Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a09562b-cebd-3ac4-83eb-3e12853f83f2.roa
File:                     5a09562b-cebd-3ac4-83eb-3e12853f83f2.roa (raw, json)
Hash identifier:          Pw+DfrkPFGa/qnS8Eky7qT1dbjWOHVtBFdZpIbvN7Us=
Subject key identifier:   74:52:15:0C:C7:0B:68:E2:60:5B:74:A3:C9:94:86:3B:71:BA:FF:78
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845B8266FDD31EF368074907400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a09562b-cebd-3ac4-83eb-3e12853f83f2.roa
Signing time:             Tue 30 Apr 2024 16:52:15 +0000
ROA not before:           Tue 30 Apr 2024 16:52:15 +0000
ROA not after:            Mon 29 Jul 2024 16:52:15 +0000
asID:                     59895
IP address blocks:        216.74.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 16:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:26:6f:dd:31:ef:36:80:74:90:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 30 16:52:15 2024 GMT
            Not After : Jul 29 16:52:15 2024 GMT
        Subject: CN=d1a47358-3dd7-4996-9c99-c0e2a6628c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:7c:1b:30:98:75:68:0a:e9:b2:41:81:7a:
                    99:ec:f3:0a:2b:bd:a0:45:a5:85:61:70:1e:df:7d:
                    ec:ca:dd:bc:a2:c0:d8:c1:42:01:6c:cc:2d:b4:c0:
                    93:f3:ee:d6:96:61:d2:32:8d:cb:a0:f5:b4:77:9a:
                    5e:dd:71:a5:45:7a:b3:99:dd:65:aa:6c:6b:8a:c0:
                    0a:4a:cb:60:6a:22:fb:17:d2:c6:e7:af:e1:e9:54:
                    88:12:11:f3:62:2c:25:cb:86:81:d9:67:6a:d1:dd:
                    76:d2:73:1d:c1:41:21:e8:cb:2e:6d:dc:ee:ab:c3:
                    1a:6f:ec:45:74:4f:fc:c1:97:51:28:8a:f7:39:86:
                    b1:cc:93:0f:fd:10:53:d5:f8:6e:74:45:40:81:e9:
                    9f:9c:04:6c:22:4a:b0:ef:ef:51:b6:68:f6:c7:2b:
                    81:bc:67:b4:25:df:6f:bd:1d:30:bf:c4:ef:14:59:
                    74:b2:e3:23:9e:ed:d5:c3:8e:8d:d0:94:3e:63:f9:
                    81:90:c7:89:3e:4f:65:40:da:2c:a0:d4:fa:94:a4:
                    a2:87:04:25:0c:87:0d:f8:ee:52:6c:e6:3b:a0:3e:
                    a9:2e:94:33:39:d6:82:52:9a:3f:cd:7a:8f:1c:48:
                    1e:48:76:b3:4a:47:d6:fd:37:a4:06:0a:84:1f:96:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:52:15:0C:C7:0B:68:E2:60:5B:74:A3:C9:94:86:3B:71:BA:FF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5a09562b-cebd-3ac4-83eb-3e12853f83f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:ea:87:5b:6f:84:3a:ea:8e:c0:f2:63:a2:97:00:18:7a:
         3d:97:24:f7:a4:c8:a8:4d:f6:03:26:99:c2:70:27:16:2e:ee:
         c2:3f:fc:b0:69:33:b5:cd:a0:30:63:3a:67:04:e1:ba:ca:da:
         08:e7:16:44:1c:7a:f8:d8:ed:bc:fc:66:b1:35:55:79:78:12:
         d7:4e:ae:5a:4b:ab:64:b1:fc:4b:47:b6:26:b8:c9:86:9a:2f:
         f6:94:9f:ea:15:01:7d:a9:b5:f4:cb:d2:b3:26:b5:d8:fe:0c:
         06:30:5f:d3:9f:b0:f7:3d:b4:a6:b2:6e:47:4c:40:0c:2a:a1:
         66:0d:83:36:69:aa:66:05:c7:c6:aa:17:64:d8:8e:a7:62:24:
         1f:1b:92:93:7e:61:4e:61:bf:ea:87:d7:cd:57:9e:66:94:30:
         5d:ba:fc:e6:02:a3:4c:90:47:27:59:44:08:12:ac:65:79:47:
         f2:8c:6c:69:7a:02:b8:d3:81:df:e0:6c:7e:91:8b:72:a0:c9:
         57:e3:2c:cf:0b:46:51:be:f3:a6:d7:51:6a:98:bf:24:d2:07:
         2d:c6:5a:7d:c7:28:4f:42:4f:28:fe:da:e5:de:1e:9f:2a:19:
         d5:58:c7:a8:d8:fc:89:c8:61:30:ff:1e:38:94:3c:df:a9:c9:
         37:26:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----