Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ca412cb-25ba-3822-804b-0e341958c967.roa
File:                     2ca412cb-25ba-3822-804b-0e341958c967.roa (raw, json)
Hash identifier:          WsEmiup2FOkzOafOAd+IZ7t1+Ryu/SXJfTUzHDWvVkY=
Subject key identifier:   A9:5C:90:20:99:B2:C7:29:0D:33:CB:49:3A:56:D3:41:3F:AF:BC:19
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A68E420C6BDF764C978CCBA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ca412cb-25ba-3822-804b-0e341958c967.roa
Signing time:             Thu 24 Oct 2024 19:10:46 +0000
ROA not before:           Thu 24 Oct 2024 19:10:46 +0000
ROA not after:            Wed 22 Jan 2025 20:10:46 +0000
asID:                     214766
IP address blocks:        166.88.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:8e:42:0c:6b:df:76:4c:97:8c:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 19:10:46 2024 GMT
            Not After : Jan 22 20:10:46 2025 GMT
        Subject: CN=7a0688ab-a73f-4f5f-ba3a-c34fc1768c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:a7:4b:23:24:f5:78:2f:42:c6:ea:e7:b1:
                    26:a9:8e:27:15:86:13:80:09:71:a0:ce:f3:36:6b:
                    9f:bc:d3:ad:48:43:f9:0d:7c:98:a6:e1:15:da:34:
                    b1:42:9e:71:b7:f3:a9:11:e1:a7:a8:ba:1e:4e:39:
                    1c:47:a1:dd:a2:7f:00:3c:09:b5:16:3a:0a:b4:33:
                    77:b9:9d:f0:13:ce:2c:ec:6b:5f:82:f8:77:23:33:
                    16:14:41:54:47:4e:d7:30:34:66:81:15:e8:2c:f1:
                    16:f1:32:86:78:e5:8c:8a:b8:6f:c8:90:15:4c:67:
                    3a:e3:50:c2:51:b0:89:49:2e:e3:9c:9b:2e:a1:d8:
                    a9:e0:2c:20:63:01:b7:43:9f:e9:f9:89:11:1d:a2:
                    ff:52:16:32:7f:12:4e:74:a5:76:b6:49:80:31:98:
                    0e:3d:27:3e:12:b5:db:d1:80:cf:c0:d2:de:6c:ac:
                    24:ec:e6:75:a8:16:76:75:62:99:94:2b:74:5b:74:
                    74:32:9d:93:0e:d6:ad:25:3a:04:f9:d9:22:fc:d0:
                    ed:71:63:b3:65:ec:c0:72:7c:4a:98:eb:a4:08:54:
                    bd:48:00:98:6f:5a:2c:56:f5:f7:20:74:33:85:f1:
                    f0:8d:d2:9d:57:4a:0f:53:ca:00:84:9d:8b:35:12:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5C:90:20:99:B2:C7:29:0D:33:CB:49:3A:56:D3:41:3F:AF:BC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ca412cb-25ba-3822-804b-0e341958c967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:44:d5:fa:ad:49:fe:fe:12:32:c3:1d:ff:b3:98:e5:e3:60:
         05:b5:22:09:bb:12:64:e6:04:c2:37:2d:22:0d:34:dc:2b:df:
         ab:64:fc:7a:e3:5f:f4:1c:ee:a0:a6:cd:0b:f0:9c:fc:78:36:
         13:12:8c:a5:d8:57:9c:4b:d0:2e:20:bf:3b:0c:f9:9e:85:b0:
         bb:aa:c5:c7:e9:53:6d:88:87:8d:f1:40:00:9d:37:75:93:ab:
         d7:10:4b:88:28:f6:fe:15:51:b4:45:3f:60:97:ce:a2:e8:e8:
         f9:20:07:1d:d5:9d:fd:21:b3:a8:b5:04:f1:58:f5:54:0f:96:
         a7:12:8c:5c:28:2e:f2:9b:2c:8e:c7:f4:b5:8c:68:d0:8c:55:
         1c:13:0f:69:43:24:d0:63:3e:bc:26:d9:55:8a:53:47:71:f5:
         69:de:fb:b9:97:1f:bb:86:a9:4f:0d:83:04:a9:e2:57:b8:a0:
         8b:74:a7:5f:20:b5:0a:13:a8:db:de:a9:64:05:b4:b4:d3:61:
         f8:a4:58:b5:e9:23:91:11:71:8f:dc:f8:8f:72:a6:48:e3:be:
         51:0e:ad:83:d0:ac:41:12:8d:38:f2:36:03:58:09:ca:dc:1a:
         8b:66:be:5a:62:09:b4:6e:7e:68:3a:4b:13:36:f7:e0:b5:28:
         d4:8f:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----