Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/428e03fd-6536-3624-877b-7b6dc71eb02a.roa
File:                     428e03fd-6536-3624-877b-7b6dc71eb02a.roa (raw, json)
Hash identifier:          tThN7DDyAaNr0Ey1xk5bxB76sivM7OOB9XCs58tcPvA=
Subject key identifier:   02:C2:31:4E:4D:A1:5C:49:1F:9C:35:E8:C5:6C:36:25:EE:68:B9:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846089D20FB7BAC1BE645186980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/428e03fd-6536-3624-877b-7b6dc71eb02a.roa
Signing time:             Wed 29 May 2024 12:36:04 +0000
ROA not before:           Wed 29 May 2024 12:36:04 +0000
ROA not after:            Tue 27 Aug 2024 12:36:04 +0000
asID:                     2161
IP address blocks:        168.87.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 15:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:9d:20:fb:7b:ac:1b:e6:45:18:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 29 12:36:04 2024 GMT
            Not After : Aug 27 12:36:04 2024 GMT
        Subject: CN=17801820-fef0-4042-a734-ac30baf1c9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:d9:eb:1c:2d:ce:8d:37:76:10:34:fc:3b:
                    3b:b4:93:08:3d:e4:bc:5e:c7:6b:05:8b:6c:81:97:
                    0e:1d:cd:c2:96:98:6c:5e:33:1d:65:21:67:0d:77:
                    5c:12:96:4a:0b:29:56:a3:35:e7:87:dc:4b:fb:d1:
                    75:4b:32:6f:14:b7:db:41:dc:4b:30:54:fa:3d:a3:
                    51:f2:8c:a5:66:1b:79:4f:89:8e:e1:7a:00:ff:84:
                    64:f8:d8:21:99:b5:0f:d2:ed:88:de:e1:14:eb:b5:
                    e2:15:09:cc:32:6c:67:20:af:91:6c:44:ff:b1:25:
                    d6:ac:b8:02:5a:c5:53:35:59:18:73:a0:c5:c5:d4:
                    5f:22:94:9f:ee:05:f1:04:cb:2d:d7:ad:cf:f9:a7:
                    62:5f:ac:02:86:3b:ca:18:fa:a7:a0:22:23:e2:a2:
                    f9:84:ad:75:68:68:52:dc:37:fe:fd:71:97:6d:f3:
                    7d:8e:52:dd:ed:1f:57:89:dc:96:69:01:f1:7b:84:
                    dd:8c:e3:3c:b7:69:30:6c:26:52:8d:79:34:cf:a4:
                    3d:83:f2:f6:e4:fe:b5:98:18:95:1f:63:c9:30:05:
                    48:56:d3:83:a2:f8:77:21:53:e2:0c:f9:94:60:e7:
                    5b:f2:1d:31:9b:a6:75:c9:74:2f:39:ca:c8:3f:36:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:31:4E:4D:A1:5C:49:1F:9C:35:E8:C5:6C:36:25:EE:68:B9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/428e03fd-6536-3624-877b-7b6dc71eb02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:e3:c9:98:9a:77:65:e5:18:98:e5:35:9e:02:75:b0:0a:
         be:b2:14:13:5d:f9:83:74:01:c5:d4:1d:f2:5f:59:20:9b:1c:
         e7:d2:ff:ec:2a:06:31:55:33:23:c9:8a:b2:38:9a:b2:b9:d5:
         5e:71:b8:88:93:9d:13:82:fc:b5:66:5c:6d:78:e6:01:a3:46:
         53:db:61:92:73:c7:fe:70:6a:14:24:25:86:b2:96:6b:fc:be:
         12:1a:93:aa:f3:b7:ad:35:b5:9d:b6:25:88:f3:8e:2a:21:fc:
         f7:fc:06:62:5b:b5:6f:77:c6:ec:49:28:81:9b:9d:2f:74:05:
         1f:ca:9f:d1:76:b4:fb:70:47:f4:56:6e:2a:cd:92:38:91:fc:
         40:c0:80:19:02:0f:bd:96:82:a0:c2:c5:38:00:ac:e5:6b:f2:
         1b:d1:3c:b6:40:a7:0b:99:43:26:0e:78:02:85:51:44:31:84:
         16:78:5c:26:ea:dc:c9:66:30:be:7c:f6:4a:d8:57:02:2d:1a:
         92:28:74:85:1b:d0:42:fc:c0:e4:64:4f:c8:4c:14:a8:1b:24:
         a5:18:1f:60:77:0f:5c:79:6b:5f:d4:ec:7a:76:4b:c7:20:d9:
         dd:45:e7:e7:c2:3d:55:fb:79:02:75:77:3d:51:1b:a4:4c:88:
         20:1b:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----