Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06849690-809f-39f4-860c-e58df968489e.roa
File:                     06849690-809f-39f4-860c-e58df968489e.roa (raw, json)
Hash identifier:          IjxGcSIaZbV0JHZmux6qe+O6k9oudSCha57ch92B9jg=
Subject key identifier:   01:03:11:F4:94:6E:25:06:8F:3C:50:5F:75:4F:89:1B:93:CD:1B:F9
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847A04150ADA77AA9024ADDABC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06849690-809f-39f4-860c-e58df968489e.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     45671
IP address blocks:        172.111.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 09:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:50:ad:a7:7a:a9:02:4a:dd:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=919b8ce6-7dbb-4e64-9007-4ab4023225bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:8d:1a:f0:a7:2a:66:a2:2a:c7:67:82:a5:
                    35:8a:16:f5:93:62:46:b6:e2:73:9d:d5:35:17:a7:
                    ce:27:e8:8a:5c:e7:8b:23:94:19:55:74:4d:2f:b3:
                    2c:45:95:b1:13:69:7a:a0:81:ac:6b:86:b0:b8:f0:
                    a0:53:ef:29:40:ee:1c:e2:ff:8d:b9:6e:db:4a:82:
                    a7:53:25:e9:03:cf:6c:fd:9f:aa:92:3e:5b:68:70:
                    4a:32:d6:ab:47:5d:95:e2:dc:e7:44:46:66:a4:bc:
                    90:23:f6:c6:cb:86:da:ef:3b:af:5d:60:5c:15:39:
                    4c:a9:78:bb:d5:d8:4e:90:ef:fa:1c:35:bb:0b:a3:
                    73:2c:00:b7:47:87:3d:68:a9:2e:0d:98:00:18:8d:
                    d3:51:2b:6c:3d:58:c2:90:49:7d:9e:97:b0:ba:58:
                    82:f2:d1:af:e1:ec:08:5d:a3:a4:18:c8:55:e5:6f:
                    70:b0:1c:ac:15:8e:8a:e1:c4:d7:78:fc:16:0a:66:
                    ec:70:34:8f:6a:a0:b2:af:95:ed:00:b7:27:a9:08:
                    e8:c5:1b:11:a4:94:c6:a6:6b:1a:1e:4d:19:6a:5e:
                    6a:31:80:96:4f:9a:0c:33:29:ad:df:8a:a6:1a:9e:
                    c9:0a:f6:8d:b9:64:00:4c:c6:e5:74:22:31:f8:98:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:11:F4:94:6E:25:06:8F:3C:50:5F:75:4F:89:1B:93:CD:1B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06849690-809f-39f4-860c-e58df968489e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:95:88:f5:98:ca:48:32:7c:f2:81:95:c5:12:87:0f:62:d0:
         7f:36:e6:1e:67:1d:c8:4a:33:14:38:95:92:0f:3f:e3:70:62:
         e5:68:3d:d6:4e:be:e1:7f:94:e7:34:8a:73:02:92:a1:9f:84:
         51:00:6d:8f:80:13:ba:95:b6:e5:89:c3:bf:bc:52:d3:93:6a:
         e6:97:83:0c:ba:db:3f:cb:10:e2:aa:0f:9a:6d:71:ac:bb:88:
         cf:d8:ae:6f:f6:92:80:fe:2f:d8:36:50:c8:f9:43:f4:81:66:
         47:03:f3:3e:e5:5d:6e:e5:ae:68:45:05:98:fe:fa:4a:33:27:
         3a:05:46:e5:0c:a9:e0:75:c4:f6:ce:7d:d9:b6:b8:c7:52:fd:
         6b:25:10:75:b6:e9:14:9a:97:2d:f5:4a:d9:bd:57:de:a1:04:
         19:cb:0d:05:25:ec:17:5b:0e:2f:c5:69:e2:c3:51:8b:8e:28:
         3f:27:c4:f7:bd:a6:36:2f:4f:89:22:26:53:7c:90:ea:02:64:
         86:d5:b3:c6:57:9c:78:59:f6:ea:22:ad:85:61:f5:43:91:a6:
         31:97:0a:81:81:eb:a1:d2:5e:73:40:f0:5c:24:d6:4b:7c:5a:
         df:48:bd:55:05:ce:4c:49:9a:ec:92:1d:71:a8:e5:25:23:48:
         cf:15:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----