Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4996a887-4660-3b64-afba-f2cb4a4de4c7.roa
File:                     4996a887-4660-3b64-afba-f2cb4a4de4c7.roa (raw, json)
Hash identifier:          yuxKT1ud/0iAm/PQ0xhnwZv0fEP3mvYhaWRvA0+34hU=
Subject key identifier:   85:AE:A4:4E:67:DC:0B:5C:A4:F9:C3:E0:D6:C9:C1:A9:3A:58:90:B7
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F43285844F47E25687CEC771D72702060
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4996a887-4660-3b64-afba-f2cb4a4de4c7.roa
Signing time:             Tue 20 Feb 2024 14:50:33 +0000
ROA not before:           Tue 20 Feb 2024 14:50:33 +0000
ROA not after:            Mon 20 May 2024 13:50:33 +0000
asID:                     400384
IP address blocks:        141.195.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 14:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:7e:25:68:7c:ec:77:1d:72:70:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Feb 20 14:50:33 2024 GMT
            Not After : May 20 13:50:33 2024 GMT
        Subject: CN=09822840-d2cd-4f57-97af-d201e5fca436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:15:ea:d4:6a:94:a3:27:a4:c4:8d:a3:0d:
                    e9:98:db:df:4b:b6:9b:75:5d:e9:83:71:be:35:ab:
                    f3:a5:ab:c3:d4:0a:2a:83:45:56:ed:84:64:4c:4d:
                    fb:7c:81:d9:48:6d:31:06:71:11:b5:ec:58:1e:54:
                    24:8f:7c:da:c5:25:0c:84:a7:68:42:72:0d:a3:83:
                    84:41:48:3c:7b:92:78:47:83:68:2e:70:5a:63:1f:
                    e5:65:d0:71:41:dc:52:ac:82:42:c5:97:b5:ab:e1:
                    ab:17:f4:d1:9d:00:5c:27:3f:aa:54:10:d7:62:3e:
                    48:c3:92:8e:9c:2c:fd:67:11:a8:92:96:db:fb:85:
                    f5:db:bd:9b:1e:32:44:a2:97:e8:13:14:54:bc:99:
                    03:d1:ec:1f:ed:fa:80:a0:55:f7:57:65:3e:4e:3c:
                    ad:02:8f:a5:5c:2b:8e:93:36:e1:6e:01:6a:9c:9d:
                    57:6e:89:56:a2:ed:a3:e6:c2:a3:da:b2:f3:8b:1a:
                    0f:9e:fb:8e:41:7e:d5:4e:f2:67:7b:43:8e:4e:e2:
                    91:37:db:6e:99:db:ae:e5:70:a0:57:82:f1:aa:2e:
                    03:89:5d:b5:c7:3e:1c:f4:57:b9:b5:e8:99:b3:62:
                    31:41:49:b2:d9:0e:3b:61:35:d1:c1:50:84:41:e6:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:A4:4E:67:DC:0B:5C:A4:F9:C3:E0:D6:C9:C1:A9:3A:58:90:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4996a887-4660-3b64-afba-f2cb4a4de4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:91:22:bd:17:b1:6b:fb:70:c6:9f:18:c3:50:96:98:84:03:
         cc:e3:84:d2:7b:65:8c:08:c8:73:1f:e3:70:7f:70:a9:85:0b:
         58:79:09:e8:a6:17:a9:52:90:94:29:4a:52:ad:a2:ab:6a:5f:
         7c:10:0b:d0:ef:5c:33:6d:43:72:1f:cd:92:21:1b:e1:71:3b:
         cb:ff:11:ed:ef:a8:1b:64:02:78:41:3c:7d:11:4a:bf:80:72:
         fd:77:7a:4f:03:0d:aa:10:67:32:72:b2:e9:93:3f:d0:cc:6a:
         63:6c:04:e9:4d:75:b2:27:d6:e9:70:b5:d3:c0:18:c0:10:b2:
         cf:1c:0c:0a:13:6d:ba:be:4c:0e:77:d3:4a:d7:8c:00:a8:b2:
         92:c2:b8:c7:aa:bc:f7:5d:7d:a3:95:c5:05:e8:86:01:07:4a:
         a0:25:29:f9:1b:f4:bf:87:29:34:c9:e4:89:c8:c1:8d:85:39:
         3c:f1:13:ee:fd:47:d5:81:b0:19:f7:f7:9f:3d:dc:ea:ef:3f:
         fc:72:fa:40:01:a4:62:2b:f1:8c:34:72:18:19:8a:d0:93:91:
         fd:0b:c1:da:56:8c:3e:59:d1:cd:e7:16:38:1b:b5:fc:f7:9f:
         75:80:17:c8:91:1b:ac:81:a8:77:00:75:47:09:73:97:39:ba:
         bb:5b:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----