Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12b82449-1fdd-3fb3-aef7-92e48f7fb1f3.roa
File:                     12b82449-1fdd-3fb3-aef7-92e48f7fb1f3.roa (raw, json)
Hash identifier:          3OdrVQTm3U+tiov8bKkKPCyFffVqsab6XxnWXYUmA2Q=
Subject key identifier:   4F:9F:05:13:75:B2:FC:58:04:E4:B7:3E:6A:22:4B:87:D5:AD:DD:B5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845FAA82B8DD2EA319A7582B800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12b82449-1fdd-3fb3-aef7-92e48f7fb1f3.roa
Signing time:             Fri 24 May 2024 12:37:00 +0000
ROA not before:           Fri 24 May 2024 12:37:00 +0000
ROA not after:            Thu 22 Aug 2024 12:37:00 +0000
asID:                     3360
IP address blocks:        206.164.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 14:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:a8:2b:8d:d2:ea:31:9a:75:82:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 24 12:37:00 2024 GMT
            Not After : Aug 22 12:37:00 2024 GMT
        Subject: CN=eec7c9bf-5fcb-412e-ad83-5a84f325fd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:cf:80:d9:b7:2c:74:26:b3:cd:5c:08:a2:
                    30:e5:5a:9c:29:3a:bd:ae:30:27:dc:b5:db:11:a7:
                    f9:c8:4d:b8:03:73:ec:f2:a7:06:69:f9:db:89:a2:
                    73:31:e4:02:13:c8:50:9a:9a:31:79:20:f6:75:b4:
                    2b:aa:aa:29:58:e5:6e:f1:88:93:eb:ca:af:73:e5:
                    59:ef:4c:9d:c1:63:8b:f2:8e:28:62:84:7e:4b:ef:
                    28:8a:f9:05:1f:08:ca:f1:de:e8:1f:01:ce:09:18:
                    21:09:7e:fa:4c:c5:70:ee:4e:23:28:b7:f3:41:bc:
                    9a:71:04:46:16:2f:60:ef:af:a9:df:bb:5b:fc:5c:
                    e9:29:88:72:34:c1:a1:e0:7c:74:1a:36:ee:5b:e7:
                    ce:df:a5:83:b9:99:e8:25:de:e7:a5:87:14:f9:f9:
                    51:bc:eb:df:6f:af:0c:a2:24:01:8d:a4:70:71:da:
                    2d:f9:a1:4e:1a:3f:36:4e:f9:93:bc:21:92:ee:a1:
                    ac:8b:02:47:e3:30:e2:14:37:77:b6:c5:43:58:67:
                    45:e5:6c:9e:b4:7a:db:9d:fc:54:32:e0:5b:e6:56:
                    9f:71:93:6a:f9:94:c7:71:1e:0c:59:1e:67:53:9b:
                    41:24:b3:d1:bb:bb:2e:00:49:4b:ad:cf:83:e8:d5:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:05:13:75:B2:FC:58:04:E4:B7:3E:6A:22:4B:87:D5:AD:DD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12b82449-1fdd-3fb3-aef7-92e48f7fb1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:93:27:25:80:34:56:f1:e3:58:57:30:c3:e0:aa:ab:8f:9b:
         cc:75:bf:43:d5:8d:ee:51:a3:4d:5e:7b:9e:1a:cd:2d:9d:f5:
         c5:64:da:93:12:2c:1e:8e:aa:dc:b5:28:8e:d2:4e:1e:b4:1c:
         ac:02:a2:fd:77:fa:9b:72:e3:d9:19:d6:e3:7f:3c:f7:f4:d5:
         d9:1c:63:12:c9:51:0c:0c:28:06:7b:e1:24:54:7a:8b:b9:b3:
         80:2f:99:03:db:87:4b:1d:bb:72:33:c2:e9:bc:89:58:96:38:
         b3:87:cc:36:31:c5:78:2d:2a:f3:bb:a9:7d:e7:d7:7b:e5:bb:
         ce:29:60:f1:13:b0:97:f8:56:43:8c:3b:3f:7e:f5:fe:c0:0b:
         fc:1f:81:71:ed:7e:ad:ff:3c:42:8a:ec:67:85:9a:63:75:b0:
         29:a5:ea:43:f7:b5:0a:a1:48:c9:1c:58:94:fc:9a:54:d5:5c:
         c7:58:ff:fa:de:3d:71:4b:67:e7:0b:20:16:5e:a8:9b:88:f9:
         50:db:69:65:58:cf:21:2b:5f:a2:d4:8f:c1:97:a2:0e:d4:86:
         4b:ad:88:e5:89:56:e8:0c:7a:e6:d5:f1:d5:55:28:11:f6:48:
         0a:7c:6f:f8:e8:4e:c5:59:73:89:fa:43:33:df:42:da:24:65:
         b7:e2:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----