Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa
File:                     29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa (raw, json)
Hash identifier:          NszPDt5NmI0oyIXUfCVyCV4DtCbPEWl+jpTG9GcUeH4=
Subject key identifier:   2A:74:C4:ED:4C:C9:97:A2:FD:D9:43:8E:7E:8D:5F:F0:4B:96:61:E7
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285843F38E56F5B64E4CA0121F27C0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa
Signing time:             Mon 20 Nov 2023 14:00:20 +0000
ROA not before:           Mon 20 Nov 2023 14:00:20 +0000
ROA not after:            Sun 18 Feb 2024 14:00:20 +0000
asID:                     60558
IP address blocks:        45.59.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 08:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f3:8e:56:f5:b6:4e:4c:a0:12:1f:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Nov 20 14:00:20 2023 GMT
            Not After : Feb 18 14:00:20 2024 GMT
        Subject: CN=ef3e727b-dfc7-4485-a725-a76eaacef933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:68:d2:e9:51:79:b3:48:98:6f:56:17:d0:
                    85:9d:85:1c:35:ef:4c:e7:db:eb:46:24:02:df:ae:
                    d4:e1:48:1c:8a:ac:2e:08:9b:6a:de:ce:69:27:ee:
                    83:c2:a9:64:b4:08:38:b3:9b:57:67:fb:17:4e:e5:
                    55:ea:cc:22:03:14:c6:3f:a4:d1:9d:3f:4b:63:e6:
                    40:8b:08:c5:c8:c4:5a:b6:4f:6d:5f:64:50:2e:5d:
                    4c:ea:0e:50:b7:2d:68:fb:77:2e:09:10:a3:ef:58:
                    7a:57:29:e3:a2:6a:7d:59:b7:45:77:0f:b8:d2:25:
                    e4:36:71:1b:24:26:a1:2f:a0:13:fd:56:7b:83:09:
                    3a:3c:86:d4:db:fa:0f:64:fa:fc:ae:9a:18:18:6a:
                    ab:e2:07:3d:fd:b7:60:c6:e4:08:0b:06:02:ba:98:
                    a9:c3:4f:e4:00:ed:ca:a0:03:8c:ed:55:b4:a3:f4:
                    e7:af:9f:82:b9:06:c5:c7:ae:bc:e4:d7:bc:c7:e7:
                    86:06:e7:e6:21:d6:f2:fa:fd:22:f2:f7:10:02:49:
                    1b:51:1d:88:c3:57:56:96:a7:43:9c:8e:3a:8a:ee:
                    96:e1:d8:7a:b3:d1:d2:f7:c0:36:81:b4:73:2a:af:
                    ad:3c:3a:7e:fa:15:33:ef:69:d2:c9:ec:c8:18:19:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:C4:ED:4C:C9:97:A2:FD:D9:43:8E:7E:8D:5F:F0:4B:96:61:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:7f:ce:0b:91:77:da:ca:7a:33:de:ba:7e:de:3a:a3:93:
         2b:b6:89:53:79:4e:57:ef:6c:b7:c6:bf:f7:c9:92:07:7f:22:
         a1:8e:f0:48:7b:24:7b:3d:13:73:6e:98:06:42:80:72:a7:9a:
         e6:a1:a8:94:36:07:e4:94:5a:42:f6:70:95:87:a0:e5:94:8b:
         8b:2b:3e:69:ac:3f:a6:a5:7e:31:f6:6f:fb:33:15:61:a3:6e:
         1e:71:18:67:80:24:a9:a3:9b:0e:40:22:dc:e6:27:aa:7e:9d:
         a2:cb:b7:ec:e0:ab:fa:dd:6f:8d:40:22:b5:97:ac:05:74:27:
         89:db:4f:17:39:f3:31:43:b3:b6:ea:7d:25:b3:92:97:fe:48:
         e3:b7:36:62:7f:86:44:9e:be:b9:aa:9c:4d:07:fe:05:b0:a3:
         5d:9b:3d:3d:c8:eb:39:ce:6f:9e:a8:8f:5c:e2:ae:66:63:39:
         44:f9:b5:64:83:83:4c:79:4b:da:8e:c2:39:9f:f7:71:c0:39:
         58:ba:e3:63:6a:1c:ee:c1:0f:f7:4b:07:cf:98:9a:9f:28:f3:
         11:c0:25:83:0f:7c:93:ca:b3:89:be:fc:c9:b0:ae:09:44:a9:
         6e:23:33:69:c2:fb:6d:e8:ad:4a:79:0b:e1:97:c5:f2:ca:08:
         24:41:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----