Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08544e6d-262e-3769-bdb2-c9841b589135.roa
File:                     08544e6d-262e-3769-bdb2-c9841b589135.roa (raw, json)
Hash identifier:          jC1emrL5/XPCPnn3ZAk41zBSyZXiKrNjST0+zgeK6+Q=
Subject key identifier:   5A:D1:14:C1:F4:18:39:7F:B5:36:EB:98:AD:20:73:C7:40:45:96:96
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61B4F943732399CA9BAF480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08544e6d-262e-3769-bdb2-c9841b589135.roa
Signing time:             Sat 24 May 2025 16:37:42 +0000
ROA not before:           Sat 24 May 2025 16:37:42 +0000
ROA not after:            Fri 22 Aug 2025 16:37:42 +0000
asID:                     213238
IP address blocks:        172.120.254.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1b:4f:94:37:32:39:9c:a9:ba:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:37:42 2025 GMT
            Not After : Aug 22 16:37:42 2025 GMT
        Subject: CN=28835ade-97af-4fe2-b2f1-a143aee8ced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:45:f3:64:bf:45:04:fc:d4:e8:57:49:56:
                    5a:b8:18:0a:7b:74:3e:43:f3:6e:94:86:f2:25:12:
                    8e:c1:67:fc:ee:f5:1b:d8:94:75:d5:0d:bd:db:3c:
                    cc:8f:de:7e:4f:d6:96:46:32:42:16:72:f8:76:c0:
                    72:c1:51:23:89:a7:ee:01:8f:46:82:96:1a:df:c0:
                    26:9e:68:d8:8e:83:7b:d9:3e:79:04:49:80:ed:29:
                    3d:86:f7:fc:12:18:cb:5f:f0:f7:4a:70:73:27:d6:
                    5f:29:74:ec:65:ae:91:52:eb:eb:23:58:11:f6:03:
                    81:c3:d7:b0:8a:44:ef:d9:46:b4:85:a5:cc:ab:30:
                    15:94:bf:df:c3:3d:17:f4:e5:b4:77:66:61:15:ca:
                    09:c3:17:92:5d:1b:48:b9:0a:a9:80:c1:6d:12:68:
                    f5:8c:1b:c9:b5:eb:d9:f7:a8:60:77:6f:b0:c4:ff:
                    ad:2d:3b:8a:17:65:7e:b1:6f:c2:b1:73:2e:95:ed:
                    09:c0:ff:51:32:79:50:01:ae:c5:8a:f6:83:77:46:
                    79:c7:80:e0:64:30:16:1b:91:d9:08:5a:9a:9f:65:
                    ae:3d:31:14:ce:9d:aa:bd:90:fd:e6:29:bd:bb:e2:
                    81:8a:51:7e:c2:13:0c:20:01:d3:42:48:57:1c:a0:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:14:C1:F4:18:39:7F:B5:36:EB:98:AD:20:73:C7:40:45:96:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08544e6d-262e-3769-bdb2-c9841b589135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:26:6f:a2:b8:2f:bb:11:a3:7c:f1:c9:d6:a6:15:8a:60:83:
         c7:2f:8e:0e:7a:c7:5b:fe:c1:a9:51:b3:bd:c5:f8:84:04:99:
         13:9f:9a:4d:7e:f2:d1:69:fa:56:a8:c3:22:5b:97:12:7c:6f:
         9f:9a:78:ae:f9:4d:a5:f7:c2:0a:2b:b0:93:44:c8:27:3c:ef:
         b2:ac:ed:2d:13:40:70:1e:68:c8:28:f1:51:a8:ab:2d:cc:dd:
         43:fd:be:eb:7f:47:7d:52:68:66:79:f3:1c:1e:e5:18:f3:8e:
         d1:b3:36:97:cb:ee:15:4b:44:9a:c5:43:12:31:f2:6e:c0:26:
         3f:66:77:6e:01:3d:09:a0:e5:f1:70:ab:9a:ea:bf:18:3a:3d:
         82:f1:2f:02:f6:b5:e8:17:45:e1:04:87:dc:f2:62:09:8d:ea:
         d3:d1:b2:55:e0:c3:23:51:cf:98:11:d3:7d:95:1f:3a:65:75:
         e1:b7:4c:ab:ab:71:a3:02:e9:15:35:21:ca:42:43:ed:a6:ae:
         96:3c:83:d5:d0:82:8f:65:7c:a8:79:8a:b9:ba:65:4b:43:fc:
         c0:c2:91:5c:02:fc:3f:d4:53:d1:92:b7:b8:5c:ed:9b:a6:da:
         04:03:6b:42:31:12:12:34:17:1c:1a:c6:f5:a9:5b:90:cb:fc:
         5e:f4:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----