Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/569d4d14-85f3-34ec-9953-881df9fc0550.roa
File:                     569d4d14-85f3-34ec-9953-881df9fc0550.roa (raw, json)
Hash identifier:          kf7P8CUV9v9YGuZptD2su3qbCzJdackXOOBYWZa9kmk=
Subject key identifier:   2C:48:85:02:96:EF:D1:7D:AF:E5:93:97:E1:EE:A3:2F:C9:DA:5B:04
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F4328584537FB728E067E5C79602A20E0
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/569d4d14-85f3-34ec-9953-881df9fc0550.roa
Signing time:             Fri 15 Mar 2024 19:02:10 +0000
ROA not before:           Fri 15 Mar 2024 19:02:10 +0000
ROA not after:            Thu 13 Jun 2024 19:02:10 +0000
asID:                     35908
IP address blocks:        66.186.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 02:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:fb:72:8e:06:7e:5c:79:60:2a:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: Mar 15 19:02:10 2024 GMT
            Not After : Jun 13 19:02:10 2024 GMT
        Subject: CN=76d5236c-7ee4-4a88-a78b-e9867adf0f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:c3:66:6e:97:a4:dc:ed:8b:52:17:07:81:
                    a2:bc:e5:cb:1c:6e:6d:98:de:35:9c:dc:0b:16:f4:
                    5a:d0:eb:4d:21:87:fb:4f:ef:cd:73:53:d3:68:6e:
                    64:a6:ff:de:aa:3d:6c:ea:57:93:fb:20:9e:c3:f9:
                    1f:da:32:05:b3:2d:e4:d5:f1:40:86:53:7d:ba:cc:
                    9f:aa:33:d5:26:5d:60:43:8b:01:a2:ca:df:cb:3e:
                    de:45:d2:ac:c2:d5:ab:a5:b1:67:f7:72:ad:a0:f7:
                    bd:e6:ff:2e:3d:6f:a4:b6:86:e7:9c:a6:cf:d1:b7:
                    d4:69:b2:68:13:cf:f4:46:f5:a4:2f:56:bd:8a:4a:
                    3e:f0:b2:23:07:01:9d:de:63:c4:0d:8e:75:f2:16:
                    09:4f:50:5b:fe:3b:34:05:c4:ae:90:98:11:c5:45:
                    ee:0b:11:53:ec:32:c6:2c:69:c6:cd:95:46:1e:18:
                    c6:67:f0:f8:9d:8e:b8:a2:48:5b:9d:45:c8:27:94:
                    7e:c3:d3:bc:6e:f1:3a:c7:0d:de:70:45:f7:d0:6b:
                    1a:aa:27:64:bc:fd:1a:99:76:20:0c:d5:e3:02:e1:
                    e6:17:34:bd:da:de:4e:95:b3:94:bc:57:f4:46:b9:
                    65:16:69:7f:a5:24:e2:c8:6d:94:2b:c3:64:1f:3a:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:48:85:02:96:EF:D1:7D:AF:E5:93:97:E1:EE:A3:2F:C9:DA:5B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/569d4d14-85f3-34ec-9953-881df9fc0550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.186.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:78:79:2e:fb:b6:fe:83:cc:51:82:65:32:8a:cc:a1:0d:
         9f:0b:75:51:77:6a:55:35:28:68:a2:48:50:5e:0c:04:9a:ec:
         07:36:f1:81:d7:8d:ae:59:39:08:1f:53:6b:b7:79:57:da:40:
         d9:a5:a8:62:70:36:38:fd:11:5b:3a:46:1e:52:07:b3:2f:40:
         ea:a1:66:7c:e4:64:18:e7:48:1f:60:d8:20:55:29:99:8a:85:
         ec:87:43:3e:4f:d2:e7:08:41:97:c3:37:2f:06:d8:59:00:8e:
         54:c3:71:60:82:59:d6:8f:7a:62:39:19:7f:da:6b:0a:06:a2:
         69:77:31:96:ff:fa:d4:86:13:f0:8f:f5:dd:f1:a5:80:40:34:
         df:5c:a1:11:11:c4:9f:96:49:ee:df:49:c3:73:4b:06:da:d2:
         eb:b5:07:7c:62:0c:42:d9:19:31:58:62:07:f5:d6:94:7b:32:
         ab:ce:54:4d:a2:68:73:cd:d3:88:f5:ef:60:87:58:a9:35:1c:
         62:f1:b0:02:81:b3:bd:c5:22:6d:5f:e9:67:ee:46:9c:20:15:
         c8:eb:73:9b:c6:2c:2f:09:0d:05:55:bf:37:22:7f:da:1c:9f:
         a9:84:68:55:0f:37:73:1d:3e:a5:07:e5:29:d2:82:62:f4:08:
         ef:db:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----