Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4daa52c9-6910-3917-aac1-8f20b437e1c5.roa
File:                     4daa52c9-6910-3917-aac1-8f20b437e1c5.roa (raw, json)
Hash identifier:          qN8MikjHbDPbWnig0DKD1Zl0YXpJIFzrSXTZ882+1IU=
Subject key identifier:   A2:C8:7D:E4:D3:77:80:AA:00:9F:78:8A:20:B7:8C:EA:E9:53:54:0E
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F432858442F22B3E56B6071E0E16AEA40
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4daa52c9-6910-3917-aac1-8f20b437e1c5.roa
Signing time:             Mon 11 Dec 2023 22:12:03 +0000
ROA not before:           Mon 11 Dec 2023 22:12:03 +0000
ROA not after:            Sun 10 Mar 2024 21:12:03 +0000
asID:                     271
IP address blocks:        199.175.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 20:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2f:22:b3:e5:6b:60:71:e0:e1:6a:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Dec 11 22:12:03 2023 GMT
            Not After : Mar 10 21:12:03 2024 GMT
        Subject: CN=b9b688e5-b492-4c4f-b929-157a60ccdc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:c1:a7:30:9a:13:d8:85:b1:06:51:c4:f2:
                    6e:6e:92:af:96:08:19:97:7e:1d:8b:83:c0:8c:57:
                    45:b5:ca:2b:b2:b2:0e:48:e7:e5:e2:99:5d:1d:5b:
                    18:66:6d:fb:66:95:26:6c:b6:79:fb:ac:30:37:3d:
                    ef:3a:a2:38:83:38:e7:c4:27:80:b3:9e:63:53:d5:
                    28:eb:af:75:aa:70:64:8f:ca:0c:b3:53:78:fa:6e:
                    e9:f8:38:91:42:b3:4f:bf:e4:c3:d9:3f:d5:8f:71:
                    33:6a:74:f4:6f:62:64:71:a9:3f:c6:c5:e8:47:ce:
                    cf:92:12:cc:52:a8:ee:ab:fe:79:82:9d:dd:2d:06:
                    08:1c:d0:4d:05:f3:19:7a:75:fa:80:4b:c5:a2:8a:
                    7e:fe:57:ad:69:a0:52:34:63:53:d6:43:b8:8d:40:
                    5a:00:14:0c:e4:aa:6e:37:7b:25:f7:0d:b7:6d:0e:
                    d7:9c:ff:a1:b3:8a:22:9e:dc:e5:24:87:44:05:c2:
                    ef:1a:18:d7:00:10:56:89:7c:2b:01:6a:04:59:66:
                    38:8e:4d:33:91:1d:cd:9b:a3:9c:8b:96:e2:6a:1c:
                    39:5e:f5:70:29:60:fe:8e:ee:e9:38:2a:fb:95:56:
                    62:6c:19:1e:6a:2f:b4:cc:82:f3:86:8f:80:37:96:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:7D:E4:D3:77:80:AA:00:9F:78:8A:20:B7:8C:EA:E9:53:54:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4daa52c9-6910-3917-aac1-8f20b437e1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:f5:ec:d2:d8:10:f6:3f:cf:87:4d:4d:76:9b:26:de:0a:
         7d:3c:c1:cb:dc:b4:3f:b7:09:0b:21:69:40:88:91:ce:1b:4f:
         51:88:05:ee:97:be:6c:23:90:e4:73:ae:e1:18:a3:36:01:94:
         c3:34:c5:3d:4f:55:19:c0:39:79:40:3d:2d:c2:64:84:fa:7f:
         4b:b9:8e:0c:3e:e1:1f:35:26:c1:cc:4a:50:60:7f:a3:14:72:
         45:e6:d1:7e:47:23:8a:d4:fe:57:09:9b:5e:f7:8b:7e:ad:f3:
         72:29:c8:8a:a0:b2:56:29:46:88:b3:a2:c4:56:e0:61:9b:ef:
         5c:fb:cc:ac:56:65:2e:e4:31:cb:07:e8:f6:39:af:5f:de:8b:
         a0:be:2c:0d:c0:c8:f7:fd:22:53:26:ad:91:87:35:15:43:d3:
         94:2b:fc:b2:60:f7:76:28:d9:b0:58:98:e1:2e:a3:b1:c3:a4:
         ef:6c:7d:e6:2b:4e:b9:37:f3:5a:98:62:d3:cb:96:2c:b2:f8:
         d2:5d:7e:6a:df:0f:41:ff:0f:72:02:a4:dc:47:7c:d4:ec:c5:
         f7:27:05:e9:68:64:14:9a:81:76:b5:b4:57:7c:8c:7c:4f:b2:
         bd:3c:40:79:d3:d4:c5:24:ad:21:2e:01:7b:c8:c6:24:63:27:
         98:52:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----