Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/a689af91-3015-38d6-bb56-eae6282063be.roa
File:                     a689af91-3015-38d6-bb56-eae6282063be.roa (raw, json)
Hash identifier:          pNwoc1iCLtRrMpw12lBqWlWUu+sWd3SVFZZB27oATjI=
Subject key identifier:   D3:2B:68:A5:D1:98:B4:8E:D1:B0:19:82:A1:2A:1D:F7:55:A4:24:48
Certificate issuer:       /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial:       010D0C9F43285844FE33CFAE3C10AC33D1DE9D00
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/a689af91-3015-38d6-bb56-eae6282063be.roa
Signing time:             Sat 24 Feb 2024 02:18:51 +0000
ROA not before:           Sat 24 Feb 2024 02:18:51 +0000
ROA not after:            Fri 24 May 2024 01:18:51 +0000
asID:                     27524
IP address blocks:        162.213.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 18:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:33:cf:ae:3c:10:ac:33:d1:de:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
        Validity
            Not Before: Feb 24 02:18:51 2024 GMT
            Not After : May 24 01:18:51 2024 GMT
        Subject: CN=24c9aa01-b82f-4241-abd9-81a4ea7d53dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:7d:c0:18:0f:1d:06:b4:1f:31:12:36:d0:
                    d3:cb:ef:77:e7:7d:0a:16:ec:32:72:6c:b5:b5:10:
                    6d:ce:b0:5f:9c:ca:0c:6c:87:f9:19:3c:a3:1c:ef:
                    cc:66:dd:39:55:db:de:21:b8:2e:46:d0:86:90:54:
                    aa:20:91:aa:e8:fa:94:5e:f0:b6:1a:31:fb:0b:63:
                    3f:04:4a:66:1f:13:e9:a9:a6:2e:e4:db:6e:17:ea:
                    df:71:44:dd:a0:88:30:04:2a:1c:90:6d:31:4c:76:
                    d7:16:01:62:b2:71:1c:6c:3c:6f:d1:55:84:c9:a4:
                    36:d6:68:d1:5a:28:50:6e:8f:fe:36:96:d3:de:96:
                    36:74:e8:2d:b8:76:06:c3:9e:57:a5:52:cb:6c:3a:
                    6e:98:25:33:14:bd:f9:0f:79:16:11:bd:03:d3:8b:
                    54:4b:70:c1:9c:33:08:5a:42:3e:30:8c:b3:d5:f8:
                    0c:70:67:34:ca:0c:35:b5:3c:3e:e2:d9:31:6c:69:
                    15:dd:6e:38:ca:34:57:09:1f:6e:7e:72:47:b4:e7:
                    cd:42:61:a7:96:5a:73:99:52:83:c7:7b:50:8f:88:
                    40:b0:7c:0e:f8:d4:bd:e0:f2:ab:e2:f6:31:25:78:
                    00:83:e4:47:bc:31:46:32:0b:1c:be:00:de:02:60:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:68:A5:D1:98:B4:8E:D1:B0:19:82:A1:2A:1D:F7:55:A4:24:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/a689af91-3015-38d6-bb56-eae6282063be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:90:f1:8d:e5:3a:fc:86:fa:75:72:4b:17:e8:7f:f0:e9:
         c0:db:b2:6c:55:01:92:81:db:85:32:18:67:a5:c2:1d:59:b2:
         d1:8e:b6:c3:c1:d0:75:d4:a4:51:c4:f4:c2:47:24:99:77:1a:
         3f:1c:bc:40:33:e1:cd:b4:45:1d:64:3d:1e:4d:f4:e8:1c:66:
         cc:eb:36:3d:a1:29:42:c4:71:aa:34:35:a1:31:cb:ae:19:91:
         d1:23:c2:66:1b:e4:22:c7:7e:c6:15:d0:a8:d5:9b:6e:51:f3:
         37:9b:0e:3f:6f:85:f3:cc:16:1c:28:1d:d7:58:2c:d2:d5:d3:
         6f:b1:d1:59:31:c3:06:6a:e1:da:7d:fd:f2:d6:7b:90:9d:85:
         78:3d:08:78:7e:ef:ad:68:6d:c0:60:13:aa:3f:b5:f8:c6:c5:
         ab:8d:56:dc:bb:4b:41:28:23:49:b9:41:e0:e5:c5:59:98:82:
         7b:ae:7f:63:42:28:e2:77:78:ab:5c:27:24:fa:5a:6b:be:a7:
         58:5f:fd:c0:aa:a2:31:4d:96:e5:17:4b:0b:56:24:dd:8c:51:
         27:4c:9f:d2:fe:2f:e0:de:4c:1a:ba:17:86:a5:a6:bf:71:97:
         f7:61:11:29:0b:f8:d1:c1:95:c1:b5:b0:b6:10:f8:69:ae:5a:
         14:4a:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----