Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0f3e891-18d4-3390-9970-ddbe46cb632b.roa
File:                     b0f3e891-18d4-3390-9970-ddbe46cb632b.roa (raw, json)
Hash identifier:          kmpsTp2YlDS63C9F/FF7hOEBF7CZlQBCmd50Z0ZjLqk=
Subject key identifier:   59:8B:2D:99:D7:CC:13:27:0D:57:CB:35:DF:41:EF:FF:1F:48:8A:13
Certificate issuer:       /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial:       010D0C9F43285844AD34F2164A4D456A2DE98A00
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0f3e891-18d4-3390-9970-ddbe46cb632b.roa
Signing time:             Fri 26 Jan 2024 02:00:25 +0000
ROA not before:           Fri 26 Jan 2024 02:00:25 +0000
ROA not after:            Thu 25 Apr 2024 01:00:25 +0000
asID:                     834
IP address blocks:        199.15.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 12:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ad:34:f2:16:4a:4d:45:6a:2d:e9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
        Validity
            Not Before: Jan 26 02:00:25 2024 GMT
            Not After : Apr 25 01:00:25 2024 GMT
        Subject: CN=9165f773-9e60-4933-b82d-c8be59bcc811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:06:76:3c:63:06:26:ff:8a:7c:cf:58:00:
                    c3:40:b2:98:22:4f:d6:32:c4:4b:d5:3b:69:6f:1b:
                    f2:ed:11:50:32:13:28:e0:99:84:5f:f2:85:31:46:
                    ce:54:74:e2:b8:1e:ba:04:05:ee:8b:81:6f:bf:70:
                    06:5c:d4:e6:c5:26:0c:c6:66:fb:ee:49:44:7f:ab:
                    58:57:2c:d2:14:9e:10:8c:e5:6f:50:cb:21:a8:d6:
                    3b:22:c8:a4:a7:a6:2a:75:93:e5:79:5c:b2:3a:07:
                    7a:0a:25:3b:23:5d:63:ba:d3:aa:94:da:65:8e:1f:
                    e0:e6:ff:2d:a0:74:e6:70:28:f1:59:6f:e4:19:d3:
                    76:0f:ff:6f:7c:b8:09:e7:0c:76:3c:c8:7c:2f:07:
                    fb:b3:e0:40:96:51:ef:13:12:b7:63:d0:33:04:d3:
                    2b:21:3d:52:d5:6c:ea:73:44:cd:a7:5d:9b:75:ae:
                    4d:e4:95:43:29:cb:1f:e2:4a:90:4a:8e:fc:9a:16:
                    d4:2b:2d:37:d6:af:a7:65:1a:01:65:dc:53:3f:f4:
                    b5:ee:ea:3c:6a:e7:bf:50:3e:64:6a:ba:09:6f:6c:
                    2a:20:38:3b:71:0c:74:58:f4:ae:a9:f8:1b:db:33:
                    5e:38:ae:4b:be:b3:c1:b9:6b:34:3c:68:47:b4:81:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:2D:99:D7:CC:13:27:0D:57:CB:35:DF:41:EF:FF:1F:48:8A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/b0f3e891-18d4-3390-9970-ddbe46cb632b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:73:4e:b0:14:52:02:79:7c:57:8b:56:e3:42:25:52:e0:d1:
         2d:2f:57:1a:0e:06:b4:65:9c:20:58:cb:d5:23:fa:42:87:fc:
         39:db:88:16:19:48:b4:18:68:8f:70:89:a7:5e:ef:37:9e:a2:
         c4:81:2e:84:65:27:ea:0a:76:ca:20:d4:ed:53:df:98:5f:dc:
         84:23:6e:2f:50:13:91:6f:e5:91:bd:a2:93:d2:36:6c:18:3c:
         e6:f9:62:b5:cb:f5:ba:56:98:54:69:ca:48:30:5c:1b:1a:ae:
         df:ef:da:81:ae:b3:d2:d5:d6:e3:43:7d:d5:93:0c:17:ea:0f:
         b7:c0:3c:56:18:ad:d7:be:fe:a0:0b:ff:5d:b6:a0:94:75:36:
         03:cf:dc:00:ad:02:22:da:21:3c:da:01:09:eb:71:74:46:63:
         0e:1e:6e:0c:2f:80:19:b4:ca:2d:9f:65:37:b4:e4:93:9e:51:
         4d:32:f0:11:10:6f:12:d2:f9:cf:f6:c3:8a:d7:dc:be:e9:06:
         f8:ba:f4:3f:1d:3c:e8:7b:2b:2c:d1:2f:ba:c8:9e:42:81:5a:
         39:fa:17:7e:d9:38:e4:39:ee:e3:05:4b:f1:8c:f9:1d:c7:00:
         85:e4:e8:15:b7:ab:da:75:10:dd:77:f6:6e:b2:3f:68:22:64:
         f5:bd:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----