Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd07aa8-c701-3336-8107-593e28a69e95.roa
File:                     edd07aa8-c701-3336-8107-593e28a69e95.roa (raw, json)
Hash identifier:          5i/deB3uZWQagzMRtCJT18a4dSbVyesehY0uSrt6rRE=
Subject key identifier:   E7:3C:9F:56:DC:68:60:34:85:33:38:60:45:69:14:FB:19:DA:5B:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F631AC347751B9C61C2A10
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd07aa8-c701-3336-8107-593e28a69e95.roa
Signing time:             Fri 12 Apr 2024 17:24:38 +0000
ROA not before:           Fri 12 Apr 2024 17:24:38 +0000
ROA not after:            Thu 11 Jul 2024 17:24:38 +0000
asID:                     3257
IP address blocks:        142.111.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 22:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:31:ac:34:77:51:b9:c6:1c:2a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:38 2024 GMT
            Not After : Jul 11 17:24:38 2024 GMT
        Subject: CN=373cd744-ae65-45ac-853d-7409ce3b4071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:43:28:32:fb:fb:3f:fd:c7:8a:3e:78:cb:
                    1f:a1:d6:c7:b3:3b:aa:dd:74:d8:ea:eb:b9:4d:f4:
                    1d:a4:81:c1:27:b8:ed:d3:31:3e:78:22:a1:34:03:
                    cf:7f:19:9b:93:2f:7f:bb:9d:37:4c:da:66:d4:12:
                    8d:f6:cf:43:a0:da:b6:af:ad:05:af:b1:6f:d4:39:
                    e6:cd:15:61:27:62:4f:34:d0:5d:c9:76:81:a5:87:
                    40:14:e5:d2:de:ca:ee:a7:f8:a9:7e:eb:6f:3b:8d:
                    fa:32:06:7b:ec:ea:10:ff:2a:a6:fb:b9:09:70:97:
                    4f:4e:02:51:1c:7c:8e:42:c9:93:6e:30:d8:f7:b4:
                    00:67:87:76:b6:e4:28:a4:dc:5e:64:8e:7a:f4:33:
                    02:30:76:62:b3:8f:33:0f:8e:4b:c6:56:e2:77:87:
                    3a:fe:e7:69:7d:1e:98:ff:f3:76:92:56:3f:b6:58:
                    74:af:5d:2d:be:5c:90:97:0c:b6:d4:55:ef:c0:29:
                    e8:f4:78:e8:69:ba:6b:f2:16:8c:c5:ad:fc:13:20:
                    86:f9:50:c1:fd:fe:bd:0b:6e:80:ed:7e:80:28:27:
                    e4:74:14:fc:0c:5e:2e:90:bf:9b:15:9a:fc:f6:0c:
                    55:7d:ff:45:4a:2a:38:5b:b7:b9:f5:fd:bd:b9:00:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3C:9F:56:DC:68:60:34:85:33:38:60:45:69:14:FB:19:DA:5B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd07aa8-c701-3336-8107-593e28a69e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:5a:31:63:f3:a3:83:72:5c:8c:5a:42:48:29:f7:b8:c6:
         c3:93:b6:3e:ab:66:01:7b:56:f3:ee:76:93:61:9a:d0:68:5c:
         50:f1:30:4c:df:64:6a:e3:c4:24:aa:56:4c:e2:6f:71:7b:7d:
         84:5f:39:46:5d:9a:2f:46:97:97:31:a2:29:37:e8:7c:d8:28:
         da:87:b9:6b:66:a5:b1:9f:64:14:a3:73:20:57:ab:30:c6:48:
         fa:a4:99:81:2f:3d:43:5c:15:ea:d6:7f:47:df:7b:6c:30:5c:
         eb:e9:67:7c:3a:0f:21:ca:55:da:6d:94:ad:9d:ef:17:58:15:
         28:43:32:f9:38:00:f5:33:17:c6:b3:66:5e:98:ed:f4:de:70:
         3a:58:5a:ca:7f:be:94:be:45:8d:1a:55:01:ba:f1:6a:ba:fe:
         f4:4f:d5:e1:6a:f4:77:59:cd:4e:b3:51:92:ce:04:bd:0a:ea:
         4c:06:dc:55:70:47:2b:f6:22:c5:ce:74:cd:cc:95:29:44:94:
         6c:7b:84:fd:b0:19:0c:87:d2:4c:2e:4f:e8:02:71:28:2c:22:
         44:9c:43:ef:64:85:1b:f1:88:dd:51:e9:d4:92:28:bb:a3:2c:
         c3:4c:7c:54:ae:ea:b5:9b:3e:db:2c:fb:95:65:70:53:cc:a6:
         fd:02:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----