Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a9784631-7ad5-3fd6-8d4f-00ebf4b89379.roa
File:                     a9784631-7ad5-3fd6-8d4f-00ebf4b89379.roa (raw, json)
Hash identifier:          jsPWifckQoim9KHAECFq53m8lZL5cZOe5XsgtC6MD9U=
Subject key identifier:   5A:61:32:04:21:B5:65:60:C0:3E:EB:A7:14:20:58:B0:C6:B7:3F:A0
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285845C4D46CA158D935AB45803640
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a9784631-7ad5-3fd6-8d4f-00ebf4b89379.roa
Signing time:             Sun 05 May 2024 05:52:31 +0000
ROA not before:           Sun 05 May 2024 05:52:31 +0000
ROA not after:            Sat 03 Aug 2024 05:52:31 +0000
asID:                     55154
IP address blocks:        66.63.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c4:d4:6c:a1:58:d9:35:ab:45:80:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: May  5 05:52:31 2024 GMT
            Not After : Aug  3 05:52:31 2024 GMT
        Subject: CN=534cdde4-43c2-4fe2-b304-8d4324eeccbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:a2:31:41:4b:1f:27:9c:22:70:f2:66:25:
                    9c:f8:cc:cb:b5:e1:4e:2b:32:c4:f2:2d:dc:44:2d:
                    f0:1e:53:e9:36:32:61:63:7e:58:f2:b3:70:69:ec:
                    d3:18:7f:c0:e5:44:c9:a6:e9:63:bb:d9:bd:52:28:
                    be:42:41:4b:d8:29:b3:c3:56:f4:9a:84:da:cb:93:
                    29:4f:76:38:f5:f5:71:9f:4c:67:78:3f:92:d3:46:
                    22:c6:01:38:e1:b4:b6:c0:5f:33:ee:b2:8e:2e:b0:
                    8d:f3:05:c2:41:20:9d:9d:cb:35:9d:58:d8:ce:41:
                    bd:cb:4d:f6:d0:c8:c9:0d:d7:3f:df:3a:7d:29:a3:
                    19:7c:c8:73:96:d8:28:f5:9b:7e:b3:5f:d4:4d:21:
                    eb:48:21:b0:49:4b:fd:d5:20:c8:92:c4:3d:1e:bb:
                    0d:f9:87:47:ac:c5:91:f0:e1:1c:e8:7b:49:37:7a:
                    df:24:24:79:35:89:af:38:fe:ee:56:12:bc:ec:17:
                    3a:61:71:4f:c9:d1:91:0c:7e:4b:16:37:df:95:04:
                    6c:a5:76:19:ba:e0:fe:1f:86:55:0d:76:60:cd:65:
                    c8:22:e9:c7:91:e9:1a:48:bd:d3:2b:70:94:02:15:
                    68:f1:1f:ec:3e:71:10:9c:39:cd:30:53:dc:c0:3b:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:32:04:21:B5:65:60:C0:3E:EB:A7:14:20:58:B0:C6:B7:3F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/a9784631-7ad5-3fd6-8d4f-00ebf4b89379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:2a:55:13:af:79:87:30:cb:30:6c:15:1c:37:0c:64:be:
         c4:79:59:07:c9:57:62:00:76:10:97:03:f7:8f:bb:f3:bc:dd:
         78:e3:f9:51:f7:63:1c:eb:22:0b:32:77:78:d5:12:38:63:93:
         0a:4f:42:8f:28:6f:37:a6:07:04:3b:ba:7f:27:58:c5:ff:49:
         91:dc:90:f6:7e:5e:b4:0d:96:0a:8a:ba:bf:aa:17:bb:b9:c1:
         42:cb:87:9c:0a:c1:9e:4b:60:ff:4d:65:b0:6c:8c:95:a3:67:
         65:a5:7f:d6:67:39:43:2a:a7:8e:f7:ab:cd:66:66:db:c0:29:
         5c:14:cc:47:9e:fc:64:e5:88:02:75:c8:d6:a4:97:c0:b3:ec:
         e8:1b:90:86:80:2e:47:4f:8d:ee:40:40:69:72:46:2e:b4:37:
         f4:49:36:1a:27:68:a9:2d:c7:1a:cd:1c:8e:d9:c4:6c:a9:b3:
         1f:d2:8b:da:89:42:d4:43:3e:8b:c6:d2:72:58:6d:29:b8:92:
         60:fd:81:f4:07:b3:c4:74:1c:fa:0a:20:97:9e:c7:61:22:03:
         79:67:dc:d1:33:54:15:3c:c6:2d:d1:03:31:6f:25:e1:94:2b:
         05:1b:a2:4d:65:f9:a5:dc:56:96:34:17:1a:67:30:91:66:46:
         77:16:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----