Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/024ca142-f976-3c1f-be01-458feb0d4eab.roa
File:                     024ca142-f976-3c1f-be01-458feb0d4eab.roa (raw, json)
Hash identifier:          JgPF9STgjnrWqCCkP1XsvdI/cFwLLzPevgpx4365xYE=
Subject key identifier:   07:D1:DF:43:05:B7:8F:29:4A:2C:F1:82:97:21:19:CA:29:E4:2B:BF
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584555FD8C6DA8E8EFC81A4A2F80
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/024ca142-f976-3c1f-be01-458feb0d4eab.roa
Signing time:             Tue 26 Mar 2024 13:00:35 +0000
ROA not before:           Tue 26 Mar 2024 13:00:35 +0000
ROA not after:            Mon 24 Jun 2024 13:00:35 +0000
asID:                     48581
IP address blocks:        128.254.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 01:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:55:fd:8c:6d:a8:e8:ef:c8:1a:4a:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Mar 26 13:00:35 2024 GMT
            Not After : Jun 24 13:00:35 2024 GMT
        Subject: CN=c7255e1e-50c6-48da-a15a-b8e9e7c12d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:66:9f:31:8a:5c:b6:ad:e2:9f:9b:7c:e4:
                    ad:40:e2:53:1f:fc:ae:83:99:bc:76:a8:57:00:c2:
                    74:72:43:25:ec:e3:59:11:93:50:4f:7e:8b:4d:a6:
                    6c:0c:90:cf:c3:ea:df:20:21:a0:eb:b7:b2:5d:1d:
                    6d:75:c9:3f:f1:f8:50:fe:a2:c2:4c:78:e8:b1:39:
                    78:a8:9f:3b:1d:a8:4e:5b:b3:1f:46:a8:b5:f9:b4:
                    f6:60:35:c0:29:b7:51:37:a0:e4:2c:d0:de:a2:dc:
                    84:f4:87:11:a6:5b:38:8a:8b:d0:62:e8:46:1f:57:
                    81:2d:1c:70:46:34:bd:98:34:be:6b:90:dd:bc:a0:
                    2c:d3:c8:36:e3:1a:57:2b:da:ce:1c:56:9a:cc:a9:
                    10:01:88:18:47:d3:e2:77:00:8b:d6:3b:fe:9a:ca:
                    5a:d6:62:5c:f3:e0:ea:d4:53:be:bd:aa:7a:f7:6d:
                    4e:b9:06:0c:19:b6:7d:78:de:d3:e1:9c:bd:dd:44:
                    d5:fe:37:96:63:54:73:d5:f5:be:22:b6:31:07:7c:
                    be:47:32:80:44:c7:06:be:e0:87:39:08:66:98:da:
                    d1:af:2f:81:ce:23:38:b6:4c:16:b6:e7:76:32:df:
                    00:c9:df:30:ac:2e:46:f1:44:79:89:7f:e3:c7:68:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D1:DF:43:05:B7:8F:29:4A:2C:F1:82:97:21:19:CA:29:E4:2B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/024ca142-f976-3c1f-be01-458feb0d4eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:2d:09:8d:6b:30:a4:4b:8b:09:69:0d:ca:8e:94:24:0b:
         5e:82:fe:5d:75:3e:42:9d:60:25:7d:1d:70:bc:ce:f3:1c:e5:
         0f:38:4e:15:4f:bd:a7:07:00:f3:99:dd:5a:b2:8f:b0:10:52:
         bc:09:f5:84:b8:08:bd:37:0f:be:89:5b:fc:42:61:60:6c:55:
         40:58:f6:6e:56:27:22:28:91:ce:ad:e6:8e:90:fc:4f:1b:aa:
         1c:72:05:c2:95:07:d8:78:5b:c9:e1:aa:b3:80:1c:de:54:67:
         84:0e:52:8b:f4:4e:fc:b9:b5:21:ec:47:11:b8:42:46:26:c6:
         93:2b:3d:9e:8c:c4:3f:e2:a7:fe:df:c5:00:ee:b6:14:b7:70:
         78:d8:35:07:68:a6:af:f0:22:63:1e:c4:d4:6b:5d:73:f6:e3:
         35:0e:6b:bf:4b:e3:d3:02:a7:ff:15:13:e2:5d:c6:f3:a6:64:
         c0:9a:3d:62:a5:ee:a5:fe:dd:d9:e0:15:fb:04:30:6c:94:8e:
         c5:82:c3:28:e9:f5:f7:85:43:0c:77:52:b5:35:90:4f:5c:d7:
         62:8e:bb:17:a9:44:a2:82:de:92:a6:35:8b:4c:e5:74:d2:51:
         d1:ff:f2:18:6c:98:fc:56:50:d7:5a:bb:3c:52:fb:e9:41:7a:
         f7:76:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----