Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/6b3d56fd-0524-34b8-bde8-5a000e7568bc.roa
File:                     6b3d56fd-0524-34b8-bde8-5a000e7568bc.roa (raw, json)
Hash identifier:          /mmMRPeTIwgyB2I4cWb66fX6YJ55ua76d3gw6OVfXx4=
Subject key identifier:   09:39:22:5C:34:35:CC:D4:69:2F:EA:E8:0E:6D:B8:BD:C6:9A:3D:39
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F432858473040BDBDD2396ADF5793A980
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/6b3d56fd-0524-34b8-bde8-5a000e7568bc.roa
Signing time:             Thu 12 Sep 2024 10:09:12 +0000
ROA not before:           Thu 12 Sep 2024 10:09:12 +0000
ROA not after:            Wed 11 Dec 2024 11:09:12 +0000
asID:                     9009
IP address blocks:        141.195.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 12:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:40:bd:bd:d2:39:6a:df:57:93:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Sep 12 10:09:12 2024 GMT
            Not After : Dec 11 11:09:12 2024 GMT
        Subject: CN=1c03b2c7-46e9-478e-aab5-9a7d368563a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:40:a9:79:f6:6e:fa:24:1f:14:82:5a:41:
                    46:4d:1b:f3:31:fc:ad:b9:f4:db:2b:2a:09:05:2a:
                    ea:1f:7e:75:ca:84:8c:06:76:77:ae:9a:ec:76:3d:
                    07:68:69:c2:a3:e2:fc:57:eb:23:cf:04:62:2e:01:
                    e3:65:33:94:42:a9:4d:1e:8e:4a:ab:09:56:cc:ba:
                    e3:2f:88:ff:fa:6a:8e:af:f3:fd:b6:f3:5a:04:32:
                    62:de:4e:40:03:7d:ee:d7:89:c0:ac:9d:86:86:d2:
                    2f:16:66:75:72:35:96:0f:fd:40:5a:db:88:3d:b5:
                    1c:5b:27:54:5b:a8:10:ca:e1:dd:01:4c:de:5b:23:
                    e7:77:d7:66:13:04:d2:39:2c:3b:5f:00:17:ee:ae:
                    55:63:5f:c6:ad:f8:5e:50:f7:b7:92:84:09:aa:85:
                    06:61:2f:32:b5:97:d9:b1:cb:c1:fd:f1:c8:f0:17:
                    f3:99:6c:7a:da:52:aa:20:c4:a1:61:c1:c0:a3:24:
                    3a:a2:72:4e:a0:0b:1e:3e:59:e0:87:c8:1b:56:98:
                    2e:ee:de:38:5d:12:8a:60:95:74:a3:08:f0:61:96:
                    b3:6f:55:b0:5f:33:12:f4:74:9f:96:a0:a9:7d:ac:
                    5a:9c:7f:b0:ea:29:76:ad:04:78:29:c2:b5:8d:18:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:39:22:5C:34:35:CC:D4:69:2F:EA:E8:0E:6D:B8:BD:C6:9A:3D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/6b3d56fd-0524-34b8-bde8-5a000e7568bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:95:ca:72:7e:2f:f4:ce:17:c2:db:1f:bc:ad:f7:1f:de:
         3d:88:84:5e:0b:64:be:bd:00:23:41:db:30:fe:f7:07:40:04:
         43:fe:ed:6b:91:2e:01:bb:30:24:09:9c:00:3b:e5:9b:9e:51:
         5f:23:14:47:ba:7c:c5:ba:6a:c0:4e:49:ef:6e:f7:d2:5a:70:
         56:20:e8:b1:e5:70:d8:b6:b6:7c:b1:85:20:1e:be:a1:76:5b:
         dd:3a:4e:0f:20:94:85:11:a4:ed:28:b2:9b:e6:56:e0:3e:99:
         e5:29:1e:f7:24:35:04:da:52:ba:a9:00:61:52:75:d9:5b:5f:
         85:39:13:b1:e7:ba:ee:24:6e:65:a5:fc:22:58:57:ad:e1:03:
         84:ed:9c:90:bf:7b:27:16:b5:08:cd:71:23:c2:02:f0:90:22:
         fa:97:32:88:ce:6b:2c:08:f7:6a:5f:ad:11:0d:f2:9a:93:6c:
         d1:b7:83:5f:26:c6:7c:59:5a:2b:0a:cb:e1:c7:cd:e3:1c:f2:
         89:2c:e9:dc:4a:a0:58:5c:82:58:a6:04:dc:b8:e0:cf:56:93:
         cb:5b:9e:d3:8c:a1:4f:2c:72:04:93:1e:0e:50:39:83:87:62:
         ee:69:50:db:27:a8:95:d3:24:96:b9:ec:78:05:62:97:fe:e4:
         7f:ce:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----