Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0e8c7b8-c72b-30fe-b347-f8e865ef3554.roa
File:                     e0e8c7b8-c72b-30fe-b347-f8e865ef3554.roa (raw, json)
Hash identifier:          FkxxEnmwzQa/X3ww44lqXzz/MPAxnvwSmCWvslqtifU=
Subject key identifier:   71:FB:8D:05:95:32:CA:C9:A5:9B:B3:F3:7D:54:B9:0B:1F:EA:74:B0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584429FEA68715610B56D6521900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0e8c7b8-c72b-30fe-b347-f8e865ef3554.roa
Signing time:             Sun 10 Dec 2023 02:00:16 +0000
ROA not before:           Sun 10 Dec 2023 02:00:16 +0000
ROA not after:            Sat 09 Mar 2024 02:00:16 +0000
asID:                     9009
IP address blocks:        45.74.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:29:fe:a6:87:15:61:0b:56:d6:52:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec 10 02:00:16 2023 GMT
            Not After : Mar  9 02:00:16 2024 GMT
        Subject: CN=d11ee4a6-2866-43c8-872e-25d101c16063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:e0:ae:d5:59:dc:cd:14:4d:e0:f7:7b:44:
                    9f:8b:ba:99:84:0d:4b:50:b7:31:6e:2f:0b:5e:cc:
                    ee:70:27:66:1c:08:ec:19:cf:b6:c8:ad:27:05:36:
                    ef:dd:d4:ed:40:e7:10:da:3f:d7:4f:74:1e:cd:0e:
                    ce:4f:02:06:08:62:14:30:4a:9d:4e:91:d2:7e:ea:
                    de:fa:bd:43:5f:41:b7:5a:ca:d0:0b:c8:f3:f9:a7:
                    1e:a6:c0:dc:45:cd:f9:7d:36:b6:10:25:30:af:d0:
                    83:db:95:70:ca:b3:cc:cf:ea:1f:ca:4f:71:a4:71:
                    fa:bf:23:87:f0:a8:10:83:71:e1:33:06:ce:6e:79:
                    29:18:95:f8:18:00:4b:0e:27:de:cd:4b:78:84:c6:
                    c0:e4:2d:a5:d1:14:69:12:f5:14:cd:1f:ea:05:ac:
                    19:c0:02:0c:19:5c:b5:29:90:91:a2:75:e1:a9:0c:
                    26:a6:9d:ef:46:0f:64:33:38:c4:c3:a1:f6:b4:21:
                    8e:8a:6a:55:d1:95:a7:9b:af:c1:2d:b7:2f:68:c2:
                    aa:64:22:3d:43:5a:78:1d:11:40:09:d0:48:28:a3:
                    db:51:a2:9b:3a:b8:57:f8:20:1a:eb:89:c6:20:b7:
                    25:a2:c6:ef:6e:56:48:f4:b4:17:82:ca:48:62:98:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:8D:05:95:32:CA:C9:A5:9B:B3:F3:7D:54:B9:0B:1F:EA:74:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0e8c7b8-c72b-30fe-b347-f8e865ef3554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:5b:3d:e1:0e:72:d4:db:08:b4:b7:2b:47:f7:d7:7f:b6:
         fd:1b:3c:68:7c:62:f3:98:d6:29:43:83:86:59:f8:1b:8b:61:
         60:6d:15:b7:ea:dd:0a:54:f8:bb:50:35:7f:1f:70:89:25:10:
         a5:a0:95:fb:ab:6e:06:0f:3c:c0:a5:e2:07:97:f1:ea:56:7e:
         73:39:be:f2:48:c9:0b:2d:c1:07:35:1f:fe:8d:f2:29:e6:5e:
         72:22:92:1f:9e:c7:aa:3a:3c:83:d0:41:23:d7:b9:c4:18:70:
         da:09:5a:7b:98:d8:70:2e:3c:38:31:d5:fb:df:fc:0e:0f:01:
         db:89:ac:9d:a4:f0:a4:15:93:10:b7:ec:77:d1:1c:c5:bf:01:
         08:10:ec:ba:71:d3:e0:b1:22:91:4c:8c:3c:51:b9:4d:11:24:
         ff:38:6e:74:98:da:fc:c7:5f:f8:5b:18:a3:cf:6b:56:f3:1e:
         c7:da:b1:61:2c:e4:65:e1:e1:11:bb:dc:aa:2e:25:14:42:4c:
         a9:53:92:23:7b:b6:b7:fc:c7:78:d6:c6:24:32:07:7d:5b:85:
         42:f6:7c:45:8d:54:c2:e9:bc:45:7d:fd:c0:c5:1a:5c:ab:6c:
         22:41:87:0b:7b:51:4f:be:94:c8:6a:9e:54:18:df:d6:f7:67:
         37:70:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 09:58:03 2023 by rpki-client on console-fra.rpki-client.org