Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b8996136-a913-32c2-9fc2-b3cf0df28aa9.roa
File:                     b8996136-a913-32c2-9fc2-b3cf0df28aa9.roa (raw, json)
Hash identifier:          iCqFSJQTeKuAisPMeBEiF7pHgSZFpaNaPd7l22jsvUU=
Subject key identifier:   BD:8E:DF:50:9B:02:E7:2B:4F:D0:A6:60:91:6D:03:03:EE:4F:B3:C3
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F43285849D704B6324B5086F8F1B7704C
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b8996136-a913-32c2-9fc2-b3cf0df28aa9.roa
Signing time:             Tue 13 May 2025 13:22:07 +0000
ROA not before:           Tue 13 May 2025 13:22:07 +0000
ROA not after:            Mon 11 Aug 2025 13:22:07 +0000
asID:                     29
IP address blocks:        192.26.88.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 15 May 2025 19:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:04:b6:32:4b:50:86:f8:f1:b7:70:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: May 13 13:22:07 2025 GMT
            Not After : Aug 11 13:22:07 2025 GMT
        Subject: CN=ec0079d3-7989-4a9b-af97-8ff848b36d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:52:ec:f0:57:92:8b:4c:3d:ae:b7:b7:eb:
                    92:29:a8:0c:ab:05:dc:2f:5e:cd:3c:d8:bf:a5:a5:
                    a4:05:e3:84:41:2d:08:c4:d7:de:bf:5c:fa:05:44:
                    b8:5a:43:4f:df:c0:da:7b:72:2f:c2:c8:62:84:eb:
                    46:fe:71:3d:bd:1a:cc:92:28:b7:36:0f:8f:12:59:
                    55:a6:a0:ff:45:e9:ec:80:4d:20:5a:7c:6f:65:32:
                    43:9e:4b:80:d8:9d:26:db:38:ef:0d:dc:aa:ee:29:
                    e8:7b:71:e2:7b:9f:82:6b:53:57:1a:0b:d1:3b:c2:
                    39:9f:6a:5d:cf:d1:dd:8d:70:ab:b1:46:1f:3e:75:
                    70:4f:d3:ef:39:2b:9a:30:46:0c:1c:9b:7a:0f:54:
                    68:30:14:0d:4d:c6:42:cd:56:a9:da:7e:74:cd:91:
                    03:34:19:7a:c5:e3:d5:99:09:be:f8:5c:03:4f:c6:
                    f2:76:52:ad:01:b6:5b:d8:73:34:f4:c4:df:41:ea:
                    64:bd:c7:fb:1a:2b:3f:9b:ee:77:e5:6f:84:5a:b8:
                    cd:06:cc:7b:01:4a:5d:e8:b6:ea:9b:9a:be:86:5d:
                    15:e7:e9:d7:49:2b:7b:f3:46:78:24:a6:db:36:82:
                    ea:5b:f4:5c:a3:fb:6f:00:df:0d:90:c6:03:fa:8d:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:DF:50:9B:02:E7:2B:4F:D0:A6:60:91:6D:03:03:EE:4F:B3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b8996136-a913-32c2-9fc2-b3cf0df28aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:74:6c:b1:d0:e0:8b:90:3b:2b:a8:7b:b0:f2:df:32:e2:bd:
         f7:d8:68:ea:77:fa:a0:96:d6:50:f9:84:02:67:3d:f7:49:bf:
         63:df:45:a5:17:a8:b3:14:e6:2b:22:9c:da:ca:95:e9:97:ba:
         5a:2a:d2:1c:2c:93:27:8c:7d:01:7a:35:d0:08:b3:20:ca:55:
         7c:a0:79:7f:52:56:1e:ce:ff:4c:89:40:ec:31:e0:30:1a:cd:
         f7:9b:1d:95:04:a4:ae:a9:25:01:cf:d2:25:d7:a5:11:e3:7b:
         9e:00:81:80:8e:66:30:6e:eb:3c:8f:76:38:8e:34:a2:1d:3d:
         34:f4:d0:f6:5b:cc:32:bb:d5:c5:d4:df:25:70:10:78:e5:26:
         81:f0:d9:70:4d:a2:a7:5b:df:25:01:24:2c:5d:4a:33:e5:1b:
         a6:94:94:a3:31:50:2d:c4:e5:33:a1:1e:2b:4e:7e:2f:83:05:
         41:8b:4d:6a:ac:f3:09:c3:0d:af:fc:a6:f4:b2:71:84:83:63:
         d3:6f:da:8f:ae:28:8c:d4:6b:68:8a:0a:fd:f5:13:c3:fb:fd:
         36:b2:43:b6:1e:dd:bf:c5:4d:e1:8e:ba:74:f7:36:df:69:ee:
         53:17:4f:52:3b:33:15:91:c2:3c:aa:6e:8f:29:5a:b2:87:d6:
         0f:5c:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----