Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c86d6e72-7204-3085-beb5-e346c63cb23e.roa
File:                     c86d6e72-7204-3085-beb5-e346c63cb23e.roa (raw, json)
Hash identifier:          EW3wLZw8db6iDEjsI/AZYXfrz4zP/bzvaALumbQqMIY=
Subject key identifier:   37:02:DE:B8:2A:16:82:6D:AB:70:BA:AC:AD:DB:2E:8D:EE:75:A5:DC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846004C863C9602AE22B2423180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c86d6e72-7204-3085-beb5-e346c63cb23e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     53397
IP address blocks:        206.206.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Aug 2024 17:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:86:3c:96:02:ae:22:b2:42:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=5e0f5694-5574-4500-a14b-41001468bd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:03:83:33:7c:64:35:9b:41:af:51:9c:dd:
                    6e:31:72:dd:f9:e5:32:59:7d:c3:fe:53:9f:43:3f:
                    ae:28:b3:34:96:77:df:c2:aa:f5:68:64:0d:a9:67:
                    8d:99:d8:ac:0f:51:31:c6:96:9f:cb:a8:15:72:10:
                    7d:48:93:90:c9:43:3b:33:04:70:d3:90:fe:92:66:
                    35:54:51:c8:e3:0b:07:61:ba:c9:c6:4d:94:91:81:
                    5e:41:a3:e6:71:72:db:e9:99:e9:82:76:42:f2:13:
                    fa:46:9f:62:40:ca:76:f0:97:6e:79:7a:88:6f:1e:
                    21:ac:24:d2:8d:55:f9:56:d9:d9:ae:cc:dd:59:28:
                    e0:4c:a2:f7:05:93:4e:df:30:76:84:c7:15:68:35:
                    91:08:d4:77:62:38:9e:28:35:12:9f:5b:9a:a4:75:
                    09:7a:10:12:64:5f:e5:7f:19:5e:ac:d0:15:ed:38:
                    14:3e:bb:bf:d3:2a:f7:33:8b:ce:95:c0:56:c5:59:
                    a6:f8:25:54:f5:17:ef:97:c5:91:0e:b5:c1:9c:84:
                    59:57:be:3b:45:8d:d4:1a:f5:92:d2:94:11:0f:50:
                    84:c2:ed:c4:af:59:ae:c1:e8:79:4a:75:bf:d1:c0:
                    c1:d0:c7:a7:03:93:69:70:30:2b:d7:b4:80:e5:6b:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:02:DE:B8:2A:16:82:6D:AB:70:BA:AC:AD:DB:2E:8D:EE:75:A5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c86d6e72-7204-3085-beb5-e346c63cb23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:12:d2:ad:1f:44:85:21:01:45:6e:3b:a7:0e:da:e6:f1:b7:
         fe:21:76:8c:0d:2a:f3:dd:66:48:64:b7:b9:3c:18:cd:8d:47:
         07:5f:a6:a8:df:66:b4:71:68:ba:1e:53:d3:f0:a2:a7:0e:64:
         c7:18:39:32:d7:bd:ba:38:07:e9:ab:bb:da:72:f3:b5:51:f0:
         c8:7f:d4:f9:84:c9:5a:e1:a3:f6:c6:46:9a:6c:6f:28:c7:13:
         02:eb:10:84:60:79:b8:04:12:b8:12:d1:58:09:d6:de:59:19:
         15:2d:a1:16:34:d5:00:f9:e6:94:14:39:7b:e9:ed:9f:c3:85:
         b3:16:49:ab:3b:02:c6:e5:85:aa:61:b1:69:3f:7b:f7:1c:7a:
         f2:aa:e4:f2:6d:7c:46:92:8d:05:4e:76:ae:88:b8:ca:ec:ba:
         02:5c:bc:8f:19:9b:2f:52:c2:da:fa:f6:00:bf:a7:ef:8b:fe:
         e5:25:f8:5c:4a:42:22:43:12:31:90:e9:79:26:71:73:29:fa:
         4a:e2:91:27:47:09:5c:88:b4:db:62:d4:dc:82:47:3e:be:1b:
         ad:a0:86:d8:cf:23:40:f7:28:35:56:28:91:ce:13:d7:f2:ef:
         51:00:78:0b:bb:b3:1b:d3:82:a1:42:8d:fe:47:cd:17:bc:67:
         6b:c8:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----