Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0bc8a63-219e-3a7f-a6d6-58d49cfd8c3f.roa
File:                     d0bc8a63-219e-3a7f-a6d6-58d49cfd8c3f.roa (raw, json)
Hash identifier:          OtN9cFp8kdOdyIZRf70SpOTiEheP2Q9SFbUSnzLRgbc=
Subject key identifier:   0A:53:AA:35:EE:EF:55:12:B9:37:B1:1D:3F:87:AC:3B:DE:25:89:52
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858477717DBBC343C6AD88C744A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0bc8a63-219e-3a7f-a6d6-58d49cfd8c3f.roa
Signing time:             Mon 07 Oct 2024 19:09:13 +0000
ROA not before:           Mon 07 Oct 2024 19:09:13 +0000
ROA not after:            Sun 05 Jan 2025 20:09:13 +0000
asID:                     11798
IP address blocks:        136.0.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:17:db:bc:34:3c:6a:d8:8c:74:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  7 19:09:13 2024 GMT
            Not After : Jan  5 20:09:13 2025 GMT
        Subject: CN=5ab6a7be-fe62-433d-bb5e-efc03706da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:fb:64:58:e2:54:8b:15:a9:91:d1:66:cf:
                    0a:cf:0f:d9:e3:d6:35:3e:4b:6d:d1:06:c5:9b:da:
                    70:05:f2:bf:4d:c4:9c:d3:8b:03:6e:44:0e:0b:14:
                    6b:51:93:00:b8:88:f0:cc:da:2b:cb:ab:6d:24:9b:
                    09:c4:e0:1c:28:f5:df:de:fe:81:09:79:78:c9:92:
                    10:83:1f:8c:a3:db:d8:97:2a:d4:e2:06:66:73:11:
                    cc:3e:bb:32:3f:ab:5f:83:44:bb:11:99:e6:70:71:
                    a0:18:13:80:cc:14:e5:fe:c7:c0:2a:47:b5:3b:40:
                    aa:dc:3d:73:76:d0:bb:49:2b:4f:c7:13:de:dd:a8:
                    ef:84:d9:88:c8:4c:d4:31:2a:a4:d4:0c:5f:e4:31:
                    d5:77:55:56:fb:b1:21:0a:e5:bf:54:7c:6c:c2:d3:
                    00:c5:3e:51:d5:95:54:3b:c2:26:b9:ba:45:eb:f6:
                    4c:d7:92:3a:a1:2a:6c:87:92:da:80:bd:c0:02:4d:
                    09:39:61:34:3c:96:8f:51:04:9e:78:cd:e1:16:94:
                    46:a0:32:1a:ce:ee:21:84:19:83:9e:96:00:eb:13:
                    c9:97:0a:4c:27:9c:ad:38:c3:fb:69:31:c6:fb:26:
                    06:ae:77:be:49:48:c3:58:b1:f1:9d:31:cd:7a:6f:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:53:AA:35:EE:EF:55:12:B9:37:B1:1D:3F:87:AC:3B:DE:25:89:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0bc8a63-219e-3a7f-a6d6-58d49cfd8c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:15:2a:cd:44:d3:72:03:30:6f:f4:57:c7:15:fb:5b:e3:26:
         68:30:64:68:53:42:8b:92:c5:4a:e7:5e:4c:19:20:1f:2d:b4:
         1f:91:30:17:cb:c6:0b:ee:d1:a4:e9:98:d8:ca:c0:54:d5:7b:
         b4:c9:22:60:c9:d5:09:ab:dc:c6:97:98:6e:62:fa:f5:9e:b8:
         83:3b:82:94:d7:85:90:08:55:a9:e8:c6:2d:c8:fa:c6:2f:20:
         4f:38:73:2b:16:f4:3f:3a:8f:d2:3c:ba:13:01:31:e5:e6:38:
         1c:1d:ca:a1:68:03:41:a6:ae:cd:41:57:c2:45:2d:07:20:83:
         c6:73:f9:67:ed:f6:33:7b:d9:a4:9b:ee:db:f3:ea:60:0e:43:
         6c:2f:e9:36:6d:ad:9e:99:06:96:28:21:27:d4:5e:93:a4:3a:
         ea:15:27:84:28:ce:66:35:8d:59:70:5a:cb:50:21:e1:e1:11:
         51:fc:54:7d:48:13:e2:50:9f:fe:eb:1b:99:98:ba:47:84:15:
         2b:3b:7d:cf:85:77:11:43:82:f5:89:38:ef:2c:1a:65:29:a9:
         ad:12:8d:de:f9:31:74:53:f7:3f:10:ff:77:76:bd:dc:6d:3d:
         a1:db:89:fc:2a:45:fd:7a:d2:3b:65:b7:29:28:dd:e4:cf:79:
         2d:ce:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----