Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/a6c4b36e-1cf2-3736-935a-620ecc98359e.roa
File:                     a6c4b36e-1cf2-3736-935a-620ecc98359e.roa (raw, json)
Hash identifier:          d4eaI7qY8e6/WzXOef2LFj6SKeGUkIBgbgRXiKZaYYM=
Subject key identifier:   95:03:26:44:F2:49:F9:84:75:60:0F:3D:19:0F:34:E2:D7:04:9D:6D
Certificate issuer:       /CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc
Certificate serial:       010D0C9F43285845EF8940D9AA4173C7D03AE700
Authority key identifier: 74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/a6c4b36e-1cf2-3736-935a-620ecc98359e.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     199765
IP address blocks:        23.162.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 15:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:40:d9:aa:41:73:c7:d0:3a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=34cb15d1-bc4f-414f-89cc-237eb8abb0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:87:de:fa:36:46:b2:f9:ec:68:08:e1:1d:
                    e9:76:95:f7:da:df:30:2b:da:65:67:0c:bb:a4:86:
                    f7:d1:c8:38:f3:b2:37:e8:3e:6b:e4:0b:1f:f8:a4:
                    55:3a:e8:41:f4:8c:2c:73:57:21:31:6a:db:26:12:
                    28:10:f8:50:58:a0:4f:38:1a:c5:36:bf:31:a2:fc:
                    f6:56:7f:98:38:55:94:a9:5f:39:d8:96:fa:c8:b8:
                    f2:ad:cf:34:6f:9e:ed:77:19:9e:86:7c:93:80:79:
                    61:04:0f:5f:c4:0c:35:1f:c3:3e:33:55:47:4e:20:
                    dc:f0:3c:0f:75:3f:85:d8:66:00:90:17:70:ad:6c:
                    98:fc:f0:3d:2f:f2:3a:23:c7:ee:ee:ca:ed:41:d2:
                    df:b2:d7:39:c0:db:5a:c5:49:aa:d9:95:f4:1b:49:
                    d6:e6:43:e0:3c:1e:4a:c3:43:d4:42:1f:12:99:78:
                    2c:c2:cd:76:00:bb:85:dc:e2:88:ea:b7:75:77:88:
                    c4:9a:a7:6f:db:28:a7:e6:38:91:b7:13:2e:7c:5e:
                    20:58:90:ad:0a:00:bb:2b:b5:c7:a6:46:35:0c:60:
                    91:ce:3b:d3:19:ca:ba:1e:f4:1e:b0:db:dc:ba:68:
                    66:2a:81:eb:71:fe:fe:8b:7d:07:3d:b5:fe:f0:94:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:26:44:F2:49:F9:84:75:60:0F:3D:19:0F:34:E2:D7:04:9D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/a6c4b36e-1cf2-3736-935a-620ecc98359e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.crl

            X509v3 Authority Key Identifier:
                keyid:74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:61:70:8b:11:b3:35:65:dc:23:3e:93:ef:b0:28:4c:8e:00:
         54:05:54:f2:c6:13:95:0e:70:52:ce:09:46:8c:ee:7d:4e:6f:
         a4:d3:b9:13:5f:ad:e6:58:09:1f:9d:20:4a:66:a7:6c:b3:5a:
         43:62:08:e6:a6:ca:d2:41:c3:ad:67:66:2f:77:5d:2b:d6:d8:
         8a:59:bf:f9:a3:fd:9e:e5:99:ca:14:83:1f:89:81:d5:18:35:
         ab:6a:85:95:92:38:d3:6a:fd:59:b9:cf:89:91:bf:79:1a:7b:
         16:17:c2:f5:ab:5f:82:df:cc:13:81:25:ce:a3:9c:e9:dc:71:
         6e:79:c2:0f:38:8c:54:94:a6:87:bd:5b:9a:5e:15:e3:9a:21:
         df:49:a7:39:bd:27:5d:dd:08:a1:3f:e6:09:5e:ef:79:cc:4b:
         24:62:4b:23:25:05:ad:e4:4c:a4:ca:3c:34:07:8d:27:03:1f:
         0a:64:2a:86:24:eb:c2:58:83:a7:b6:07:82:0a:83:78:85:1e:
         5e:5b:19:02:3c:13:48:31:e9:ba:e0:56:41:21:9a:74:e3:8f:
         b3:bb:e7:9f:0d:51:b9:a3:d1:87:2c:d0:ca:2f:89:93:fc:93:
         b5:ff:57:14:cc:d4:d3:90:a7:91:b9:e1:b8:c1:d2:78:99:e2:
         a0:8e:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----