Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/024efa5a-aab7-3db5-a6a7-9eb99c21f03b.roa
File:                     024efa5a-aab7-3db5-a6a7-9eb99c21f03b.roa (raw, json)
Hash identifier:          TbgwfmA9aKIgCiqVt9OGVP3MgDctOL4wPm8BD1DC2UE=
Subject key identifier:   8F:B6:A4:5D:9F:10:B0:D4:36:50:AB:03:4A:04:62:6C:49:73:2E:96
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584536475C2E982708E699555580
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/024efa5a-aab7-3db5-a6a7-9eb99c21f03b.roa
Signing time:             Fri 15 Mar 2024 04:23:30 +0000
ROA not before:           Fri 15 Mar 2024 04:23:30 +0000
ROA not after:            Thu 13 Jun 2024 04:23:30 +0000
asID:                     14618
IP address blocks:        208.123.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 05:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:36:47:5c:2e:98:27:08:e6:99:55:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 15 04:23:30 2024 GMT
            Not After : Jun 13 04:23:30 2024 GMT
        Subject: CN=6f528713-e1c8-4cf8-813e-c589f38a6563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:76:fc:37:97:82:36:d5:9d:d0:c3:04:a0:
                    6e:7f:b7:79:6e:6d:c1:43:05:24:2e:c0:9a:bc:cb:
                    c3:9a:6e:cd:e6:2e:c9:9d:c5:89:3b:24:66:8b:9c:
                    7d:a1:8b:cc:09:45:52:c7:0c:93:a8:43:46:ac:ce:
                    31:a6:7e:19:ce:a9:b0:9f:e4:93:b7:25:65:fc:b2:
                    d5:00:62:52:81:ff:d5:0b:35:c7:94:7f:9d:e6:68:
                    6b:18:5f:73:85:d0:45:aa:c1:c3:39:c4:79:6e:9d:
                    6b:e7:26:48:e6:f8:cf:b5:55:cb:66:f8:a2:8c:57:
                    7d:7d:50:0e:70:f0:73:32:23:78:37:55:57:6e:e2:
                    10:06:0b:ca:4c:0f:fd:9e:92:f8:3e:a0:5d:e6:48:
                    fa:0e:a1:91:63:61:0d:ff:86:db:bf:36:ae:cb:38:
                    4e:bb:8b:d4:d0:2e:cf:26:0c:2d:d8:00:da:8a:4b:
                    2d:7e:9a:e3:71:4b:2a:20:7f:9b:ce:95:a6:62:93:
                    07:e5:a0:1d:50:ad:22:46:04:b4:b4:a0:7c:68:c4:
                    1e:67:1c:6b:8e:28:7b:64:99:70:6e:f2:87:49:5c:
                    65:ee:3d:12:70:1e:a4:9a:0c:b2:d6:1f:a6:94:11:
                    70:03:63:36:81:56:7f:82:1b:57:bb:59:0f:7a:9a:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:A4:5D:9F:10:B0:D4:36:50:AB:03:4A:04:62:6C:49:73:2E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/024efa5a-aab7-3db5-a6a7-9eb99c21f03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:af:33:54:c9:f5:26:59:4e:ff:e7:80:a8:c0:13:f9:a9:
         29:d2:27:86:5c:00:c0:28:a9:5c:5a:fd:18:78:aa:8b:26:ff:
         dd:ac:c3:87:98:2d:84:cd:19:34:41:1f:c0:37:e7:4b:e7:63:
         e8:0e:4c:f3:78:c4:4c:8e:66:ad:94:97:8d:6d:71:c7:16:d0:
         8c:d1:07:53:90:67:30:3e:59:60:ca:c7:e3:86:0d:7a:97:08:
         10:65:6f:1c:fb:14:47:83:f4:36:ab:de:24:58:c9:70:08:01:
         8b:af:64:9c:4a:c7:69:5c:00:72:3b:64:50:66:c7:cc:c4:0c:
         b7:46:42:da:32:47:d8:65:11:5a:f1:c9:53:02:0e:79:72:0d:
         30:38:c6:d6:73:ea:4c:48:d7:ed:02:a8:05:23:3d:39:15:4c:
         d7:f0:1e:cc:af:76:f5:8d:8e:4d:a4:05:37:8f:94:0f:00:8d:
         53:fd:e5:4e:8d:02:b1:14:db:fa:a0:15:db:43:04:8a:77:c4:
         81:8c:be:73:c1:25:64:e3:2c:ce:ab:12:a9:b4:8a:b0:28:75:
         81:b1:d1:59:65:15:cf:56:29:7a:a2:3a:7d:a5:c2:74:3b:6e:
         96:2b:0c:f5:b6:18:cc:2a:2f:c4:5d:85:59:4e:ed:6b:35:a6:
         90:e5:d5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----