Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a156453-07f5-3ce2-9142-0709adfc55eb.roa
File:                     4a156453-07f5-3ce2-9142-0709adfc55eb.roa (raw, json)
Hash identifier:          lRal4tDr4Zycj+7Oul41Bt1mv+0I92yWpgCdi5RnkEo=
Subject key identifier:   8B:E5:35:5B:45:C9:31:9F:1E:69:CA:86:4A:1E:53:30:27:EB:D3:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844E14910B6D0E3A0B27B08E7A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a156453-07f5-3ce2-9142-0709adfc55eb.roa
Signing time:             Tue 13 Feb 2024 17:43:14 +0000
ROA not before:           Tue 13 Feb 2024 17:43:14 +0000
ROA not after:            Mon 13 May 2024 16:43:14 +0000
asID:                     834
IP address blocks:        199.115.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 16:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e1:49:10:b6:d0:e3:a0:b2:7b:08:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 13 17:43:14 2024 GMT
            Not After : May 13 16:43:14 2024 GMT
        Subject: CN=9c70058a-3a69-4ea7-a51d-45e93087da77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:de:da:55:0a:8c:1b:fa:4b:0e:4d:b3:e2:
                    ff:11:0a:a0:da:65:3a:62:a8:36:fc:13:1a:36:16:
                    2f:17:1b:9d:af:10:1d:42:69:ec:d2:19:65:1f:de:
                    ee:5a:21:f7:15:1b:a9:5d:15:58:f3:65:16:d7:43:
                    bf:fb:95:5e:ff:6e:a8:7b:c9:96:ce:9d:6e:4c:47:
                    5a:9e:57:db:cc:29:71:5d:37:d0:34:92:55:0e:d8:
                    55:27:23:2a:b5:0c:39:9a:9e:cb:54:61:28:e5:24:
                    cf:65:31:cd:ef:dc:f8:e3:a3:d6:7e:ba:20:29:2c:
                    3e:c1:9e:d9:41:3a:15:b6:f8:36:c8:fb:f4:9d:f2:
                    84:08:72:c3:71:38:14:65:35:14:62:8e:3a:98:2e:
                    67:77:84:d0:26:33:4a:09:5f:cf:90:6c:c0:d8:ed:
                    77:b8:1d:74:cb:f6:8c:1a:ff:f5:cb:22:11:fa:84:
                    07:3c:67:26:0c:ec:30:6e:ce:45:e1:1d:ee:5d:52:
                    86:d0:17:c8:9e:fc:1c:cd:49:33:0f:38:69:c4:31:
                    14:7c:de:0e:54:f6:b8:da:18:e4:c6:7a:14:56:fc:
                    ee:d0:e4:22:0a:f7:d6:13:dc:48:da:37:83:15:e0:
                    69:80:ff:29:13:be:7c:22:e2:08:63:9a:e6:a4:9a:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E5:35:5B:45:C9:31:9F:1E:69:CA:86:4A:1E:53:30:27:EB:D3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a156453-07f5-3ce2-9142-0709adfc55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:94:a7:5e:de:41:8b:d1:28:01:6f:74:2a:65:64:8a:e8:f5:
         1c:59:46:cf:b4:1a:4b:43:c5:64:e3:ec:87:90:61:04:c1:08:
         58:76:a0:7e:22:2a:1f:81:6d:43:58:79:a0:8b:e4:05:d6:d3:
         db:88:ac:a9:c2:22:41:64:43:27:11:b8:53:6a:3e:49:30:39:
         35:86:98:dd:23:0b:69:6b:51:e4:83:3e:44:de:97:14:be:66:
         0e:57:58:bb:94:89:21:24:f0:52:9a:a6:81:97:9f:ef:bc:b7:
         cc:b9:5d:17:29:5e:a3:46:5f:d4:2b:dc:6d:0e:6c:d9:3c:ae:
         76:d5:0a:ab:9d:6b:4f:29:32:ee:88:1c:a5:f1:df:b1:de:57:
         d5:77:97:51:ae:00:dd:dd:27:e4:e1:7a:1e:04:75:26:1b:ed:
         2a:fa:1a:0e:fb:89:91:c3:63:aa:a0:3d:b4:c7:85:94:e1:0c:
         a7:f4:fa:52:84:f4:44:b5:15:46:87:04:6e:b3:68:e2:6b:61:
         f8:0a:1c:d1:ad:53:16:d0:19:d5:9f:ae:c7:c4:dd:c3:55:fb:
         79:6b:8c:99:0e:51:ce:5a:75:c4:e8:6c:13:eb:41:31:0c:e0:
         5b:43:ed:67:57:1e:a3:7f:1c:f8:aa:5a:f3:71:7e:b9:96:9a:
         5e:17:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----