Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e3b1713-fd17-3e6d-83a6-fa21b5b00e63.roa
File:                     2e3b1713-fd17-3e6d-83a6-fa21b5b00e63.roa (raw, json)
Hash identifier:          jNIDqkC9b8U2MxTA9i62UAa8L85dIkrA9zJthUGCvsc=
Subject key identifier:   C6:77:07:A6:CF:9C:45:58:9D:31:E8:0A:B6:19:60:1D:2F:8B:2F:8C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63B6848602D3DD2E85780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e3b1713-fd17-3e6d-83a6-fa21b5b00e63.roa
Signing time:             Fri 12 Apr 2024 17:24:43 +0000
ROA not before:           Fri 12 Apr 2024 17:24:43 +0000
ROA not after:            Thu 11 Jul 2024 17:24:43 +0000
asID:                     54252
IP address blocks:        142.111.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 16:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3b:68:48:60:2d:3d:d2:e8:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:43 2024 GMT
            Not After : Jul 11 17:24:43 2024 GMT
        Subject: CN=530b4418-e840-4d7d-ae04-7aae02db93bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:a7:f2:fd:9c:5f:2e:19:e8:ea:9b:ec:60:
                    18:00:ef:4b:0d:cd:d8:33:35:37:61:e8:22:90:ca:
                    21:26:29:be:04:f5:f8:42:2f:da:fc:68:92:8e:b6:
                    30:5d:1d:44:3b:b4:5c:f1:26:0a:40:2b:53:35:a8:
                    40:fd:a4:10:ea:d7:ef:fb:e9:13:e5:d9:38:56:f8:
                    55:f5:8f:e7:c7:c0:02:11:34:fb:ac:85:71:40:82:
                    3b:12:b4:9e:26:7b:6c:ef:af:1a:96:4d:7a:5b:ef:
                    42:e0:97:75:80:55:74:d4:aa:17:64:2d:8b:46:74:
                    f7:e2:28:58:cd:a8:ee:be:c5:ca:4e:8c:d1:de:2d:
                    2e:e8:54:b6:f3:e8:e8:1a:44:e6:a7:78:0f:4d:b8:
                    fb:5a:67:f2:fb:53:b1:a7:77:42:05:40:f2:8f:a5:
                    d6:41:f7:e4:62:58:60:71:84:16:64:69:99:81:d0:
                    0d:f0:94:9b:31:a8:16:a2:53:2f:63:fc:0c:1a:c2:
                    9e:72:2d:7e:e9:77:80:2b:7f:4a:26:63:1b:95:2b:
                    0f:9b:2e:79:0e:0f:f4:ff:83:75:7a:e6:00:8d:7d:
                    49:ad:cd:ec:f0:aa:cf:a0:43:78:98:0e:d6:2a:b1:
                    f8:8d:34:0b:79:0a:d1:b4:9b:67:4a:f2:c8:8e:06:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:07:A6:CF:9C:45:58:9D:31:E8:0A:B6:19:60:1D:2F:8B:2F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e3b1713-fd17-3e6d-83a6-fa21b5b00e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:7d:78:38:ad:07:0f:8f:2d:ce:58:81:26:cf:3c:df:55:
         72:1f:59:3c:ba:a6:9d:bc:40:fa:36:6b:db:11:6d:29:32:14:
         b8:e3:cb:8a:e1:cb:b4:6a:c7:1c:f5:74:a5:06:43:c8:4b:3f:
         4c:1b:9a:9d:06:a9:6f:80:67:c4:fd:b1:0c:d8:9a:a8:b1:30:
         27:d3:d4:ca:bb:03:61:1e:8b:6d:75:8e:5f:43:4c:b5:88:26:
         a5:de:d5:f1:db:4c:56:a8:4e:64:af:78:54:18:21:95:80:f4:
         5d:02:c2:b7:3e:47:ac:01:1a:13:86:9c:e8:cf:01:ee:41:80:
         0c:8e:c9:1c:83:7b:5f:f8:36:e2:67:ea:11:70:a6:86:03:fe:
         8a:0d:df:5b:ab:2a:a4:fb:e4:bc:f3:2d:47:85:19:1d:9f:89:
         ed:ad:88:45:cc:09:27:48:1d:a1:e2:3b:f8:4a:b3:a6:35:13:
         2e:4a:66:3a:b8:b3:95:f0:17:5f:ba:2e:7c:9d:0e:1f:d8:0b:
         dd:a9:78:e5:ad:3d:7c:44:fc:63:63:a7:8b:69:02:d3:ca:0c:
         26:af:2f:75:f1:8d:98:28:df:7f:6c:98:42:a2:20:07:51:c8:
         bc:85:de:f5:05:d3:2f:ce:8f:63:d2:41:ca:7d:b8:80:54:90:
         74:38:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----