Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/249fc1cc-b24f-3e19-8a50-933e416f5229.roa
File:                     249fc1cc-b24f-3e19-8a50-933e416f5229.roa (raw, json)
Hash identifier:          jeBGZEAjVVu2Iwd6U0Xn9aiRuRJ3xcC4h85DSGwTnwc=
Subject key identifier:   29:2A:99:EC:AD:8D:C6:BE:DC:18:F8:77:E6:ED:00:A5:9C:EF:ED:4B
Certificate issuer:       /CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
Certificate serial:       010D0C9F4328584652321EEB3E43F4282C3DB800
Authority key identifier: 74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/249fc1cc-b24f-3e19-8a50-933e416f5229.roa
Signing time:             Mon 24 Jun 2024 21:10:17 +0000
ROA not before:           Mon 24 Jun 2024 21:10:17 +0000
ROA not after:            Sun 22 Sep 2024 21:10:17 +0000
asID:                     46781
IP address blocks:        104.224.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 17:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:52:32:1e:eb:3e:43:f4:28:2c:3d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
        Validity
            Not Before: Jun 24 21:10:17 2024 GMT
            Not After : Sep 22 21:10:17 2024 GMT
        Subject: CN=e94ca7aa-f867-48bc-9481-51fb06e92b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:08:68:2c:69:75:f4:61:5f:04:13:d5:7b:
                    ce:e5:74:f3:74:e9:f0:52:b0:f9:e2:4e:a7:37:ab:
                    03:19:a7:e6:be:4b:c0:32:b5:4e:6d:18:1c:cd:6d:
                    65:b7:89:57:04:d8:9d:10:46:7f:16:f3:d1:70:96:
                    a0:0e:1a:32:fa:e1:72:5f:96:0e:81:95:d6:4f:28:
                    c9:04:7f:a3:36:17:d4:29:b1:0d:63:14:dd:4e:57:
                    4c:94:73:0b:ae:72:a4:05:4c:eb:d2:9e:11:f4:6c:
                    c5:d8:22:a9:df:49:4d:ea:e6:2c:48:75:80:82:68:
                    47:a1:78:89:07:98:1a:e0:a3:01:00:24:b3:17:46:
                    c9:f1:a9:a6:95:9a:d7:34:8d:54:97:80:b0:6f:b6:
                    09:a6:fb:aa:3d:02:8e:fe:59:dd:dc:4a:ec:e4:9e:
                    dd:c5:22:5b:62:fc:37:a5:52:f8:94:d9:6f:60:bd:
                    60:5d:c5:f6:b8:fd:a2:b5:79:b6:b4:82:60:0d:7e:
                    d8:b3:a8:4b:ad:bb:12:d7:e9:8f:79:be:ac:89:30:
                    32:20:ec:30:44:44:31:81:93:f2:49:65:60:15:fb:
                    03:be:9d:9e:7f:d2:1a:2c:90:8c:04:95:08:d3:38:
                    73:a7:87:88:32:ad:1f:a6:a8:22:b7:69:bc:46:9d:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2A:99:EC:AD:8D:C6:BE:DC:18:F8:77:E6:ED:00:A5:9C:EF:ED:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/249fc1cc-b24f-3e19-8a50-933e416f5229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/d7f4f613-8c96-4684-828f-f2c0fe9dc475.crl

            X509v3 Authority Key Identifier:
                keyid:74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:ee:2c:72:b7:e0:69:96:a2:12:0f:58:6a:b7:9d:b8:be:
         dd:58:d8:c8:d6:79:1a:d2:21:ff:97:c7:f6:1a:17:83:ea:e7:
         83:28:6b:f6:b2:e7:40:cd:01:71:bc:ce:95:c2:9b:bc:fd:97:
         65:56:ef:37:bd:b9:c1:2b:a0:fd:c7:2f:60:d5:4d:22:dc:67:
         8a:42:8d:4a:df:c4:a3:d1:cd:75:63:bc:fa:9e:44:d8:4a:ad:
         59:80:14:68:a5:1c:ed:af:4d:c0:2b:73:fc:63:c1:66:b5:59:
         b5:cf:7c:04:72:2e:28:33:35:e8:21:02:ef:0e:1a:8c:59:85:
         9d:62:6f:ec:b5:73:b3:fb:af:2f:86:26:b5:69:5f:15:f7:d3:
         63:d2:32:4b:a1:ef:f4:87:46:37:d2:67:42:ff:77:c6:a4:ad:
         d1:49:cd:33:a9:d2:1e:ec:2c:d6:e5:4a:c4:6f:df:30:8c:72:
         ed:73:ca:65:15:7a:99:58:a0:05:cf:a1:c1:c6:6e:70:70:e9:
         25:23:85:8f:36:8c:12:f7:d2:43:81:a0:1d:b2:dd:9c:1c:84:
         21:a2:d6:be:bf:7d:0f:3c:30:dd:f2:b2:3f:56:cf:11:9c:0a:
         bd:a3:f7:bf:f3:47:cf:4d:35:ee:14:58:14:7d:93:54:77:a5:
         c3:5d:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----