Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/957734b3-c8f9-3284-ba53-a80def54af66.roa
File:                     957734b3-c8f9-3284-ba53-a80def54af66.roa (raw, json)
Hash identifier:          /+NPx8NWTAElbY2TI6oJkk8mnxs+3dKirROG45JrySg=
Subject key identifier:   9E:CD:94:5A:8E:D3:AF:89:50:9C:8B:E4:E2:3A:88:A1:A2:A2:42:C6
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584309F91D013DA1C54E8FF8A200
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/957734b3-c8f9-3284-ba53-a80def54af66.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        216.252.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f9:1d:01:3d:a1:c5:4e:8f:f8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=60523c85-a8bd-4a7a-a560-8329dc215988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:b3:24:87:1f:30:cd:00:d4:4d:a1:74:64:
                    8b:c2:9c:41:11:5f:a9:bf:3d:d8:e5:fb:8c:a9:5f:
                    20:a3:f0:97:5f:10:66:b5:73:d7:c8:d8:8c:c8:01:
                    01:37:30:ff:d1:c1:6d:a7:10:a3:7e:95:25:3c:d0:
                    da:1f:fe:8f:0b:f4:dc:7a:73:36:c8:ac:f5:51:46:
                    8b:6b:af:d1:df:f6:a0:f3:29:89:3b:a1:e6:db:8e:
                    89:2d:04:ff:08:fc:32:4d:4d:6a:22:73:f9:5e:28:
                    6a:bb:0f:18:e7:e4:0f:e5:36:d3:76:77:74:2f:d0:
                    3c:83:44:85:f0:35:cf:45:be:85:99:5d:52:7f:7b:
                    5d:79:a3:0f:5e:1b:b7:91:f6:a9:ef:21:6f:89:00:
                    58:a7:9c:38:e7:12:d0:eb:a4:5e:e7:d2:bd:b4:e6:
                    a7:71:87:27:e6:1a:87:6c:d0:ee:af:38:4e:da:13:
                    59:f9:0c:82:5a:fb:2b:78:01:c3:56:dc:1e:20:97:
                    34:68:e5:ba:3e:5d:38:dc:63:e9:a2:42:15:0f:af:
                    ac:76:7c:71:e3:9b:1d:d2:5b:0e:7d:1e:70:20:91:
                    12:6b:10:5d:72:f1:d3:6b:32:de:62:c0:97:f5:83:
                    b2:18:29:da:83:68:5d:50:7d:50:59:54:2c:19:48:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:94:5A:8E:D3:AF:89:50:9C:8B:E4:E2:3A:88:A1:A2:A2:42:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/957734b3-c8f9-3284-ba53-a80def54af66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:d6:dd:83:9e:35:d1:d7:66:d0:ec:3b:bb:40:6f:43:9f:b2:
         6c:c5:15:82:ee:d3:4a:42:d3:47:5e:cd:33:94:e8:ad:14:ac:
         32:d5:ea:13:bd:85:bd:d9:3e:11:86:38:e8:c6:c8:a9:d6:5a:
         58:e5:dd:fe:df:f5:48:12:c7:14:2b:55:a3:a1:97:1f:d2:d7:
         fe:b4:7c:ed:cb:66:eb:a1:59:8c:b4:bf:9f:3c:eb:03:84:55:
         9d:00:6b:fd:36:86:42:fc:57:68:8d:fe:f4:7f:65:a4:c8:79:
         11:45:92:0b:cb:d1:ad:b4:13:9c:ee:fb:28:ee:ef:2c:94:05:
         9d:df:5c:41:0d:32:50:57:1f:8f:3a:3f:c4:b3:14:39:22:cb:
         cb:4e:2b:26:8a:1b:2a:03:94:d6:be:70:95:c2:0c:b5:a9:02:
         d9:6a:00:91:f7:db:64:e5:7b:f8:e9:7d:7d:09:a3:02:43:ae:
         f2:e8:c4:3c:ca:c7:e2:e5:8d:b6:e5:b6:fc:02:5c:42:17:88:
         26:c6:63:fc:f6:ee:c3:39:b3:bb:a2:12:9f:da:f8:04:e0:94:
         c2:ee:b8:90:a4:4f:ab:a4:e3:f3:47:31:93:ab:f7:5c:44:07:
         50:e4:09:20:8e:15:cc:06:92:73:f8:90:ae:cf:ce:84:b1:d5:
         21:4e:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----