Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce639c47-3ecc-30d2-863c-e0be80b2e8bd.roa
File:                     ce639c47-3ecc-30d2-863c-e0be80b2e8bd.roa (raw, json)
Hash identifier:          EEbJilPPnOFO6EfGaJELjmi16QGnPAoIKiXuyM2UvhU=
Subject key identifier:   11:51:11:DE:BF:6A:02:A3:44:6C:94:55:BB:F9:19:A3:40:4B:41:79
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845E4B7354BF6543EF31516E840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce639c47-3ecc-30d2-863c-e0be80b2e8bd.roa
Signing time:             Thu 16 May 2024 15:59:31 +0000
ROA not before:           Thu 16 May 2024 15:59:31 +0000
ROA not after:            Wed 14 Aug 2024 15:59:31 +0000
asID:                     7922
IP address blocks:        104.247.154.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 18:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:b7:35:4b:f6:54:3e:f3:15:16:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 16 15:59:31 2024 GMT
            Not After : Aug 14 15:59:31 2024 GMT
        Subject: CN=500731ca-bdd9-4e80-b9c6-55b1e01d7c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:e9:f6:08:5d:42:49:56:2b:33:41:db:1a:
                    ed:c9:50:d0:70:2f:e2:84:82:b4:59:6a:3e:ba:ad:
                    fb:84:6f:1d:f9:ad:a5:6f:26:88:72:90:58:f1:3e:
                    63:24:8e:a2:a5:2f:3e:9d:2e:ff:d0:f3:1a:73:84:
                    e5:7d:15:10:03:a8:e2:60:f9:4a:e1:5a:9e:bd:10:
                    14:f0:24:f1:52:8d:a0:ca:d6:55:5d:72:22:25:18:
                    37:8c:88:36:a5:be:23:19:4f:90:aa:d2:d3:b8:aa:
                    97:f9:bf:44:eb:b6:24:07:f4:1d:12:a1:c4:f0:08:
                    f2:9e:a2:74:22:56:ad:d6:2a:43:cf:f9:e3:3d:f7:
                    69:3c:cf:72:bc:30:45:e9:56:6d:29:35:03:0e:55:
                    b4:49:6a:bd:ef:63:a4:34:4d:4d:8b:35:c0:3e:8b:
                    9d:33:21:8d:1f:a4:87:62:06:ec:b0:a9:64:cf:7f:
                    b9:76:ae:f7:c8:84:ec:94:59:3a:c5:20:75:91:ff:
                    b7:df:2b:a9:94:d5:c3:74:3f:54:0d:e7:1e:7e:2c:
                    32:3b:2b:d2:29:b2:b3:ff:73:a5:30:4b:3f:fe:49:
                    8f:5d:b3:01:b9:4c:32:7c:a3:ee:a2:6e:af:b8:a1:
                    56:ed:a1:ab:bd:dc:01:8b:c0:f3:ee:72:a0:7e:cc:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:11:DE:BF:6A:02:A3:44:6C:94:55:BB:F9:19:A3:40:4B:41:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ce639c47-3ecc-30d2-863c-e0be80b2e8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:c5:f6:a6:95:90:fc:45:a6:b4:29:d2:de:86:dd:83:e6:
         2c:16:60:e6:a6:45:a4:3c:16:c8:f9:ba:1f:77:34:84:cb:c6:
         5e:b0:8c:e9:0b:1b:22:9a:a2:3b:dd:b0:3a:7d:e3:34:3b:29:
         2b:b3:1c:60:cf:69:2a:00:10:97:05:08:35:70:e8:2a:2d:fa:
         59:63:f6:78:4e:de:5d:ee:f0:dc:65:f4:80:df:fe:3d:71:64:
         de:6c:eb:55:07:f6:04:fb:4e:9a:26:f6:ab:c0:4d:32:d2:7e:
         2a:6b:4a:97:a7:41:c9:8d:f9:28:d8:8e:a6:71:f9:8d:2c:c2:
         28:79:3f:4c:ce:9e:41:e2:6f:1d:3e:84:94:96:a4:9e:30:f0:
         bf:f1:40:cd:5c:2c:ca:e9:0c:59:31:02:b4:79:b2:7d:2d:53:
         11:58:eb:32:dd:f8:b2:14:9f:87:72:69:72:da:a7:57:e3:60:
         c0:bc:b4:4f:15:56:d3:ea:cd:95:7d:51:cd:8a:d4:cb:99:c1:
         aa:5c:6e:a0:2b:00:77:6f:9e:23:13:4f:06:22:fd:76:34:58:
         f0:74:a5:4b:d0:50:d7:49:e9:4b:57:89:4c:88:7e:eb:cd:ec:
         aa:37:5a:42:85:11:80:54:89:5a:27:d3:17:68:f2:37:e9:83:
         07:76:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----