Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3c914926-ce9d-34db-ac0e-21734e66a1cf.roa
File:                     3c914926-ce9d-34db-ac0e-21734e66a1cf.roa (raw, json)
Hash identifier:          PMy3h8kZYDLEebtK9aIz1N/4lo8XDCN6fUx6X9WqsSE=
Subject key identifier:   61:1D:96:72:0E:BC:9A:27:2F:F3:9A:8F:C5:9E:52:02:86:23:0E:A8
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720AEF36D2207FAFCCE2B428
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3c914926-ce9d-34db-ac0e-21734e66a1cf.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:ef:36:d2:20:7f:af:cc:e2:b4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=05864abf-37ad-45bd-8ca7-a5be2574b4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:51:5d:4b:ab:a0:b2:94:e1:93:c6:42:10:
                    76:6e:79:e5:7c:4a:83:eb:2a:12:f6:4f:d4:6b:34:
                    b1:6e:96:a1:34:e7:58:ad:3b:69:35:f8:97:e1:1f:
                    20:1e:c1:f6:1b:71:84:35:46:3b:63:c9:d7:e4:fb:
                    1e:32:94:db:af:f4:93:13:da:03:49:67:82:88:00:
                    52:6c:35:81:e8:0e:7b:99:8b:74:d3:6c:84:68:d4:
                    18:79:b8:f1:3f:e2:31:ef:95:03:5e:60:6f:61:b8:
                    ef:57:fa:3b:c2:6c:04:a3:91:ad:e1:c7:cb:48:29:
                    33:a3:09:fb:af:56:0c:72:9d:56:26:c0:ad:18:a5:
                    ab:17:51:7b:08:a8:d5:3b:cd:c6:c9:6e:1a:5d:af:
                    54:92:6b:a8:c5:94:01:db:34:80:53:07:85:b7:70:
                    e0:3f:93:33:77:6c:fe:b9:a2:b0:d1:aa:69:71:f6:
                    ba:a8:3b:45:24:c4:6f:f9:e6:f6:84:54:ea:f4:42:
                    5d:7f:d9:ef:3e:d8:0a:94:27:72:cd:f1:ea:d6:22:
                    12:17:a3:2e:e5:7d:c5:62:82:bf:f3:53:33:79:44:
                    74:24:bd:25:6d:a0:48:70:02:bd:e9:49:20:2e:a6:
                    05:3f:ca:20:14:8b:5f:e5:49:ca:88:16:44:85:da:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:96:72:0E:BC:9A:27:2F:F3:9A:8F:C5:9E:52:02:86:23:0E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3c914926-ce9d-34db-ac0e-21734e66a1cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:76:55:22:48:06:f1:47:e8:21:d9:c6:96:d8:b1:50:3c:
         ab:3c:3c:2e:c5:03:a1:0a:6d:19:d1:e8:5c:bd:4b:e7:ee:05:
         9e:0e:69:c6:06:d3:6c:c2:f0:4d:65:43:a6:23:5a:50:2d:14:
         7b:46:78:84:ae:30:15:dc:74:76:0e:ea:96:ff:53:49:1f:37:
         47:5c:3f:14:15:88:b2:6f:25:b2:0e:3b:09:52:3a:50:74:6f:
         bb:12:65:0d:f3:57:50:d9:24:40:c1:42:fc:eb:a1:bd:44:c8:
         d9:29:a0:c7:8e:95:19:ec:fd:26:e0:c4:e1:af:e8:a4:45:dd:
         18:b5:1a:86:9d:73:31:1d:2f:12:da:a5:36:87:e9:39:b7:74:
         f2:b8:3a:26:ad:de:74:60:59:df:e6:99:32:78:a3:89:9b:e9:
         fe:0b:06:9a:85:f0:0b:e7:7f:a1:f0:b7:75:3d:0c:f2:79:e7:
         bc:60:f1:ca:1b:fe:5c:a3:bc:85:bd:68:69:a8:f6:03:00:f4:
         d0:ee:60:09:46:85:fd:b6:dd:1b:cc:fc:89:96:5f:a9:65:da:
         0e:6f:5e:16:d1:47:b0:25:c7:cb:89:f3:d9:b8:0a:10:76:5b:
         07:48:7b:e5:07:54:08:a9:f6:fd:f9:6a:07:dd:3e:0a:d2:06:
         07:b5:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----