Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3638c9-35a8-3a7a-9749-062dc527cc73.roa
File:                     ce3638c9-35a8-3a7a-9749-062dc527cc73.roa (raw, json)
Hash identifier:          Utvm4doqX16m9L7U7cy9SMbhpdKPjYxqM+K9Xungu2o=
Subject key identifier:   52:26:77:67:9F:D9:3F:60:1A:92:26:4A:2A:CB:C6:A4:62:D7:55:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858468A7A1BC7569913F1FFB79800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3638c9-35a8-3a7a-9749-062dc527cc73.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     55066
IP address blocks:        71.44.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 15:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:1b:c7:56:99:13:f1:ff:b7:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=9127faf6-259c-4e9a-afe2-0bb7e5cb4554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:b7:69:ea:1c:a5:5e:af:e5:f0:c9:c2:ba:
                    2e:bb:43:48:56:2d:10:e1:8f:56:5c:86:78:85:51:
                    df:fa:71:71:e8:74:ea:ea:52:33:08:61:ad:0d:66:
                    b7:f7:d1:e2:6c:21:18:52:04:b5:9b:cf:f3:76:ab:
                    1f:c1:52:5e:1f:e8:97:4f:55:b7:cd:3e:22:1d:79:
                    db:a4:06:16:99:c9:40:ec:36:f7:e2:a5:95:cb:15:
                    6b:18:32:a9:0f:a3:6c:f9:61:f4:28:67:c0:86:54:
                    3d:8b:5f:56:d1:05:a6:ad:10:b0:41:1b:fe:b2:b4:
                    65:23:fc:27:28:16:e0:0d:75:8d:29:71:e9:6c:71:
                    05:70:36:8c:f9:55:07:77:60:8e:fe:e3:89:1a:04:
                    3a:15:8b:b8:e5:f6:75:ba:30:f0:08:61:a5:79:56:
                    b4:09:52:16:4f:f5:d4:05:5d:7a:46:e1:e7:f3:c6:
                    0a:07:49:3a:38:3b:75:09:f8:3f:22:ef:a1:bc:e8:
                    f2:c8:c8:97:1e:1f:ab:bc:d4:25:01:07:03:a8:10:
                    45:bc:b3:86:66:f8:99:77:10:61:96:37:a2:ab:03:
                    06:56:a3:dc:13:d8:d4:ba:e0:f0:3c:d7:aa:93:80:
                    da:e4:4c:b1:b7:ff:ae:35:e2:c5:87:00:0f:f0:36:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:77:67:9F:D9:3F:60:1A:92:26:4A:2A:CB:C6:A4:62:D7:55:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3638c9-35a8-3a7a-9749-062dc527cc73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:00:af:e9:18:d2:fb:39:96:e2:57:21:d5:d4:22:65:0a:
         c4:54:49:de:29:0f:2b:44:55:8a:aa:f6:ad:22:0f:b2:88:ff:
         f1:1a:1b:2f:af:82:2f:e7:a6:a3:8f:f2:2c:48:b7:09:b7:b1:
         ac:33:49:07:b4:03:f4:15:18:0e:13:d0:3c:50:15:58:60:9d:
         03:59:a2:ff:16:1e:e3:d9:a2:c3:7e:17:d7:b2:a7:59:30:67:
         cd:a7:03:8d:40:77:e4:3d:c2:2a:39:ba:14:a7:24:cb:a4:b1:
         13:05:e9:27:30:3d:8f:b9:ed:3e:cd:ab:18:7f:c3:5a:a4:c8:
         09:c1:51:2f:05:49:ba:e0:8f:5c:23:bf:b7:70:8e:9e:20:b1:
         6f:ff:53:84:3c:34:af:ca:b9:b2:22:2c:ca:e9:eb:6a:53:59:
         50:d7:15:6e:41:da:37:f8:35:55:9c:b6:82:1c:25:58:17:91:
         68:b0:d7:92:22:e5:b5:22:0d:21:42:10:92:c3:83:b0:60:69:
         c4:e6:35:ba:7f:46:2b:74:15:9c:26:2b:95:2b:85:c5:39:8c:
         99:93:f7:b2:67:3a:6d:8f:47:34:42:13:ee:e2:1d:12:2a:b1:
         46:bc:97:63:9c:f7:40:86:34:36:b2:5f:b9:03:6a:02:90:5a:
         6b:07:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----