Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cf9887f2-018c-31ce-afe2-2bb4a7cc8d6b.roa
File:                     cf9887f2-018c-31ce-afe2-2bb4a7cc8d6b.roa (raw, json)
Hash identifier:          KtiDsLnqzf5OltepMTKO9Z0B9aTYtVxjcLwQt3Qtky0=
Subject key identifier:   D2:12:11:DB:BF:02:26:C8:71:3F:89:6C:2D:3E:64:36:0A:A0:2E:EB
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285845A137C40B217DF3B6D04478F0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cf9887f2-018c-31ce-afe2-2bb4a7cc8d6b.roa
Signing time:             Mon 22 Apr 2024 11:43:35 +0000
ROA not before:           Mon 22 Apr 2024 11:43:35 +0000
ROA not after:            Sun 21 Jul 2024 11:43:35 +0000
asID:                     23470
IP address blocks:        45.59.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 May 2024 20:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:37:c4:0b:21:7d:f3:b6:d0:44:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr 22 11:43:35 2024 GMT
            Not After : Jul 21 11:43:35 2024 GMT
        Subject: CN=f205f344-d968-4de0-9082-62704f4336dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:e6:0b:98:58:64:af:b3:f6:7d:2d:5f:74:
                    d2:91:20:67:84:76:22:4a:e3:00:fa:1d:57:21:a3:
                    93:8d:1d:d8:28:83:b1:50:5f:6c:7f:9a:7a:b8:51:
                    c0:3f:c6:67:e1:64:b4:45:49:7b:07:af:69:c9:30:
                    d2:b5:53:69:65:3b:40:4b:ed:75:2d:ca:8d:ef:37:
                    9a:7f:e0:57:a1:1f:9d:eb:70:59:26:70:95:30:49:
                    93:ec:9d:cd:7c:b3:cf:9c:58:a2:e4:b1:93:30:50:
                    6a:76:c4:24:c8:5d:b1:8f:25:64:32:50:45:87:af:
                    2d:e0:9b:7c:e6:ea:87:44:dd:79:1b:43:0c:6d:f1:
                    d8:de:f2:90:a7:38:e9:35:88:08:c3:b0:2d:8f:d9:
                    56:d3:a6:18:5d:a9:84:2e:a1:e4:25:12:e2:b1:dc:
                    23:a2:48:86:55:dd:5e:c3:3c:89:17:a9:c4:72:53:
                    cf:5a:99:94:84:26:9b:16:ab:b4:9f:c7:66:dc:49:
                    11:01:c6:ca:9c:c9:21:56:eb:b1:e8:7e:95:c1:6f:
                    ed:b5:ca:39:93:21:e9:a6:8a:f2:b2:7a:bf:00:26:
                    4a:dd:e1:de:73:d6:69:3c:dd:9e:36:14:7d:af:ce:
                    28:b5:8e:ee:23:ba:13:9a:d7:9a:8c:e3:79:70:4d:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:12:11:DB:BF:02:26:C8:71:3F:89:6C:2D:3E:64:36:0A:A0:2E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/cf9887f2-018c-31ce-afe2-2bb4a7cc8d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:ca:06:09:2e:f9:68:3e:10:d3:3c:8c:0f:b9:57:8b:b4:
         18:ef:3b:e2:3b:b1:a3:a1:35:2f:31:87:03:38:56:2c:18:65:
         fd:79:19:69:a1:c5:67:43:55:ac:3f:f9:ff:97:08:7a:c2:49:
         c0:d0:7a:79:33:dd:63:e1:b0:d9:9f:fa:b9:18:cb:44:84:bb:
         3f:11:57:eb:76:f1:d4:68:2a:1c:a5:5b:4f:66:e1:d2:e1:63:
         04:03:bc:03:64:ed:15:20:a5:84:9b:05:4d:7b:2d:b4:ee:87:
         9d:15:3b:c9:d7:9f:44:9d:88:35:d2:7f:0b:d6:8b:95:de:c1:
         d6:f2:70:5d:d2:44:ed:85:28:c0:8d:bc:0a:66:e0:9f:08:68:
         45:c3:03:78:8a:0c:61:6a:93:eb:d5:50:76:31:99:20:3c:01:
         4c:4d:a2:fb:61:db:57:11:99:f6:b1:37:58:d6:e9:9d:43:49:
         15:62:47:b9:d3:82:4f:19:d6:65:34:af:46:98:13:3c:39:c9:
         4c:dc:b6:02:c8:35:1d:ee:94:69:58:e3:08:28:13:ef:b3:f8:
         70:8f:7e:bd:ff:b3:ab:02:77:af:0f:8c:41:c0:ae:f7:95:c0:
         8d:1e:ba:95:44:ac:54:4c:68:39:45:6a:47:c5:fa:6a:cd:de:
         76:a8:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----