Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/861329fc-58b7-3245-8d74-a9944c84c004.roa
File:                     861329fc-58b7-3245-8d74-a9944c84c004.roa (raw, json)
Hash identifier:          mjv6eJvoW8BWq5mQV3/rbx7mkzM+mTZTP4cbDQbepik=
Subject key identifier:   04:31:73:1E:49:37:AD:0E:25:6E:6D:AF:4B:F7:4F:70:2D:6A:46:FC
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720A7F0423DA160A2F528250
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/861329fc-58b7-3245-8d74-a9944c84c004.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.148.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:7f:04:23:da:16:0a:2f:52:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=53619e15-aa1c-4e76-88c5-4d7ae8095527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:86:b5:b4:e9:c0:10:95:fa:f8:bb:e5:35:
                    74:67:66:ea:4e:78:cd:26:87:d7:7c:6e:fe:58:b2:
                    b3:1b:25:8f:60:51:92:cd:e7:13:12:f5:63:c8:4b:
                    0f:9a:9e:5c:53:b4:ad:90:ad:ce:d0:78:b4:c5:0c:
                    44:76:34:db:e6:27:56:90:c4:4e:3a:60:86:48:14:
                    fa:c5:a9:4d:97:ff:4d:f1:22:5a:c6:db:9e:90:c0:
                    8f:2e:0f:61:5b:62:c9:b3:72:98:f6:e0:a3:fa:55:
                    b8:bd:ed:de:fa:c4:1e:f0:6c:68:f4:01:4c:95:d5:
                    10:de:bf:0e:dc:01:f1:9a:07:f5:6a:49:10:8f:53:
                    e7:98:37:da:c7:60:bd:5f:be:19:9e:76:ac:ba:90:
                    dd:24:27:7b:fd:1d:34:88:7b:00:cb:98:5c:b9:90:
                    94:ea:bf:d3:2b:83:df:ee:fb:5c:dc:e5:86:fc:a0:
                    d6:f6:e5:15:53:c6:5a:dd:26:f3:1c:b2:9c:ba:6f:
                    79:43:67:a4:13:ed:b1:74:6b:c1:b9:9e:44:a6:de:
                    76:4c:70:aa:36:ec:d9:cb:73:20:10:e0:2c:bd:dd:
                    e9:32:3d:d6:b6:70:aa:2e:b4:a3:b6:5f:45:73:da:
                    e1:c2:19:91:cc:0d:4f:dc:87:ca:86:22:d9:f8:f3:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:31:73:1E:49:37:AD:0E:25:6E:6D:AF:4B:F7:4F:70:2D:6A:46:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/861329fc-58b7-3245-8d74-a9944c84c004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ff:16:7d:cb:ac:bf:f2:df:e0:9f:d4:e0:1f:c3:9d:d7:22:
         99:74:16:db:32:0c:a0:f6:8e:82:ef:9f:00:42:25:fe:fb:2a:
         45:da:96:9a:c7:6d:89:d2:f8:97:fb:1f:e5:48:7d:d3:b2:ed:
         19:f2:c0:54:0e:69:c2:fa:28:b7:6a:7e:05:9b:e4:88:8b:34:
         aa:55:2a:4c:58:5a:1b:c5:f3:e0:bf:00:68:14:f2:1a:1b:22:
         7d:b5:5d:41:79:84:3a:17:07:83:ba:01:83:37:4d:5d:a8:ca:
         d2:41:ad:45:44:c7:d6:08:71:b7:35:d8:51:3e:e7:fc:e3:79:
         41:b8:c9:02:23:d5:63:93:ca:8c:19:28:2a:72:48:30:11:90:
         c8:04:48:a1:d1:86:9d:b2:f1:70:20:e2:c5:01:19:ce:3c:a6:
         97:62:2e:d4:93:9e:dc:86:e1:bc:82:d7:79:6d:eb:c0:e2:6c:
         0f:df:17:72:60:71:11:f3:cc:a8:aa:29:5b:ce:da:55:b0:ea:
         51:8d:97:54:f2:2f:84:5e:d8:2f:4e:cb:e2:c6:93:09:88:da:
         6f:11:23:d5:93:fe:27:26:84:d3:93:35:93:3b:1f:62:9a:e5:
         02:73:00:7c:58:21:9a:76:c4:ad:8c:4e:0e:f8:5e:7e:19:dd:
         db:60:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----