Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/9c495d3e-fc7c-32eb-8ed3-d1eeb6613d37.roa
File:                     9c495d3e-fc7c-32eb-8ed3-d1eeb6613d37.roa (raw, json)
Hash identifier:          U7QP2SnKxJBxPhqq7QN2i9svTvE4MkHhGenV8agK25w=
Subject key identifier:   64:A6:25:84:68:3D:B0:84:0A:F1:50:03:99:7A:71:83:22:A1:67:87
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285845D39E61FAF2DEF6AE34D47EA0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/9c495d3e-fc7c-32eb-8ed3-d1eeb6613d37.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     54203
IP address blocks:        173.245.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 22:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:61:fa:f2:de:f6:ae:34:d4:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=5451a64b-10d2-478b-b18f-f6d3bc0de451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:b3:cf:65:cb:41:9b:9d:51:2e:71:34:e4:
                    08:18:f4:cb:87:b9:9b:54:37:5b:45:dc:a1:25:7d:
                    39:5a:55:bc:43:81:19:13:76:70:ce:a4:a0:38:b6:
                    ff:39:64:a3:4f:db:d7:f9:84:75:16:ca:20:63:51:
                    76:54:cf:43:70:58:fb:db:18:d2:2e:0b:74:cf:8b:
                    1c:8f:a0:95:86:1b:25:60:4b:f2:b5:f8:32:1c:8c:
                    90:f1:a4:c8:ac:4d:8d:1c:20:c4:5c:53:00:dc:52:
                    61:9e:57:35:05:0e:d8:2a:26:be:2d:b9:ac:f9:ec:
                    ad:fc:d7:4d:86:11:33:f7:6f:d5:85:8d:6b:71:19:
                    92:7f:a4:ba:62:ff:64:4c:b7:a6:5e:45:a7:42:50:
                    9c:ff:9e:10:a0:b7:65:29:31:45:34:07:b8:fa:8e:
                    40:02:16:4d:36:26:74:83:d4:79:1c:88:25:d7:89:
                    9e:be:01:9b:1f:7c:86:a7:eb:a0:c6:ad:11:fc:22:
                    c1:ca:59:5f:c0:99:02:75:38:e8:f6:75:79:38:5d:
                    a8:89:d0:d0:d3:72:b5:ad:a1:ca:8d:01:ae:3c:3d:
                    bc:2c:9b:5b:83:e0:a6:04:98:14:90:e6:e0:75:6a:
                    a4:a5:fa:be:c2:49:d4:09:93:75:c5:0c:5b:5e:5d:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:25:84:68:3D:B0:84:0A:F1:50:03:99:7A:71:83:22:A1:67:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/9c495d3e-fc7c-32eb-8ed3-d1eeb6613d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:60:cf:c9:23:56:0d:2d:57:b0:24:72:9f:f2:bc:73:99:
         2a:17:71:60:80:4f:41:0e:a5:28:69:2c:26:19:87:0e:74:0c:
         b5:38:11:fd:93:12:af:34:e4:83:e2:00:a5:ed:b4:55:ff:28:
         95:0a:da:e9:95:62:33:91:15:ac:3a:5f:f9:c2:5d:b6:e2:54:
         52:b7:2b:bb:fe:a3:48:c7:d1:84:6a:c2:36:76:00:13:c1:ea:
         55:0d:49:8b:a4:40:be:62:b5:c8:ba:d2:55:c2:5e:bc:33:68:
         36:9f:a1:76:4f:df:c9:7e:53:99:56:32:4f:d4:38:74:b4:b6:
         20:d9:8e:ab:58:67:71:34:0d:4a:17:f7:30:ad:c6:a4:ab:71:
         fe:e0:10:33:6b:5e:60:ef:6e:b9:2e:4d:14:5a:2c:3d:80:0b:
         d5:b2:70:02:8e:01:61:05:eb:16:ae:42:5a:9d:6e:74:c1:f8:
         67:87:0f:d5:97:2d:60:3c:46:ad:ce:f8:36:e0:72:fb:4d:e0:
         d9:f5:19:03:a0:54:66:0e:af:f2:d5:5a:5c:9f:4c:4f:d8:7a:
         c9:ee:05:b1:9b:76:79:66:1e:10:6e:73:55:3c:41:00:f1:03:
         87:a1:ac:f4:58:48:bb:37:19:44:88:41:b5:55:28:c7:e8:82:
         69:5d:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----