Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5badcb4-0a37-3d9f-9e0e-927548bb61d6.roa
File:                     a5badcb4-0a37-3d9f-9e0e-927548bb61d6.roa (raw, json)
Hash identifier:          /n4jBkvXj02NVBp6Bs7D0QcIKLolextoSbxmefxjnkE=
Subject key identifier:   15:4C:F9:E6:A1:27:F1:CC:9C:2F:0F:D0:76:81:21:21:9F:25:CF:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845B5925B52481E8F35564DD160
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5badcb4-0a37-3d9f-9e0e-927548bb61d6.roa
Signing time:             Mon 29 Apr 2024 18:42:17 +0000
ROA not before:           Mon 29 Apr 2024 18:42:17 +0000
ROA not after:            Sun 28 Jul 2024 18:42:17 +0000
asID:                     56630
IP address blocks:        67.227.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 16:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:92:5b:52:48:1e:8f:35:56:4d:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 29 18:42:17 2024 GMT
            Not After : Jul 28 18:42:17 2024 GMT
        Subject: CN=a2d0345e-e3d1-42aa-ade8-6c789048ab93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:5d:a3:f6:5c:fd:7c:98:7a:8c:88:14:36:
                    5d:d7:57:6d:c3:d6:c5:3a:b7:a3:b9:4b:a9:c5:6f:
                    94:25:9b:d9:2c:7c:66:24:8c:de:64:93:37:bb:07:
                    77:ed:54:01:13:16:28:37:c6:08:3c:e4:0c:e4:ea:
                    89:14:ac:f6:ee:26:1e:16:e2:e0:5f:7e:2b:7f:11:
                    9d:9b:28:70:a5:89:80:78:44:b5:4a:28:e5:e0:1e:
                    ec:86:65:c4:8b:39:e2:ef:0a:60:65:d2:72:ae:a4:
                    17:ea:68:ab:e4:60:d6:14:d5:59:8d:b4:be:bd:1f:
                    c9:5a:10:25:6c:e6:69:21:b0:ba:f4:7a:84:07:ab:
                    eb:1e:9e:df:ac:ee:a3:b6:d5:e8:45:0e:b7:aa:6a:
                    99:fb:56:f6:b3:39:7e:e1:1a:a0:f8:44:f6:fd:cd:
                    f3:00:64:b3:b0:da:ce:e7:f6:16:e1:0f:72:ed:59:
                    20:24:2b:1a:c0:e9:64:19:13:fc:aa:a1:2b:e2:68:
                    47:14:8b:6d:9b:85:a3:00:64:35:e7:0a:ae:a4:2c:
                    46:74:cd:d9:6d:95:33:86:92:d5:f3:4b:5c:67:76:
                    63:a3:c7:82:aa:bd:0f:79:28:0e:9c:25:6c:7d:fd:
                    8f:72:36:31:01:86:64:b8:0b:bb:71:3c:8e:52:19:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:F9:E6:A1:27:F1:CC:9C:2F:0F:D0:76:81:21:21:9F:25:CF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5badcb4-0a37-3d9f-9e0e-927548bb61d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:b4:90:e9:79:c0:95:96:19:90:35:f6:7a:e1:cf:31:91:5a:
         0c:6e:c6:25:5b:bc:06:f4:b7:26:88:68:88:00:81:2b:c4:24:
         4f:1e:c2:c1:91:86:76:02:03:30:f2:8a:4b:4e:2b:00:aa:89:
         48:b4:8c:70:84:ce:1f:57:8d:75:1d:3f:e6:8d:b0:a6:d5:d8:
         9b:0a:20:ff:26:c9:ed:53:64:9e:0f:c7:37:f4:ef:cd:6f:2d:
         93:c0:9c:b9:c8:55:8d:63:02:1c:77:dd:92:3c:bf:bb:c9:fe:
         34:0b:6d:84:f0:06:2e:3b:55:af:e5:8f:21:ef:fc:75:44:36:
         15:9e:0a:24:cc:0b:49:dc:9d:70:3e:83:78:79:07:c1:09:b8:
         13:e0:8b:ef:51:bd:ae:83:85:ae:78:8e:cd:1a:90:d9:52:3f:
         a0:a2:e7:25:82:79:d1:f2:a6:ec:c0:fb:a6:56:0b:5b:59:f1:
         a8:a7:58:10:8d:35:f2:f6:51:bb:37:45:02:c9:87:30:ba:03:
         d9:4e:66:48:de:71:66:77:78:69:02:ca:55:4b:76:d1:40:59:
         68:43:57:49:03:cf:08:81:05:c6:60:0a:4b:ea:c7:3d:ea:54:
         98:24:e9:80:fe:25:54:86:5d:90:db:26:b9:a4:85:84:16:63:
         70:c2:81:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----