Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a98bb82e-1dd5-3b9e-9501-903f82470120.roa
File:                     a98bb82e-1dd5-3b9e-9501-903f82470120.roa (raw, json)
Hash identifier:          +E16CvXxswQH4qafw3H9rNzeUQr4KSqourxzfh6tDnM=
Subject key identifier:   C0:AA:86:35:10:9E:48:B2:1B:35:F5:A8:88:DB:35:AF:06:B5:F8:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F060215202A207ED0EB98E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a98bb82e-1dd5-3b9e-9501-903f82470120.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 18:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:21:52:02:a2:07:ed:0e:b9:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=58d145ce-c8a0-4d88-8fc6-ed100c9cb809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:d7:3e:b4:e7:a7:b8:44:82:a1:6d:ba:6b:
                    8f:3e:0e:76:ab:1e:ff:a6:69:fc:4a:ce:d1:ce:83:
                    f5:e2:17:2d:34:7a:fc:64:64:a9:e5:13:84:89:86:
                    41:24:90:8e:cd:e5:11:d8:42:c7:b0:6a:09:e9:12:
                    de:08:d6:68:0e:10:a6:01:cf:ef:23:7f:56:d6:7f:
                    06:84:65:5b:ce:5e:f3:be:15:ba:7a:62:70:b7:e4:
                    7d:6b:a0:62:05:a1:be:ed:c5:c4:72:7a:ba:24:cb:
                    a3:da:a9:de:67:cc:c3:e9:6f:79:a9:70:7a:c4:a0:
                    ca:9d:28:63:0f:1f:ea:7e:6e:0e:a8:49:60:99:54:
                    ac:3d:61:d1:f3:e0:9b:f0:0e:4d:27:eb:2a:99:45:
                    79:83:9b:43:d9:13:f2:f8:88:aa:f8:ac:d8:4a:74:
                    8f:a5:19:ed:f3:fb:3c:51:28:f6:a0:5c:78:68:aa:
                    c6:dc:84:a7:21:32:d2:29:74:1a:64:d3:18:ad:16:
                    70:2f:af:c2:41:3b:bd:dd:84:74:64:de:2d:e4:6a:
                    d6:30:1c:b3:17:bb:4f:54:ab:a6:b6:30:4c:79:64:
                    7d:fb:1d:56:77:4f:24:e6:5d:7d:d4:3e:a9:82:c2:
                    83:8f:7d:a2:3d:7d:17:90:bb:82:1f:b3:54:5b:4b:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:86:35:10:9E:48:B2:1B:35:F5:A8:88:DB:35:AF:06:B5:F8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a98bb82e-1dd5-3b9e-9501-903f82470120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:77:27:d4:be:c6:96:c4:4a:bb:ca:96:b5:51:6c:21:c4:1b:
         29:f8:24:af:34:e6:59:fd:ad:95:7e:aa:94:d4:9f:8c:56:58:
         cf:b7:ed:92:73:cf:4a:f6:5f:28:0a:30:93:a8:e1:be:64:c5:
         01:68:11:62:cf:d1:b4:f6:99:e5:cf:f0:7e:4d:42:82:61:e6:
         e5:c7:ff:6e:80:a3:3f:46:a1:3b:3c:21:79:6c:92:5b:98:3b:
         c8:b0:63:4a:91:63:91:23:92:29:72:17:de:83:19:2c:71:02:
         e2:6d:2a:7f:b3:11:e0:f8:11:35:bc:47:89:ed:2d:49:1a:b4:
         ea:ab:cb:b9:66:cf:86:6c:c6:44:fd:c3:ee:46:20:93:3d:f6:
         06:52:7e:29:3d:48:07:72:c0:99:52:ac:91:0f:68:5f:3f:b7:
         15:b4:0e:d5:5b:c6:25:99:cb:a1:c6:34:17:da:5b:f6:64:3c:
         5c:6e:96:8a:96:ec:05:a2:e7:b3:c1:bf:61:16:4c:37:4e:67:
         17:44:56:3b:9d:36:3d:4a:ad:49:4b:9a:59:7d:3c:14:df:8e:
         dd:17:99:6e:00:78:d3:13:2c:9e:58:fb:57:c0:cf:9a:22:dd:
         8d:dc:ad:c0:8a:af:02:19:02:83:c5:6d:33:92:3b:ef:33:db:
         d9:ca:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----