Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/fbd24fcb-74cc-3976-bc63-2c34b7522dd3.roa
File:                     fbd24fcb-74cc-3976-bc63-2c34b7522dd3.roa (raw, json)
Hash identifier:          XOZt7iO/GaIA5J+lhO8czZb4orf9boyGtzssnpCPntA=
Subject key identifier:   E3:02:A6:D3:F8:0F:29:3E:AB:28:E0:E9:39:61:F4:1B:CF:6F:1E:14
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E60F03BB41C5B7CAC249300
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/fbd24fcb-74cc-3976-bc63-2c34b7522dd3.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     13649
IP address blocks:        159.182.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 15:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:f0:3b:b4:1c:5b:7c:ac:24:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=98bf7a20-ef21-449a-9ffb-aab5ce6c524c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:84:47:d7:2e:36:1d:35:2e:8b:c2:a7:f4:
                    58:d1:25:37:ea:e2:6e:0f:83:99:02:f9:4d:66:10:
                    9a:bd:93:3b:6d:57:a1:5f:1a:99:97:bc:b5:53:a7:
                    52:b6:6a:9f:ad:9b:9a:5a:6d:d5:62:74:a8:6f:32:
                    ac:b4:e1:19:b6:0a:33:35:3c:79:f5:b2:2b:3f:e9:
                    a8:f5:7f:f1:89:ca:f8:10:37:8d:d8:66:7d:b7:f6:
                    66:33:70:73:5c:02:a5:50:29:48:12:ea:bc:7f:9f:
                    0f:10:33:12:4d:0a:02:8f:a5:7a:0d:e0:9a:ae:a3:
                    82:4c:70:38:7b:3d:08:f7:f3:8d:60:30:bc:bc:a4:
                    1a:52:05:0e:17:3e:e9:32:02:14:88:cd:14:dc:b7:
                    d5:a3:b0:b8:f3:bf:2a:a6:b0:bc:c3:b8:f8:0f:b9:
                    54:9b:8e:d2:fe:81:5d:b9:0d:2d:d3:ba:18:bd:4c:
                    44:7f:c6:a8:49:46:da:7e:cf:43:bd:ec:61:26:16:
                    8d:fb:1a:10:7e:2d:94:02:32:bd:6a:fd:29:35:13:
                    1e:72:84:24:d4:af:eb:f7:2c:86:da:9a:8a:ca:cb:
                    b3:fd:8d:9b:b3:66:6b:33:6e:9a:3f:ba:88:e0:30:
                    0a:2e:21:ef:fb:0d:f2:ad:46:3d:26:8f:22:18:35:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:A6:D3:F8:0F:29:3E:AB:28:E0:E9:39:61:F4:1B:CF:6F:1E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/fbd24fcb-74cc-3976-bc63-2c34b7522dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:32:5c:cf:de:d7:8b:cf:a7:49:b2:23:da:23:cc:f6:06:
         13:0b:ee:79:e3:ac:6d:d6:d6:f5:e1:06:da:ae:60:1a:0e:57:
         1a:07:90:6e:4a:d2:4d:17:f8:56:13:e4:03:a5:5c:6c:ec:57:
         9a:80:97:79:f7:ff:40:8d:09:1b:e8:5c:11:24:eb:b7:8d:e6:
         df:76:25:a1:92:65:84:77:07:42:00:e8:a3:f7:59:3d:b4:96:
         ee:36:25:01:7b:40:4f:b5:45:ae:f2:17:63:ef:22:6f:4c:82:
         bb:21:a9:85:cd:68:b5:73:6f:70:00:3b:d7:da:1f:34:06:be:
         55:bd:67:2e:de:0e:4c:57:36:70:1c:b4:b9:43:a7:63:8e:a7:
         f9:a3:ab:72:98:b8:1f:d0:f4:c5:dc:82:75:34:77:fe:57:79:
         6a:0f:a5:56:13:c3:bc:bc:21:a2:d8:11:03:7d:b3:61:7b:35:
         ee:bd:9b:d7:62:94:d3:5f:f5:f1:fe:4c:fb:50:76:d1:52:08:
         c0:8d:24:ac:ce:e0:09:2d:91:1d:5e:65:31:d3:5f:8b:43:ef:
         de:03:ad:47:71:bf:4d:db:0a:d8:9a:37:4d:f4:54:15:0d:37:
         98:67:aa:49:59:40:b0:83:fa:21:39:bd:cd:fe:b4:0a:6d:03:
         f8:8c:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----