Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8b9ee1ac-731a-3f8e-9a11-15717cafea8e.roa
File:                     8b9ee1ac-731a-3f8e-9a11-15717cafea8e.roa (raw, json)
Hash identifier:          MPCFGQYCPxQnmVPU40jPky4nCoHf5933s6XDy8Kn6oA=
Subject key identifier:   33:8F:74:97:A8:BE:55:07:A2:AA:D7:8F:2C:ED:CE:F6:87:D7:24:9E
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285845A9D9BDF372649B9B27C9E840
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8b9ee1ac-731a-3f8e-9a11-15717cafea8e.roa
Signing time:             Thu 25 Apr 2024 13:56:25 +0000
ROA not before:           Thu 25 Apr 2024 13:56:25 +0000
ROA not after:            Wed 24 Jul 2024 13:56:25 +0000
asID:                     212238
IP address blocks:        142.214.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:d9:bd:f3:72:64:9b:9b:27:c9:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Apr 25 13:56:25 2024 GMT
            Not After : Jul 24 13:56:25 2024 GMT
        Subject: CN=7068b369-1b06-4aa4-92cd-7720636222db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:a8:f6:87:0a:a4:f4:92:23:aa:65:c3:00:
                    95:cf:b8:85:13:ad:c5:e5:8e:ba:ec:c1:d5:2b:c8:
                    09:74:2c:3a:fb:79:ca:a5:5b:9f:1c:5d:6b:bb:a9:
                    de:ac:dc:78:7c:c3:74:40:df:d9:ba:9e:d1:ef:cf:
                    8b:ca:f8:d1:24:d9:94:4c:82:c5:41:88:c5:e8:bb:
                    f2:d5:1b:b8:c5:27:c3:a5:be:09:ac:14:b6:fe:ca:
                    b2:6b:86:4f:63:83:86:13:ff:01:ff:ac:4f:5d:99:
                    ec:9d:3e:2e:fa:6b:fc:30:8f:53:c3:1a:e8:26:51:
                    a1:e9:43:19:ca:94:6f:ab:8a:37:3a:0c:29:98:ef:
                    c6:ff:a0:bd:80:0f:f2:61:32:09:e6:3c:29:b6:42:
                    cc:22:dd:2a:d7:e2:e1:b9:32:e0:89:06:9c:7e:d8:
                    11:fe:34:e6:cf:89:5c:c8:19:31:ea:e7:7d:60:23:
                    9f:96:4b:3c:b0:07:29:67:76:05:5b:13:f6:95:49:
                    fe:70:2c:db:38:4b:b5:38:dc:af:56:0a:e4:49:5f:
                    0c:d7:1d:43:21:10:ed:d2:c4:38:ac:1b:4e:90:0f:
                    f9:ee:d9:a4:f9:0f:50:66:98:5f:9f:8a:12:be:2f:
                    76:21:ca:b3:61:25:07:cf:32:e3:d9:52:3d:29:29:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8F:74:97:A8:BE:55:07:A2:AA:D7:8F:2C:ED:CE:F6:87:D7:24:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8b9ee1ac-731a-3f8e-9a11-15717cafea8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:83:24:a0:bd:d5:d3:96:e4:75:25:4e:bd:f7:20:3a:c6:20:
         94:32:9c:b3:ab:83:57:09:71:04:27:f3:30:d1:f9:be:8c:5a:
         06:d3:95:c5:46:ec:fe:8e:34:4d:7f:ec:e7:d7:b7:79:0c:40:
         ec:d7:71:cc:15:93:a5:9e:6a:68:b7:88:5f:1f:9f:01:bc:e7:
         94:91:0b:82:0e:55:3b:01:36:04:ab:63:69:66:fa:a7:d8:89:
         d0:6a:83:e3:f7:40:e2:99:1c:25:c1:b9:91:1a:e1:e3:62:b2:
         86:8a:eb:46:ca:3a:a6:a6:64:82:34:10:92:8f:7d:06:d7:7b:
         83:43:ea:ef:48:43:37:59:ca:c5:36:58:34:14:d5:74:5a:36:
         49:d1:ff:c0:f5:be:12:e8:69:95:09:58:1c:d0:9f:87:07:a6:
         c5:36:4c:05:49:8f:e3:0f:93:3c:9c:33:35:85:ec:f2:c2:6e:
         0a:24:9b:48:34:07:0f:e1:e5:35:3f:b3:d8:4f:03:ff:ca:57:
         79:fd:41:6e:c5:66:09:f7:05:53:1b:61:6c:e8:46:0b:5e:0c:
         87:72:93:fd:40:a8:19:f5:82:42:c6:5f:0a:82:71:4f:0e:11:
         7f:c7:15:ee:c7:95:86:86:79:ea:8c:17:dc:1e:47:09:c5:92:
         b7:eb:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----