e1:3b:0a:b6:d8:f5:d5:db:c1:bd:99:3b:08:61:
         38:8d:3a:8a:6a:d7:18:74:c8:2b:7f:86:30:f1:21:04:63:2b:
         59:b3:8f:c4:3a:4c:53:3f:17:3e:9f:c9:6d:4e:7b:a5:3b:2a:
         52:88:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----