Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa
File:                     e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa (raw, json)
Hash identifier:          tBdZUYwgqRE130nf5RhkylxEGFQ8PLpdnGo2vYqNaP4=
Subject key identifier:   A0:AF:C7:E7:FE:47:CC:0B:72:93:43:A7:3A:BB:08:39:D4:6B:7D:E9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E8A7B06DBCF2BF6973C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        204.85.24.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:8a:7b:06:db:cf:2b:f6:97:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=44d1d9ee-b1da-4d81-a101-0f4a5b78733a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:aa:15:79:72:a5:79:3d:1e:dc:69:3e:21:
                    7c:67:5a:f1:48:11:62:c2:95:1e:12:af:12:35:f0:
                    50:6e:fb:a8:da:02:dd:cf:6b:e1:4c:e7:49:20:5e:
                    90:87:c4:0f:5b:f3:78:51:ca:ea:37:1d:73:65:c6:
                    de:26:ef:17:60:85:1a:f6:28:be:3d:cf:0c:d5:0c:
                    96:bf:20:fb:01:69:6b:dc:15:a4:a9:83:74:58:6c:
                    de:63:23:78:11:94:04:e0:3f:ea:19:b5:37:dc:b6:
                    0a:69:cd:46:a1:26:0e:81:c2:62:22:d6:a6:0f:cf:
                    d5:3c:2e:fb:1a:4d:c3:59:9c:05:33:28:02:fb:b9:
                    a7:96:38:c7:38:cb:8e:e3:8b:3d:ea:fd:1a:87:86:
                    5e:6c:93:f1:0a:2b:9a:c1:11:af:f5:12:50:c9:c7:
                    a0:05:c3:61:df:40:84:41:f3:56:41:88:fb:ea:13:
                    14:ce:56:61:3c:35:ed:7f:08:66:bb:8c:95:d7:eb:
                    5d:9c:16:a7:18:d2:be:6e:0b:ac:03:20:a5:ce:ca:
                    6d:cb:3b:30:96:2d:6c:bf:94:73:d4:d1:99:38:7d:
                    3c:47:7d:0e:28:fc:47:3d:f5:f7:6f:9a:2b:25:e6:
                    2c:35:81:a4:05:c2:45:a8:69:6f:b3:41:e6:ec:07:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AF:C7:E7:FE:47:CC:0B:72:93:43:A7:3A:BB:08:39:D4:6B:7D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e75d6142-4b98-3319-a5fb-a4ddaf8e27c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:79:7a:6a:a6:0a:e8:10:e7:48:69:e1:68:30:b1:d2:c2:08:
         4b:0a:76:38:76:a4:c8:7d:24:25:75:7a:1d:61:64:cd:7d:af:
         80:fe:b5:3b:31:56:4b:1c:81:24:56:de:c0:57:0f:67:0b:58:
         8e:7d:80:b4:ec:26:2a:73:29:8d:ef:21:fd:4a:95:05:d9:dd:
         19:32:41:7a:bb:1d:83:93:19:d3:30:2e:09:36:ca:82:ad:78:
         98:37:5b:c2:3e:f0:da:05:ad:2d:c5:79:f6:8c:cd:9f:e7:d4:
         ce:2b:51:5b:22:41:db:1b:ab:45:a6:d1:e2:27:79:63:47:b7:
         45:92:47:11:50:4a:3a:1f:71:37:a2:6f:5c:ce:4e:bd:70:f5:
         9c:a3:77:00:7a:d8:c1:ac:82:f4:52:0b:dd:6a:db:a1:c2:b3:
         c8:9e:40:b3:de:8a:66:4d:0c:12:82:66:e9:3e:ce:d4:88:c6:
         81:46:c3:7b:37:55:34:4d:d5:95:4d:f5:25:dc:a0:e8:0f:92:
         30:50:dd:81:17:f6:84:f8:18:39:17:98:d6:75:c6:4d:2a:11:
         0b:bf:0c:7c:15:ce:15:ed:94:2d:ca:ab:d6:bc:66:c0:19:c8:
         52:4a:e2:f4:0e:4f:cd:aa:fc:c1:88:cd:d9:5d:28:db:c1:06:
         12:d3:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----