Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07494ec-43b3-395e-850d-395cfead43c1.roa
File:                     d07494ec-43b3-395e-850d-395cfead43c1.roa (raw, json)
Hash identifier:          x/PExb0/JRW/wtXezka429DLLxuXfNMywkRZjJj4w1U=
Subject key identifier:   77:5E:95:6E:E9:72:04:CA:26:CD:81:E4:16:8A:FF:8F:75:A4:D0:97
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F0602493C7C94AE3551C6D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07494ec-43b3-395e-850d-395cfead43c1.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 17:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:24:93:c7:c9:4a:e3:55:1c:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=18240ac1-82fc-4d57-8923-bf242b96739d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:40:08:d7:ef:31:73:ed:3c:b4:c2:2c:cc:
                    80:e4:b1:6b:3c:b5:41:19:a9:2a:31:d6:e3:14:95:
                    6e:96:15:7c:ed:a0:95:b9:ca:02:c6:dd:1c:cb:99:
                    7a:fa:c9:30:4a:e6:b9:10:ca:57:3e:f5:d2:3e:b1:
                    9c:3c:94:59:f8:2d:ee:9c:24:55:53:f1:3d:c8:e5:
                    ed:fd:be:c0:97:56:f5:08:e2:3b:5f:59:eb:12:6c:
                    40:4d:fb:90:9d:20:3c:b7:ef:ee:49:0c:f1:29:98:
                    93:59:c5:cc:1a:62:bd:55:db:f1:c4:b5:80:91:4b:
                    43:16:ea:f4:f5:cd:75:49:ba:6f:33:bb:46:b0:5e:
                    6e:ee:e4:ef:cc:7c:56:ea:ce:d8:c4:f2:70:67:c9:
                    10:44:e2:82:49:23:be:0a:bd:9b:c5:af:84:a1:1a:
                    f5:39:64:29:13:5f:4d:b2:2c:d9:2a:65:40:7b:fc:
                    a8:ed:e1:1c:dd:91:15:96:d6:1a:52:f1:a2:e8:69:
                    44:49:bc:ef:a6:25:ae:a4:5b:63:d6:78:3f:e5:5e:
                    85:44:b4:c6:7c:28:e6:2c:f3:a1:d2:ba:a2:1d:cc:
                    1b:53:0d:00:95:ed:d7:11:e5:c6:f3:d5:e6:a7:91:
                    3b:90:f6:33:3d:87:05:69:ad:6b:39:80:75:af:f5:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5E:95:6E:E9:72:04:CA:26:CD:81:E4:16:8A:FF:8F:75:A4:D0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d07494ec-43b3-395e-850d-395cfead43c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:76:96:5e:94:7a:5d:40:d8:29:40:b5:52:80:00:8e:f1:f5:
         4b:7d:85:8e:16:20:3c:ae:7b:4b:03:6b:96:82:00:eb:f9:84:
         03:72:81:0c:ad:98:3c:81:67:63:4b:2e:88:a3:2b:0e:41:f0:
         23:d6:ac:b5:6d:a5:47:a2:d0:f3:87:c5:c3:68:8f:e1:5f:f3:
         c8:34:8f:8b:90:be:0f:c1:6d:7a:98:01:5f:83:74:10:19:5d:
         52:fd:5b:2d:ff:49:87:f4:a3:aa:7e:3b:0f:64:4c:dd:35:71:
         cc:2b:1b:86:fb:0a:24:0a:42:3a:f5:1d:07:b3:97:75:b3:8f:
         e0:7c:61:db:16:5c:43:78:ab:33:2f:02:0c:c1:77:29:35:2e:
         cd:85:a4:4f:24:3f:33:c8:43:d4:82:be:77:f8:c1:7a:ef:34:
         ba:89:5e:8d:6b:33:e2:b9:cb:fb:67:e9:1e:53:9a:c0:e0:85:
         7d:32:bb:e5:21:74:70:53:a4:12:0d:81:a7:89:b2:9d:92:17:
         64:d1:43:36:c3:ac:5d:f4:57:c3:d3:f0:72:83:91:8c:18:19:
         1e:fc:79:69:35:36:5f:fc:cf:25:a8:a9:a5:fd:e5:3f:f0:41:
         20:c5:ba:72:c1:1e:c5:46:3d:5b:cb:a9:43:d6:ce:0c:49:6b:
         df:00:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----