Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/088399d3-1388-3ae6-b7f1-867b6e42869f.roa
File:                     088399d3-1388-3ae6-b7f1-867b6e42869f.roa (raw, json)
Hash identifier:          t/tPb6dygcA0vbKt6p3YmPa1JabLdO0CKFpTrlg5I10=
Subject key identifier:   35:98:2B:F9:AE:E1:07:E2:30:82:80:45:ED:86:E4:4F:21:4D:6B:D0
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F432858452384EE00E08A7F56C43E5200
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/088399d3-1388-3ae6-b7f1-867b6e42869f.roa
Signing time:             Fri 08 Mar 2024 11:07:12 +0000
ROA not before:           Fri 08 Mar 2024 11:07:12 +0000
ROA not after:            Thu 06 Jun 2024 10:07:12 +0000
asID:                     834
IP address blocks:        136.175.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 17:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:84:ee:00:e0:8a:7f:56:c4:3e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Mar  8 11:07:12 2024 GMT
            Not After : Jun  6 10:07:12 2024 GMT
        Subject: CN=0aacabfb-9fb6-4f32-8e76-bbaed5801d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:84:9e:31:5b:36:5a:10:17:bd:f8:fc:bd:
                    13:36:98:7e:11:69:4a:c1:b5:e0:00:8a:f3:e7:22:
                    23:97:84:c2:df:c2:9d:67:aa:7b:0c:e4:25:16:3c:
                    61:81:44:7a:03:77:92:04:0b:b4:cb:46:49:6d:c7:
                    5c:02:2a:f0:c6:49:b1:41:91:18:c0:43:8b:d0:77:
                    e4:ee:a9:40:ec:51:99:c9:50:13:2a:94:46:db:08:
                    70:4c:12:28:65:c8:99:fa:43:76:dd:6b:83:06:89:
                    46:bd:ec:14:1e:86:33:f8:b5:b6:b1:04:59:ef:67:
                    e1:3c:9e:0a:7b:88:b7:2c:e4:04:2e:3c:09:7a:cf:
                    ef:04:39:9e:b1:0a:8d:ab:68:61:fa:2c:aa:88:9d:
                    af:fd:dc:a9:1d:32:42:fd:43:28:8e:73:bc:d9:b7:
                    7c:51:a1:ca:73:0b:8e:0b:34:36:a2:a0:9e:ba:ca:
                    e8:7c:4a:3e:bc:b9:6d:a7:2e:24:e5:49:38:54:82:
                    6a:c1:69:a1:d1:98:5f:37:eb:8c:e2:f6:8b:51:52:
                    24:d8:ce:aa:cb:96:e9:d3:9e:66:2f:18:ab:dc:00:
                    11:c5:98:ab:fc:58:5e:ec:66:07:6d:b4:d4:d5:a7:
                    43:0f:58:f1:12:97:b0:d3:9c:c8:4c:86:62:2d:85:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:2B:F9:AE:E1:07:E2:30:82:80:45:ED:86:E4:4F:21:4D:6B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/088399d3-1388-3ae6-b7f1-867b6e42869f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:0b:88:81:bc:11:51:0d:37:c1:22:3c:4b:fe:a1:1d:26:
         8c:f6:ec:36:a4:86:4f:9f:ae:42:9c:92:1f:ba:05:6b:bb:bb:
         34:ec:fa:c0:ec:37:a1:1d:99:6f:47:21:f3:3e:6c:aa:b9:88:
         33:92:54:38:22:6e:0a:03:11:27:6e:4a:ee:f7:3c:7d:1d:59:
         f5:e4:1b:28:cf:dd:b0:cd:e4:24:a2:59:dd:5b:47:9f:97:99:
         cf:4e:19:c4:82:82:1a:8b:6b:26:35:1d:27:d9:33:87:fe:01:
         27:19:de:28:63:59:99:53:18:f0:f5:56:d8:21:47:70:82:5c:
         42:1b:c8:08:9d:aa:5b:9d:39:31:58:cb:33:cf:6f:79:a2:d5:
         b7:66:40:d8:0f:fa:32:24:34:2f:89:3c:02:74:0f:1e:5a:66:
         71:15:67:8d:d7:48:97:c0:c6:7f:31:49:2d:e8:d1:9a:41:96:
         7f:22:58:95:aa:7e:a2:5e:bd:3e:61:fe:6b:31:9f:70:59:88:
         6d:6e:3c:74:2d:7c:93:4a:1f:c2:87:01:d3:61:21:f9:50:d6:
         f5:ae:61:48:b4:93:05:e3:86:65:65:27:80:d1:f7:8f:89:66:
         c2:ed:dd:97:05:40:a1:e0:f5:5a:6b:84:8b:e1:98:8c:a3:be:
         7a:91:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----