Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b59efb16-20aa-31d9-8fa4-618749677afe.roa
File:                     b59efb16-20aa-31d9-8fa4-618749677afe.roa (raw, json)
Hash identifier:          aPY8abL2HV13rw/vUNXYsWMv8ii0fIhmLDZXlLBQFWw=
Subject key identifier:   BB:11:C6:0C:12:4C:C1:F4:43:E3:C2:C5:FF:EB:02:F7:6C:4E:E8:1F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845EE59D1DFF0AE74F9862D1F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b59efb16-20aa-31d9-8fa4-618749677afe.roa
Signing time:             Mon 20 May 2024 02:49:26 +0000
ROA not before:           Mon 20 May 2024 02:49:26 +0000
ROA not after:            Sun 18 Aug 2024 02:49:26 +0000
asID:                     834
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 May 2024 15:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ee:59:d1:df:f0:ae:74:f9:86:2d:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 20 02:49:26 2024 GMT
            Not After : Aug 18 02:49:26 2024 GMT
        Subject: CN=0a9e5fd9-05c8-452e-8424-edf57ed0e08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:e3:79:1f:6d:80:fe:b1:c8:45:e4:2c:47:
                    d1:38:ec:43:97:b0:f1:30:02:8c:9a:b0:67:d3:fc:
                    b2:91:a2:e3:2b:fe:8a:da:7c:b9:82:12:67:9e:7d:
                    6f:82:03:de:de:6d:91:9b:e0:e7:ee:a9:05:bd:10:
                    a2:e2:c3:aa:6e:7d:08:33:89:82:23:ac:58:4e:14:
                    86:e8:fb:aa:a5:53:f3:2c:2a:d6:ba:1f:01:45:0a:
                    b8:3f:2a:2c:05:2e:0f:ed:10:74:46:3d:81:34:5b:
                    86:8c:e1:40:5a:f2:27:5e:42:60:7c:65:9c:44:87:
                    06:c9:e8:2b:a1:89:fe:a1:a2:eb:a7:80:4a:79:63:
                    79:05:ea:eb:cf:7e:71:53:23:aa:83:cb:ec:10:86:
                    5a:32:69:8b:15:63:1a:da:2e:2b:b4:ee:dd:92:c9:
                    87:34:74:63:d1:84:0c:54:0b:3d:98:b0:c6:52:53:
                    aa:08:fd:5b:46:7a:72:7d:79:04:76:10:4b:9d:5c:
                    62:28:4d:3c:41:01:a9:57:50:05:8c:bb:ee:43:31:
                    ff:ed:03:44:d7:d1:ce:e7:1c:08:07:19:fa:24:e6:
                    52:89:2b:68:5d:30:e8:08:ed:7e:46:b7:6b:07:21:
                    2a:ba:1f:71:ca:f3:da:b1:d0:02:99:6f:aa:d3:dc:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:11:C6:0C:12:4C:C1:F4:43:E3:C2:C5:FF:EB:02:F7:6C:4E:E8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b59efb16-20aa-31d9-8fa4-618749677afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:c2:01:dd:d2:1d:66:19:10:72:fa:98:de:1f:37:6d:24:
         2f:a9:ef:74:ef:ab:44:de:18:77:e6:d4:c6:e4:11:a9:ef:ff:
         5b:31:e8:14:bd:3a:67:fb:30:36:5f:ae:c3:09:0b:29:af:2e:
         16:94:fe:84:cc:16:ee:3c:95:3b:3a:84:a9:af:6d:ef:9c:47:
         7f:08:49:07:64:c3:09:91:58:17:25:c3:83:9a:30:2d:ee:6e:
         5f:dc:92:e3:08:10:f3:e1:c5:c0:20:2c:d1:7f:46:94:83:70:
         3c:bf:92:50:45:32:0a:c2:60:43:46:5f:6e:59:c2:48:5d:5f:
         c1:f0:e3:42:20:7d:e8:9d:c9:e1:5d:13:7e:43:0c:aa:91:81:
         4f:ad:ab:25:7e:d1:b9:d6:94:e2:5e:8e:30:a3:4d:77:34:4e:
         0c:d7:1b:03:34:bb:bc:f7:c0:ec:f2:8d:36:76:cf:0d:88:c1:
         06:07:fd:a4:e4:38:5a:eb:1f:5b:7b:69:93:38:ef:0d:da:0f:
         f2:7e:8b:79:09:d1:d8:c2:8b:fc:29:9b:16:c9:bd:fe:e6:df:
         5a:86:90:56:b0:1e:78:b0:d9:af:cd:88:84:86:c6:19:fe:61:
         fa:4f:60:c2:ea:7b:3a:82:d9:d2:b7:af:7b:b8:c3:73:45:9e:
         23:84:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----