Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/cefc3c45-a377-3a55-9692-938df0c25108.roa
File:                     cefc3c45-a377-3a55-9692-938df0c25108.roa (raw, json)
Hash identifier:          57OvE2B/qJVuPS27kHz4GEf4USI76NQ/+5YfZy35dTI=
Subject key identifier:   88:4B:B6:96:CB:1F:E2:45:4E:17:55:CE:AD:52:16:E5:61:DE:32:53
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720A5AF99AF8DC19DB256280
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/cefc3c45-a377-3a55-9692-938df0c25108.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:5a:f9:9a:f8:dc:19:db:25:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=1981fa98-1ae5-43d3-8fd9-5ff45410baf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:e0:bc:40:4d:8f:fd:9f:0d:01:4f:0c:96:
                    dc:55:5f:2b:fd:89:75:7e:48:02:9a:8d:49:4f:24:
                    8f:bd:c0:61:3f:5b:53:db:45:10:71:0a:a4:a0:f1:
                    11:4a:d2:4d:c6:ca:5b:20:1a:59:51:f4:59:ee:d7:
                    ae:04:6c:89:82:b3:8f:f8:ea:d5:e7:8b:81:7e:2e:
                    4a:ed:82:d5:ef:32:3a:b8:cb:16:94:64:07:5d:24:
                    6e:f9:4e:47:8a:a5:a5:8e:07:b4:30:0f:39:65:48:
                    ea:bc:18:4f:6e:2c:81:f6:48:9c:c0:fc:06:fc:5f:
                    16:6d:3b:7b:51:aa:e1:cc:eb:cd:e2:04:ae:b9:2f:
                    ab:f6:d8:78:f1:a1:15:0e:66:f2:c2:97:80:15:8b:
                    bf:01:f1:11:fb:48:a9:80:bf:5c:01:4d:fb:05:3f:
                    4b:fc:a4:51:0b:0c:ea:46:66:e4:91:f7:ba:c1:80:
                    9e:01:c2:4a:cb:e1:9b:c4:f1:d3:75:08:90:ef:55:
                    90:44:e0:30:78:d6:39:11:b4:49:1f:ee:b0:d4:a6:
                    26:ca:e0:f4:d6:3a:3c:c6:0d:83:51:fb:2c:4b:f2:
                    5a:00:75:f9:7d:9b:6d:83:e6:cb:07:e1:60:5a:d6:
                    d1:22:b1:01:a3:5a:db:88:99:07:78:c5:43:79:72:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:B6:96:CB:1F:E2:45:4E:17:55:CE:AD:52:16:E5:61:DE:32:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/cefc3c45-a377-3a55-9692-938df0c25108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:e7:44:12:46:41:ab:05:12:54:70:c4:f2:dc:d6:e7:43:
         53:76:a7:e3:45:b3:b0:4a:c2:28:70:c6:6a:2e:6a:1b:c1:f2:
         d5:ca:de:6e:08:cd:23:01:97:aa:b9:8b:b4:87:55:0f:15:7a:
         e5:9d:7a:79:eb:b0:d6:d7:34:c8:c1:e3:c6:10:e9:89:e3:af:
         4c:2d:fa:08:0a:f5:6d:26:fd:9f:cd:e3:54:83:90:71:e5:e5:
         44:d9:51:a2:de:17:a4:53:68:1a:23:ac:1e:c2:c9:24:62:c2:
         9f:01:f1:b9:c6:2d:d1:1c:0a:87:59:a8:76:e2:ac:28:d5:b0:
         96:33:18:62:ab:03:cb:72:03:f2:84:0c:cf:8d:ea:df:c0:64:
         e2:65:87:cf:ac:5d:8e:8d:2f:f2:a9:41:4c:17:67:2e:c6:e4:
         a1:a3:b8:65:ff:4a:fb:75:20:2c:93:3f:dc:bd:37:4c:ea:56:
         9d:1d:60:4e:77:c9:86:4a:70:f3:1c:63:3d:40:e6:0e:1b:b2:
         81:80:7e:2c:24:1d:24:bf:fb:9a:36:26:85:27:ed:97:ad:66:
         c3:ef:d7:31:c9:e0:5f:a7:39:8a:d9:04:ac:96:02:f9:99:09:
         11:12:07:b1:6d:5a:af:50:6c:b5:8d:c5:cd:1f:a0:8b:ce:db:
         69:cd:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----