Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/3a037f48-7dfc-33a4-8e89-4d1e22f0c83d.roa
File:                     3a037f48-7dfc-33a4-8e89-4d1e22f0c83d.roa (raw, json)
Hash identifier:          r+L8Xbcl05KFXaK9i0z8AF5OpJ3FiwN/yOWqgeY0OFE=
Subject key identifier:   FA:DB:12:E8:2F:6F:A3:2E:7F:FF:32:D5:5A:48:50:6E:75:A1:11:DE
Certificate issuer:       /CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
Certificate serial:       010D0C9F43285846FC0561388DD38A26DD8DCA80
Authority key identifier: 74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/3a037f48-7dfc-33a4-8e89-4d1e22f0c83d.roa
Signing time:             Sat 24 Aug 2024 17:07:33 +0000
ROA not before:           Sat 24 Aug 2024 17:07:33 +0000
ROA not after:            Fri 22 Nov 2024 18:07:33 +0000
asID:                     46781
IP address blocks:        104.224.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:05:61:38:8d:d3:8a:26:dd:8d:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
        Validity
            Not Before: Aug 24 17:07:33 2024 GMT
            Not After : Nov 22 18:07:33 2024 GMT
        Subject: CN=3498be7b-bdc8-4552-8b1b-4257fc96c907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:c0:3d:3a:6c:2a:0e:4a:10:b9:7f:02:50:
                    3a:5e:b1:e8:24:57:19:f6:98:76:47:09:c2:0a:ce:
                    f0:95:3d:2e:f6:f4:58:3f:92:83:2e:80:f1:06:0e:
                    7c:57:36:a3:0c:ad:f3:ed:e0:a1:8b:9d:db:ec:99:
                    48:77:7b:4c:1c:85:8b:c1:d3:2c:11:91:2e:06:13:
                    8a:f8:c5:c3:00:18:42:a3:9b:23:5e:06:a9:98:bf:
                    70:a7:c0:6f:84:0d:29:09:5b:9e:49:92:36:b5:4e:
                    63:6c:4c:39:52:a0:9a:10:ef:e1:1e:ec:2e:55:de:
                    7d:94:1d:38:a2:7b:1a:95:f2:c2:e1:32:a0:9b:ab:
                    79:8b:e2:99:35:89:06:48:4f:59:c1:4b:15:c7:e9:
                    84:f8:7c:f6:1f:01:cd:96:b7:d2:5a:12:fb:02:6a:
                    f4:3d:fd:7e:e7:cc:4e:4a:fa:5f:39:6c:d6:e1:c4:
                    26:e4:57:0f:14:27:21:18:19:5b:c4:31:d0:d3:36:
                    8e:ed:39:b2:cf:11:17:e1:34:53:3a:9b:57:73:c8:
                    e5:60:5a:33:a5:fd:93:4d:19:70:2e:ec:71:a1:86:
                    2d:81:39:ac:4c:8c:c8:ec:5d:b0:76:94:3f:50:ce:
                    9d:14:94:dc:a5:cd:d9:51:cd:00:55:2f:2b:81:a3:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:12:E8:2F:6F:A3:2E:7F:FF:32:D5:5A:48:50:6E:75:A1:11:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/3a037f48-7dfc-33a4-8e89-4d1e22f0c83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/d7f4f613-8c96-4684-828f-f2c0fe9dc475.crl

            X509v3 Authority Key Identifier:
                keyid:74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:15:38:9f:24:03:16:38:0d:43:42:e8:50:4f:be:00:b7:
         cc:ad:59:5b:40:46:07:8a:1a:bb:d7:a7:fc:d0:a1:3d:26:d5:
         52:bd:9c:dd:33:00:43:8c:98:4c:f0:af:72:6d:15:9f:5d:6d:
         2e:0c:9b:86:ab:fe:bf:49:d1:90:f0:10:fb:4f:78:d4:d5:dd:
         5f:29:8f:5b:7f:eb:3a:5c:de:06:b0:a6:45:d4:94:10:57:55:
         a5:31:c4:ef:6e:6f:79:f1:be:e5:e9:58:f4:fd:fb:52:50:54:
         fe:b7:11:99:46:07:26:6a:e5:9c:af:00:f2:b8:a4:ae:f1:7a:
         a7:a4:1e:60:ae:48:7d:b1:25:17:ba:8f:03:da:64:e2:86:f4:
         c6:e5:ca:e0:38:d6:8e:74:30:cf:10:39:3f:c5:8e:4f:9c:8c:
         ed:68:da:f4:40:8e:10:93:4a:ba:31:9a:6f:39:dc:17:49:16:
         f3:c2:69:74:b1:e5:4a:b9:0a:17:33:99:c9:8f:a9:a2:7a:0e:
         e0:c0:7d:e8:84:a5:af:21:9e:12:00:0f:45:e0:46:d5:21:cc:
         f3:1d:84:aa:31:01:89:65:fb:11:8e:eb:47:6d:4a:f7:05:f5:
         7c:2c:a1:4d:38:c0:63:bb:ff:6d:75:c7:5a:81:7f:19:b1:59:
         ce:35:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----