Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2eb95e8-7501-35e1-b05c-0d5db069f3b7.roa
File:                     b2eb95e8-7501-35e1-b05c-0d5db069f3b7.roa (raw, json)
Hash identifier:          KFwHrH0fAPBX9FMY+n2PR/p3Icfd2rhxIl2ljFeVigE=
Subject key identifier:   2B:F8:61:E0:F2:26:73:69:DB:0B:DF:D6:F8:3E:E3:1E:68:8F:47:D3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F632DF983ABCAFD4FDC9C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2eb95e8-7501-35e1-b05c-0d5db069f3b7.roa
Signing time:             Fri 12 Apr 2024 17:24:39 +0000
ROA not before:           Fri 12 Apr 2024 17:24:39 +0000
ROA not after:            Thu 11 Jul 2024 17:24:39 +0000
asID:                     3561
IP address blocks:        142.111.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 22:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:32:df:98:3a:bc:af:d4:fd:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:39 2024 GMT
            Not After : Jul 11 17:24:39 2024 GMT
        Subject: CN=e1ba8d56-ce69-4b86-af9a-cb6a65980617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:a8:c2:1a:3f:34:91:4b:16:25:8e:54:d7:
                    19:28:cb:94:05:08:63:3e:d2:be:b8:34:7a:2c:46:
                    e7:44:0f:3f:f0:0e:dc:0c:68:79:20:e1:de:7d:32:
                    c8:43:70:3e:39:24:0c:b5:42:d7:14:b1:b1:14:31:
                    13:7e:90:3a:ed:a9:d2:8c:93:91:b5:8f:b3:be:18:
                    68:fb:ab:9f:32:b0:c8:5c:35:32:f9:9f:38:0c:e9:
                    4a:31:5d:d4:8c:ab:ae:ca:9e:05:db:0d:9a:4a:55:
                    b3:d4:90:3e:a6:7e:6f:65:dc:f8:70:9a:42:ec:7d:
                    04:9b:f7:1c:aa:18:2d:9d:78:8f:a9:86:e2:46:38:
                    61:44:3e:62:8f:ce:61:25:18:9c:0b:2c:1b:fb:1e:
                    52:a4:85:86:e0:d4:7a:6b:9a:29:5d:98:e2:e7:1d:
                    d8:1a:e4:dd:fd:0a:82:cd:33:b3:8c:1f:10:fd:9b:
                    b3:19:db:3e:38:58:0a:c7:54:af:8d:35:3d:64:40:
                    88:00:d6:83:51:c0:fb:e3:ef:aa:81:15:db:b9:2a:
                    f0:75:86:c6:83:a3:ae:2e:d0:05:03:35:e2:19:dc:
                    4a:33:0f:eb:5c:cc:2d:ee:96:9b:f2:22:d4:dd:c8:
                    03:8e:c9:9e:c8:23:59:e5:2c:b4:67:d0:61:ec:52:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F8:61:E0:F2:26:73:69:DB:0B:DF:D6:F8:3E:E3:1E:68:8F:47:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2eb95e8-7501-35e1-b05c-0d5db069f3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:a0:6e:b6:df:d2:23:06:14:a1:14:e7:88:d8:47:ea:8e:
         8a:ec:00:5a:7c:7f:f6:15:76:83:26:8e:3f:e2:a7:c4:ce:a6:
         c1:8e:f9:f1:ad:42:7c:cb:2c:e2:1f:28:cc:69:68:df:2e:7b:
         c5:fc:23:73:1d:c3:58:58:fb:e8:41:93:d8:bc:27:da:22:95:
         bf:98:9d:ef:0a:c9:37:c4:ae:7a:d0:e0:ac:10:9f:86:8d:33:
         24:b2:f3:8e:88:59:cc:e7:14:de:7b:41:ed:cc:f8:74:6d:cd:
         c3:d9:6e:14:95:92:0e:47:45:7c:67:75:0b:1d:a5:bf:a3:9f:
         d4:68:fc:4a:fd:85:14:65:9f:a4:53:18:36:62:5e:24:e8:9e:
         05:0d:bf:0d:4d:0f:b7:62:83:a5:38:1e:e4:6f:36:61:1b:b0:
         71:37:ad:bf:16:87:0d:b3:ea:a6:41:3f:80:cc:c3:f4:6c:92:
         28:6b:4d:a7:28:3b:cd:50:a9:ed:30:19:55:3f:e9:97:86:cb:
         ee:3d:83:e8:de:29:8f:7e:1c:25:0b:d3:dd:74:97:ce:2f:29:
         f3:c2:50:91:0e:5c:c7:3a:f7:bc:b3:61:e5:15:e1:c2:86:aa:
         fe:26:8f:00:82:a3:98:47:da:85:71:b7:d3:b0:7e:fa:87:d7:
         06:ce:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----