Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9d0d1142-19d0-30fd-8118-00b38511e52c.roa
File:                     9d0d1142-19d0-30fd-8118-00b38511e52c.roa (raw, json)
Hash identifier:          a6xGcZYbj6dKr1TMXKd5C5wIDF96jfwGwaNcPH2ZfNw=
Subject key identifier:   22:71:A3:65:80:F5:66:A7:18:14:DC:EC:1D:3B:86:5D:98:23:04:B7
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584309FD340CCC559619D9C70E80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9d0d1142-19d0-30fd-8118-00b38511e52c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:34:0c:cc:55:96:19:d9:c7:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d1f89c94-e601-40fd-bb55-bab2f7ec2835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:1d:60:9b:c1:bb:c5:db:7e:90:be:28:1c:
                    81:dd:ec:b9:3c:2c:08:4a:d0:df:fe:b3:fd:e2:df:
                    14:51:6a:25:a2:c0:df:5e:8c:ec:1e:56:5f:4f:a3:
                    61:55:2d:cb:67:49:c1:ed:63:46:84:b1:73:7c:b9:
                    ef:d2:b3:4c:17:e4:29:d8:cd:7b:22:dd:81:aa:c7:
                    88:db:3f:18:91:4b:52:36:ba:0e:36:d2:71:ab:e3:
                    98:1c:47:9a:20:36:e4:63:77:7c:0b:31:38:12:f9:
                    e2:cd:52:a3:62:9c:16:70:26:86:6d:d9:4b:b9:f0:
                    02:63:02:85:10:8b:28:83:d1:8f:01:67:47:88:b0:
                    e9:9d:fb:0f:ad:f4:07:7f:3e:8b:3d:ff:4a:03:80:
                    3d:25:2d:97:32:6d:49:a5:55:9e:fb:d6:c3:63:d7:
                    d4:f7:9a:81:9a:4f:d6:7f:31:5f:ff:db:f2:0f:f7:
                    7f:4d:5d:12:78:a2:04:7d:fd:57:04:ac:cd:d2:7a:
                    52:9e:8d:34:52:80:d5:cf:af:54:dd:13:80:4e:36:
                    9a:46:db:f3:af:47:01:eb:26:89:e7:cb:0a:85:87:
                    0a:48:10:b8:cf:6d:92:a1:8f:1e:b4:45:34:50:12:
                    76:8f:a7:29:ce:73:96:f3:f9:77:5a:2a:f7:5f:07:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:A3:65:80:F5:66:A7:18:14:DC:EC:1D:3B:86:5D:98:23:04:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9d0d1142-19d0-30fd-8118-00b38511e52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:59:2a:b9:27:6f:60:c4:61:56:a1:44:fa:ac:b1:3f:71:1c:
         26:e8:1f:c3:ba:85:e5:4a:b2:9a:9a:33:f6:63:c3:13:dd:40:
         c6:4a:90:8d:f1:e9:bb:a7:f1:34:dd:78:c4:ae:d6:71:27:3d:
         c7:87:7a:16:b3:80:ad:f2:2b:5b:53:c6:c8:e1:ef:cc:ed:3c:
         e7:32:63:04:fa:b9:27:e9:82:01:b2:fd:64:72:33:08:fb:5a:
         f0:c2:ff:6b:cd:ec:a6:4c:cc:02:f5:d0:47:dc:0b:5d:8c:4f:
         e1:f6:b3:ee:01:14:65:5c:98:e9:50:82:eb:83:40:84:3c:01:
         d0:71:f2:f3:35:4e:51:a1:47:45:3b:c7:19:3f:fd:fe:95:e3:
         07:76:52:2a:1e:8b:b2:f7:8c:bb:a3:a8:5a:ec:86:99:fa:5f:
         d6:fe:b8:5f:9b:48:b5:49:ab:98:5d:b5:b8:0e:b0:f0:c0:70:
         6c:ba:92:84:13:cd:63:5a:f8:15:d7:b2:39:fc:69:5e:a7:87:
         a1:76:61:a7:c4:2c:d6:ee:7d:24:f4:4a:5c:17:b2:de:c5:ee:
         d6:6f:89:da:ef:bd:d2:61:25:87:df:8c:fc:62:4b:c0:d6:1e:
         ef:c2:e2:1e:91:3f:d2:27:a4:7d:b5:f3:b2:88:3d:6f:45:8a:
         01:de:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----