Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a089249-a96d-3196-a958-a7d7f03ceab6.roa
File:                     3a089249-a96d-3196-a958-a7d7f03ceab6.roa (raw, json)
Hash identifier:          CX9UhVrIgLd+0cWNKjZzMYqzhGE+sj4iJwPO2/xYid4=
Subject key identifier:   94:CD:9A:FA:62:96:1B:8D:6E:7C:39:13:DA:7A:B5:F3:E7:9C:96:1D
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858461EFECCA1931707BE8F6E3F54
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a089249-a96d-3196-a958-a7d7f03ceab6.roa
Signing time:             Thu 06 Jun 2024 13:00:32 +0000
ROA not before:           Thu 06 Jun 2024 13:00:32 +0000
ROA not after:            Wed 04 Sep 2024 13:00:32 +0000
asID:                     0
IP address blocks:        192.124.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 21:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1e:fe:cc:a1:93:17:07:be:8f:6e:3f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Jun  6 13:00:32 2024 GMT
            Not After : Sep  4 13:00:32 2024 GMT
        Subject: CN=8a7f4ae3-5de8-4552-9699-8d30f6976bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:df:6b:70:4c:ab:95:ca:dc:5a:c1:2e:38:
                    23:8d:ff:7e:8b:6b:68:c8:36:de:47:a9:cc:0f:e8:
                    79:86:b9:fa:a2:ea:c6:ba:09:b9:f0:1d:6f:9f:6c:
                    a7:87:c4:d9:57:89:ef:f6:f0:81:f4:17:a6:3d:a4:
                    31:c2:79:1f:e6:10:47:66:b6:07:7b:c6:9c:64:55:
                    ef:09:af:7f:61:7c:77:a8:8f:2b:4f:8c:6d:d5:cf:
                    07:f6:95:a2:99:94:cf:0b:eb:4f:8b:60:f6:bd:8c:
                    14:22:ed:7c:54:00:04:21:d3:d6:16:f3:7a:36:c5:
                    82:ec:c7:71:21:80:0e:d8:8b:c6:e2:ad:65:75:fb:
                    32:f4:97:b3:12:44:12:96:52:8d:d8:36:70:b8:00:
                    8b:54:e0:b4:6b:ea:dd:8f:df:ca:f8:6e:fd:54:a2:
                    22:51:45:00:49:72:51:50:75:b9:e1:14:92:97:ad:
                    40:76:fd:51:02:ad:d1:a3:67:24:b0:1f:f3:ac:17:
                    2f:45:8e:bc:d7:59:67:f2:8b:38:d8:8b:02:14:7f:
                    ee:64:ea:05:f8:f7:a9:bb:17:4d:ee:09:20:98:4e:
                    6b:55:19:03:7f:d1:e3:46:62:94:6e:81:57:4e:ac:
                    0b:49:39:3d:d5:30:25:49:a7:39:de:25:41:29:28:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CD:9A:FA:62:96:1B:8D:6E:7C:39:13:DA:7A:B5:F3:E7:9C:96:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a089249-a96d-3196-a958-a7d7f03ceab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:7f:a1:ff:03:99:79:08:99:3f:63:f2:07:fa:a9:bd:17:
         cd:11:51:94:61:d9:58:4a:b7:49:68:63:df:0a:e3:2a:c0:66:
         95:59:b2:9b:7c:13:fe:0a:85:87:66:3b:ca:3e:65:cc:86:e6:
         45:eb:15:b6:71:fb:f1:c6:5d:16:8a:d4:90:fb:8f:66:92:08:
         ba:a6:82:63:f2:41:cb:a8:ca:23:82:f5:d9:e2:5a:3a:e6:e5:
         9a:cc:de:fc:5b:2a:2d:dd:f7:a3:92:6b:d6:1f:c6:4b:97:4b:
         8e:6a:cd:68:50:1f:c7:7e:bd:5e:f1:af:ce:12:50:90:3a:92:
         55:40:4f:e4:fd:77:82:3b:e1:b0:6b:3c:40:8f:7b:c0:53:c3:
         4e:bc:24:0c:c8:d1:f7:31:3c:9b:83:25:d3:a9:74:f5:7f:6f:
         68:15:9c:ba:b8:19:f0:2b:77:d9:cd:df:a7:4b:df:87:dc:4c:
         98:f3:9c:5e:5b:d7:9c:9b:99:50:27:27:7f:b8:a4:6c:ca:ab:
         d0:bc:60:b5:b6:cf:d2:01:ea:8e:8f:ba:87:1b:b4:02:47:b1:
         34:26:e2:6f:28:48:e0:fd:21:b2:c7:42:02:6b:f8:43:1d:26:
         6a:b2:da:82:05:4b:a3:52:e6:cc:0d:dd:39:4e:83:10:d9:07:
         70:75:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----