Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/82d34abb-4f39-39fd-a3c4-ff83e189a029.roa
File:                     82d34abb-4f39-39fd-a3c4-ff83e189a029.roa (raw, json)
Hash identifier:          tAO0FgS3cN3qPHf28lSkCRJRbQS2qjva4fhzu0kzxD0=
Subject key identifier:   40:C3:3A:B7:D9:99:BB:89:9A:23:76:3A:4D:17:05:49:12:95:C1:4B
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F43285845099E18A8F28657B4C7F25780
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/82d34abb-4f39-39fd-a3c4-ff83e189a029.roa
Signing time:             Wed 28 Feb 2024 04:26:54 +0000
ROA not before:           Wed 28 Feb 2024 04:26:54 +0000
ROA not after:            Tue 28 May 2024 03:26:54 +0000
asID:                     31898
IP address blocks:        216.114.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:9e:18:a8:f2:86:57:b4:c7:f2:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Feb 28 04:26:54 2024 GMT
            Not After : May 28 03:26:54 2024 GMT
        Subject: CN=914bf85e-a66b-4109-ad31-610792c74e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:78:08:f4:24:b3:10:20:67:7e:c7:39:1b:
                    5a:de:7c:b5:c8:18:c7:41:69:19:ca:a8:b5:a8:95:
                    45:33:64:fc:27:15:e9:1a:1a:1f:3e:c2:d5:42:09:
                    a4:65:cb:1b:ae:e2:94:d7:3b:f5:ce:93:22:5c:63:
                    f6:fd:be:a9:49:25:fd:b9:af:25:31:f8:ab:a9:26:
                    ed:ea:61:5a:93:a1:97:f6:88:43:0c:37:78:52:01:
                    bb:ba:a2:0c:d2:07:90:ef:a7:26:65:7f:91:be:b2:
                    a6:1d:cb:c2:f3:97:cc:b3:a6:fa:14:8f:97:cb:e0:
                    49:7a:29:66:56:8d:7b:79:e0:c7:24:c5:8a:60:f2:
                    3d:48:ca:2a:9f:e5:50:a4:39:46:de:c2:dd:0e:0c:
                    27:fd:8c:fa:20:10:ca:bc:fa:f4:85:75:b2:9e:a1:
                    9d:55:1e:a2:02:a7:ca:ac:48:c3:43:c8:ea:dd:10:
                    50:1f:b5:7a:5f:b4:b0:8b:04:42:3e:fa:c1:b0:47:
                    c2:84:c7:6a:a0:e3:2f:fc:13:0a:f4:e7:a5:14:eb:
                    4c:56:3a:1c:cc:91:19:ab:2f:f7:27:11:05:ac:6d:
                    ea:41:a6:ba:15:16:8d:3b:dc:2a:7a:a7:50:b6:0e:
                    f2:d8:19:24:d2:fb:e2:7c:6e:b5:68:18:ac:7e:79:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:3A:B7:D9:99:BB:89:9A:23:76:3A:4D:17:05:49:12:95:C1:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/82d34abb-4f39-39fd-a3c4-ff83e189a029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:98:79:99:3e:1d:b3:6a:c4:76:28:93:bd:3c:69:87:0c:
         ea:8b:98:40:35:18:c0:88:c3:85:b7:79:f1:55:da:7a:4d:1a:
         26:27:c4:96:cc:0f:55:c4:27:d4:86:ad:d4:49:10:c4:3e:07:
         11:28:18:02:3b:71:a6:88:a1:07:93:1a:01:63:f6:cb:1f:3b:
         59:0b:56:d2:6c:c3:0a:07:3e:5d:ec:64:cd:71:b0:fd:e0:51:
         9f:40:9b:63:4b:0b:0b:92:52:8d:c7:84:e3:87:8e:bf:a3:c6:
         69:b5:e2:48:a4:ad:3f:61:99:0d:64:c9:ca:02:a5:c9:0f:cd:
         aa:63:b8:c4:2a:21:5f:7e:55:2a:e3:4f:72:cf:aa:eb:44:46:
         b8:9a:b2:90:31:f2:fe:76:ef:a2:bf:21:d3:0a:86:f4:7d:94:
         b7:bc:f6:b9:74:aa:41:4e:a2:c1:91:b0:0e:f0:5a:c8:7a:92:
         84:d0:d1:70:76:ff:bb:f0:d5:03:c4:f4:f9:16:62:5a:2f:ba:
         95:18:27:d6:57:c5:12:fa:07:ce:dd:cf:11:ad:d9:fd:ad:8c:
         72:7a:6e:8e:19:57:f1:8f:43:86:82:4c:c1:8c:26:15:0d:db:
         cd:e8:d1:26:77:b6:aa:70:f7:5d:eb:44:fe:ef:49:1b:0e:76:
         0a:aa:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----