Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359e0180-a5d9-37f5-9c3d-9b05ae581833.roa
File:                     359e0180-a5d9-37f5-9c3d-9b05ae581833.roa (raw, json)
Hash identifier:          ovXa3brg9/GQMG2XhK3UeBuf2HauYK5BaM8uwHVIfic=
Subject key identifier:   97:C9:F4:B1:4A:CA:E4:47:48:68:F8:47:24:4E:4D:26:AD:4D:D7:2A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61DE39F75A974F2F2F1FCC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359e0180-a5d9-37f5-9c3d-9b05ae581833.roa
Signing time:             Sat 24 May 2025 16:42:54 +0000
ROA not before:           Sat 24 May 2025 16:42:54 +0000
ROA not after:            Fri 22 Aug 2025 16:42:54 +0000
asID:                     213238
IP address blocks:        142.252.140.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1d:e3:9f:75:a9:74:f2:f2:f1:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:42:54 2025 GMT
            Not After : Aug 22 16:42:54 2025 GMT
        Subject: CN=daa55116-aa9d-4e55-9ee1-ebfebf9864d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:c1:4e:65:e2:cd:21:80:da:73:2d:09:ed:
                    fa:2e:57:68:62:88:c6:90:8f:98:f2:32:a9:5f:9c:
                    78:9c:c5:27:f4:85:f8:63:ff:00:21:22:38:2c:6c:
                    cf:58:7a:0f:9e:1c:ab:8f:7c:dd:c0:fa:5c:00:38:
                    10:f1:7e:93:af:d7:2c:07:ef:6e:31:86:b6:7d:38:
                    76:a2:bc:36:cf:b9:62:34:67:fe:67:25:29:27:4a:
                    75:45:c2:34:6d:9c:0c:17:8f:fe:69:71:61:99:9b:
                    d5:ca:95:e4:f1:3b:b4:17:61:72:31:7b:93:89:c3:
                    4a:d4:45:f5:c2:0d:98:70:13:b5:91:8a:ef:b3:cc:
                    0e:e9:92:ec:f1:a5:1d:94:e0:a7:dd:32:48:1c:e2:
                    59:5a:3f:a0:f4:04:88:1c:73:3b:0a:cc:83:cf:1b:
                    f7:28:0f:c2:34:e3:0b:6f:13:9e:90:c2:68:4b:8d:
                    49:44:64:d7:a3:43:5c:d2:e9:8e:97:d8:50:52:27:
                    c5:b1:e8:18:14:83:38:13:3e:76:2a:a8:fb:85:b4:
                    9c:f6:d7:c6:1d:cb:05:18:e9:a4:b3:1a:86:09:61:
                    ee:1d:eb:ee:b9:6e:55:77:3f:17:14:9b:a4:1d:6c:
                    d6:62:86:ce:60:d4:d8:4f:6e:81:83:db:41:b7:10:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:F4:B1:4A:CA:E4:47:48:68:F8:47:24:4E:4D:26:AD:4D:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359e0180-a5d9-37f5-9c3d-9b05ae581833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:6f:ba:10:3c:fd:70:a2:af:3e:0e:51:9f:95:91:d2:33:
         d1:d7:f5:b3:e0:ac:c4:2d:93:16:85:e9:a0:ea:b9:f7:05:14:
         4c:74:4f:eb:34:7e:ee:81:64:fe:5c:9f:36:ba:1c:44:b3:61:
         7c:16:12:06:44:8d:b8:3f:20:9d:fd:f2:0e:c3:a7:6a:62:9c:
         c4:58:f1:fd:ce:44:64:17:45:dc:94:13:69:cc:71:eb:a9:e6:
         ed:e2:c4:40:ff:dc:7c:8e:f4:61:2e:ab:76:0e:c9:a9:9c:1f:
         e0:c7:31:83:b1:cf:bc:bd:0d:0c:e5:ca:78:59:10:00:bd:c1:
         ce:91:05:27:0c:d0:17:18:24:57:e4:bb:9f:b7:00:16:f4:0a:
         fc:b3:94:6e:f8:6e:84:7b:80:2b:ec:1f:a2:13:4e:6a:8d:56:
         43:3d:a6:5e:3a:3f:d9:a9:28:66:06:9d:06:cc:de:0b:e2:ee:
         4a:a1:b4:df:31:d7:38:f8:9f:2a:10:0c:75:c8:65:52:4e:4c:
         84:35:55:e5:6f:0d:06:3f:3f:07:3b:8a:b9:1a:13:3c:bf:0e:
         9c:65:ec:0f:de:ce:82:88:12:07:c9:1a:ec:aa:92:f8:67:d8:
         2e:fe:50:c1:19:a8:5b:70:9a:d8:68:a1:0f:cb:29:e9:9d:00:
         62:87:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----