Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27e87869-0fab-3321-98c1-8b64189a25ea.roa
File:                     27e87869-0fab-3321-98c1-8b64189a25ea.roa (raw, json)
Hash identifier:          0UwBxu/ggoF7ojPirK/ay40ug9ucax+iKdduhVZd/V8=
Subject key identifier:   57:AC:A1:FB:07:F0:FA:9E:1E:68:92:5C:9D:9A:56:06:32:0B:85:19
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844A153D2E133896EF758E92E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27e87869-0fab-3321-98c1-8b64189a25ea.roa
Signing time:             Sun 21 Jan 2024 19:53:11 +0000
ROA not before:           Sun 21 Jan 2024 19:53:11 +0000
ROA not after:            Sat 20 Apr 2024 18:53:11 +0000
asID:                     207709
IP address blocks:        216.122.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 17:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a1:53:d2:e1:33:89:6e:f7:58:e9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 21 19:53:11 2024 GMT
            Not After : Apr 20 18:53:11 2024 GMT
        Subject: CN=4dc54fd5-a76b-4420-a043-1387d3677604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:37:dc:d0:f2:7b:9d:14:ab:ec:c1:79:bc:
                    c4:d8:05:53:90:cf:21:d7:8f:ee:d8:61:48:6d:5a:
                    93:9c:0a:ec:c9:7b:dd:45:d1:45:ee:5f:14:fc:e5:
                    7d:0d:7c:ff:a6:72:c3:b3:c9:e6:79:e7:69:25:cd:
                    e2:e4:71:07:74:06:d0:d9:c3:c0:ba:cd:26:60:9f:
                    10:7d:31:4c:a2:20:37:2e:d4:a9:d4:ca:60:4a:fd:
                    88:ca:64:fd:de:8b:d5:5d:25:e2:a2:60:a3:7c:ae:
                    7b:9c:28:ef:52:a4:8a:df:e1:a0:ee:65:94:90:8d:
                    1e:c7:fe:cc:7c:31:48:25:8c:f1:30:7b:95:60:11:
                    cc:de:aa:12:11:90:87:13:fd:28:18:27:3e:a6:49:
                    6f:0d:20:80:d8:50:9c:62:85:96:ee:d1:da:a0:cc:
                    6e:cd:95:65:7d:29:0d:86:9f:70:8c:56:90:e3:ae:
                    8c:c6:81:9d:3c:1d:7f:05:5a:7f:72:69:ab:57:50:
                    54:1e:71:57:76:23:cd:13:fb:c0:f8:ad:c4:a3:19:
                    3e:46:15:9d:b1:ce:5c:6b:a1:d7:c3:25:da:37:1c:
                    23:c5:58:b4:f3:c5:56:25:b8:a6:d9:e1:8b:fc:c7:
                    0a:da:f9:63:29:85:32:ad:f8:94:fa:91:94:b3:1c:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:A1:FB:07:F0:FA:9E:1E:68:92:5C:9D:9A:56:06:32:0B:85:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27e87869-0fab-3321-98c1-8b64189a25ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:78:2d:97:6f:d5:54:3c:fc:78:fb:b7:cb:28:8f:1e:b3:
         5e:88:c0:39:64:9d:d6:c4:ce:da:86:ec:46:02:10:a0:f1:53:
         2a:84:fc:9e:4e:b3:c7:3e:35:de:c1:2c:22:ce:01:35:3c:d2:
         8a:16:29:1f:e6:0f:30:4a:03:6b:e5:d7:ff:59:32:3b:69:fe:
         54:e2:60:09:a7:da:a0:02:1d:b4:bd:ca:bf:27:9e:47:f7:69:
         ed:dd:e4:bd:db:f8:96:ad:43:69:31:38:52:37:97:1a:01:a9:
         28:f9:ff:e4:92:8e:de:ea:05:22:0a:2c:2d:8a:b1:2e:f2:62:
         0a:c0:a6:8f:40:51:18:8b:de:30:89:be:a6:4c:54:72:50:6d:
         b2:1c:2f:d7:65:80:6e:c8:60:a6:f7:aa:81:09:59:8a:4e:ee:
         30:a8:f9:24:7e:f1:19:d5:c1:95:77:31:39:90:57:e0:6f:8f:
         3f:4f:2e:4f:fd:b0:6b:77:d6:91:9d:19:24:b6:f7:92:8a:62:
         a2:aa:83:32:6e:f0:46:ea:dc:5c:ef:d4:a0:9c:b5:83:0e:77:
         74:64:85:3f:ef:6b:45:38:24:7c:ce:c4:94:3e:0c:15:9e:1d:
         c7:ae:2c:c7:85:d9:68:ae:63:3e:b5:44:de:ff:7a:dc:32:e8:
         7f:69:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----