Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/ce751b89-cc22-31a9-84f4-7b0d7e418e4a.roa
File:                     ce751b89-cc22-31a9-84f4-7b0d7e418e4a.roa (raw, json)
Hash identifier:          HogoM2R+AEcLpM+yLPrge7rkO8oiuh+YMXjp6YNFlEg=
Subject key identifier:   AD:B5:0D:6E:EE:57:F8:D5:86:A8:68:C7:9A:F7:AE:67:A5:C8:AA:AB
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584762D65DFF8BA6D96068F33D40
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/ce751b89-cc22-31a9-84f4-7b0d7e418e4a.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6079
IP address blocks:        68.69.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 22:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5d:ff:8b:a6:d9:60:68:f3:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=98d4432c-a8f0-49b8-8f40-34c21bb85c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:6d:54:78:05:06:af:4a:29:bd:c9:ea:fc:
                    cd:b3:aa:18:bb:dc:b3:a1:1b:f7:d6:32:09:52:27:
                    7d:09:69:bd:82:c6:67:64:d4:59:18:b1:aa:92:20:
                    f8:78:78:16:b3:f3:8f:fd:9c:bd:4c:c4:9c:22:16:
                    9b:2d:6e:79:a2:74:20:b4:ce:37:38:ae:35:ef:cf:
                    62:43:80:eb:f0:b6:f9:32:9c:50:d4:29:5d:ed:90:
                    b5:b3:26:df:5c:95:5c:e1:b6:36:28:ad:14:e6:81:
                    5c:b7:6e:3e:d4:98:73:a5:f5:b2:1a:37:6a:0a:06:
                    0a:e9:a4:b9:f5:fc:a3:df:9c:17:84:1c:cc:d0:8d:
                    a0:29:79:6c:0f:31:10:54:35:35:a9:61:9c:13:a3:
                    cb:01:4c:3f:ae:15:db:9a:50:4b:64:a1:3e:d8:bd:
                    18:fb:2d:0e:a3:44:48:fd:7a:f9:b3:87:46:0f:ce:
                    89:f5:f3:1d:83:01:86:62:55:71:f4:b4:8d:d5:4e:
                    29:c9:e3:9f:81:af:de:43:01:8e:96:2f:01:84:61:
                    1c:49:50:52:6e:c0:66:91:26:94:26:0f:1b:06:ec:
                    2d:90:7f:8b:c1:12:6b:5a:75:db:6f:83:08:cb:8a:
                    5a:b2:d0:1a:15:3a:99:dc:31:82:af:24:ba:e8:f5:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:0D:6E:EE:57:F8:D5:86:A8:68:C7:9A:F7:AE:67:A5:C8:AA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/ce751b89-cc22-31a9-84f4-7b0d7e418e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:b7:e0:e7:a7:3b:fa:80:9c:b6:a8:99:67:df:f0:f3:5b:
         bc:92:c6:bd:70:ea:1d:ca:4f:e0:90:d0:26:90:61:2f:36:82:
         b4:3e:49:e9:8d:3b:b0:ce:e1:72:f4:cf:2e:ed:ec:a8:28:3c:
         3c:1b:3a:77:44:23:07:5a:2b:d7:7a:cb:ff:5d:ba:7c:45:c7:
         81:13:e0:5a:d0:0b:37:33:f6:11:f2:d4:16:b4:f5:7e:d0:87:
         8e:85:2c:80:ec:43:7c:05:48:6f:76:96:e2:08:90:1b:59:6c:
         5e:2a:1c:ae:c7:30:9c:4d:2e:50:8e:8f:4a:30:fd:2a:d8:12:
         6c:7c:b8:ad:25:57:db:d1:26:ca:3a:e2:d8:53:2d:47:3b:51:
         21:43:56:c0:74:50:40:41:67:75:73:42:0c:21:11:eb:70:ab:
         66:16:66:7e:20:bd:59:b0:8e:a1:87:39:80:d0:3a:9d:fb:eb:
         68:61:42:45:e9:f5:19:9d:38:ae:8a:b1:b0:16:60:ba:93:eb:
         6b:ac:7e:7d:94:cc:02:ef:fc:58:b1:38:73:e8:d2:45:62:9f:
         1e:e9:44:b9:c3:14:89:d6:0a:2c:0b:df:22:9c:1b:76:3d:f0:
         54:27:fa:66:3b:df:70:ea:39:26:7e:36:92:72:84:49:33:ed:
         3c:27:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----