Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4acd7e88-22f3-30f9-9568-a654140de797.roa
File:                     4acd7e88-22f3-30f9-9568-a654140de797.roa (raw, json)
Hash identifier:          kl5FX8tQpH+IxAgo3ZCzmB4XEPDDZaBVSDG66bdluuk=
Subject key identifier:   AD:9E:97:9C:E7:94:4A:1D:DA:86:B4:8C:B6:A1:52:36:C2:43:D4:3C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A1078C61C11E10D3257B500
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4acd7e88-22f3-30f9-9568-a654140de797.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        216.252.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:78:c6:1c:11:e1:0d:32:57:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cca05799-58ab-46b8-ba48-43c34cc6acd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:42:b3:98:48:62:eb:44:2d:87:97:8b:62:
                    1d:bc:9e:29:f7:85:d7:b9:24:03:97:93:2d:aa:ba:
                    49:33:d1:fd:e2:b1:22:62:75:5f:54:c5:4f:0c:56:
                    ad:47:4c:4a:ef:3d:96:d8:ef:a2:b7:ed:51:ad:e5:
                    37:fa:9c:fb:c7:c5:5d:4f:ed:6c:58:0b:ea:fb:a0:
                    67:b3:d8:cb:90:3f:90:b7:87:ce:e1:0e:d0:eb:19:
                    e8:78:bd:f8:f9:9f:d6:cf:bc:60:ad:ff:a0:47:bc:
                    c1:72:4d:ab:0a:89:86:c6:f0:6e:ed:60:ac:94:17:
                    03:49:cf:b2:1c:a3:65:4b:11:50:b8:03:5e:f9:06:
                    d3:09:a1:d2:bf:4b:6e:21:af:f2:f5:ff:af:26:7c:
                    38:35:d8:e7:cc:a9:90:d0:f0:4e:37:87:fe:11:85:
                    9c:f8:9b:fd:89:a5:10:e6:94:82:2c:6d:31:64:0a:
                    ca:8f:f9:42:3a:be:54:ec:47:16:b1:09:de:5c:f4:
                    b4:49:aa:c4:28:c6:38:e5:82:28:38:ba:0e:08:2a:
                    2b:0f:7b:ff:35:c1:1c:a5:1b:76:02:77:68:84:a6:
                    52:4f:82:1f:75:0d:3d:25:ff:f7:f1:35:03:17:eb:
                    8c:13:0e:97:96:14:f0:31:88:57:61:c8:b3:ff:20:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:97:9C:E7:94:4A:1D:DA:86:B4:8C:B6:A1:52:36:C2:43:D4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4acd7e88-22f3-30f9-9568-a654140de797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:c5:4d:df:72:bd:b2:8a:06:f8:ba:76:9d:59:cc:d1:94:
         f6:b6:28:cb:ad:40:7d:db:dd:cb:ed:65:8a:30:6f:30:51:1f:
         0b:f4:11:07:af:f5:f6:9a:4b:9d:f8:ff:d8:00:68:8d:d8:8c:
         40:60:0e:32:c6:38:63:f2:22:73:db:9c:f8:51:eb:90:31:0e:
         67:e6:e7:df:c9:7c:c2:e7:47:52:ae:9b:55:46:6f:72:cc:98:
         cd:27:6d:97:c4:3c:65:6a:ae:d9:db:2f:fe:f8:35:08:b9:76:
         84:92:90:b9:f2:8d:e3:7b:92:f9:aa:ce:39:fe:d1:f6:11:eb:
         14:ca:10:ee:ff:7e:ba:17:bc:26:d8:53:2c:15:57:40:1f:a5:
         c6:00:33:e3:f3:ce:60:d4:7d:c0:22:97:4a:3c:68:68:c5:34:
         28:5c:70:a9:86:34:21:b4:b6:73:bd:9f:04:d4:c6:90:68:e2:
         7d:b4:f6:0b:22:7e:d5:4d:27:1e:d2:d1:55:e3:3d:11:09:d1:
         c2:45:7d:f2:70:b7:9f:e9:23:93:ff:ed:9b:52:7f:e6:38:10:
         48:90:7d:82:76:85:f3:c3:95:18:09:ae:ea:66:26:e1:4c:44:
         91:79:a9:5d:eb:bb:86:7e:79:fd:92:54:78:15:b0:9d:c8:78:
         6b:12:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----