Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a312c328-e600-35e1-8038-b34c745010e3.roa
File:                     a312c328-e600-35e1-8038-b34c745010e3.roa (raw, json)
Hash identifier:          FHzxbtRGcibEaGAfhMBYXihc23IC8O25bELY61Xh2hA=
Subject key identifier:   05:1A:5E:08:89:3B:E4:88:51:65:77:6C:6A:A5:2D:FC:7B:34:AD:7A
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858476398BA54D6AA18F0E0C23AC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a312c328-e600-35e1-8038-b34c745010e3.roa
Signing time:             Mon 30 Sep 2024 19:32:42 +0000
ROA not before:           Mon 30 Sep 2024 19:32:42 +0000
ROA not after:            Sun 29 Dec 2024 20:32:42 +0000
asID:                     210574
IP address blocks:        64.64.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:63:98:ba:54:d6:aa:18:f0:e0:c2:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 30 19:32:42 2024 GMT
            Not After : Dec 29 20:32:42 2024 GMT
        Subject: CN=5bd7138f-11ec-4dd3-a098-c957cbe91974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:a3:57:26:71:29:ea:33:96:98:10:0d:dd:
                    c7:62:c4:4b:9d:c0:a8:f3:2b:76:95:3c:dd:2d:08:
                    98:b9:eb:b0:d4:87:60:66:06:98:8c:7a:fc:18:72:
                    d2:2a:14:fe:ab:53:61:03:5d:89:0f:da:d4:00:c6:
                    cd:6c:54:f6:96:c1:c7:0c:7f:17:88:01:71:b2:c2:
                    80:af:7b:8d:16:08:ec:3f:35:06:cd:ff:7d:35:1b:
                    ab:a9:51:68:cb:01:55:91:2e:46:6b:d7:dd:b7:d4:
                    0d:90:f2:9c:3e:c5:60:e5:e0:1b:01:52:58:49:ef:
                    c5:7e:da:73:c8:ad:eb:f3:da:03:6e:76:e9:d2:6c:
                    74:31:59:ea:d3:68:10:3f:50:5d:d9:35:6a:b9:f8:
                    e7:e1:a2:a1:84:2b:cf:a6:98:98:92:dc:bc:e2:27:
                    c9:c8:f8:d8:1e:f3:0a:b8:a2:35:27:97:3d:a6:bc:
                    85:32:8a:85:75:8e:08:fc:34:2b:4e:cc:2b:ce:19:
                    cb:0d:e2:95:04:c3:b5:04:50:d1:14:a9:e8:4b:f6:
                    0b:17:a1:89:35:0b:e4:3c:e1:01:7a:19:1f:28:62:
                    c2:a8:38:2b:c1:f9:5d:a0:2e:f7:b3:68:f5:af:a8:
                    9f:ff:5d:5b:e1:0e:1d:05:5a:ee:7c:1a:de:67:48:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:5E:08:89:3B:E4:88:51:65:77:6C:6A:A5:2D:FC:7B:34:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a312c328-e600-35e1-8038-b34c745010e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:5b:b8:a1:06:11:43:ef:26:aa:b4:67:f2:83:b0:e2:49:
         f4:5b:f3:63:8f:14:b8:f6:8e:f2:0a:25:b8:43:12:75:9a:e6:
         65:3e:8a:5a:19:a3:2f:dc:7f:f3:b6:d6:af:5d:81:b2:03:51:
         d7:81:7a:e0:0f:72:5e:86:e1:92:e0:4a:a3:b8:01:71:f9:f2:
         18:2d:b6:17:d4:aa:e8:71:98:28:73:90:ff:fa:e3:4e:4d:46:
         61:b5:72:60:a2:d9:cc:09:ef:2d:f3:b0:77:e6:6e:11:1b:0e:
         0c:35:9d:d2:b2:6c:4e:be:ca:e4:f2:46:63:79:80:e5:5d:4e:
         a1:b3:80:24:c1:c2:0a:d5:08:08:bc:16:c9:8b:d1:0d:48:be:
         31:9a:51:d3:5d:e4:b1:72:50:81:fe:a7:41:3e:bd:14:95:c9:
         7c:ff:1f:5f:8e:15:47:22:7c:a4:5d:02:e8:f3:ad:f7:90:74:
         1e:54:36:b0:22:68:6e:6b:a8:6a:cb:3e:04:a8:74:f0:02:72:
         16:b3:9f:8d:b2:c4:0a:30:7a:b2:fc:af:f2:60:78:72:d8:1c:
         28:91:3f:e7:57:e9:c4:60:87:b2:10:5b:9d:ec:97:d9:26:60:
         e3:6b:c1:d0:26:b7:b1:0d:f9:88:d5:49:b8:ca:f1:f5:3e:33:
         17:4d:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----