Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/099c8bb6-5101-39fc-9f34-69b73470d38a.roa
File:                     099c8bb6-5101-39fc-9f34-69b73470d38a.roa (raw, json)
Hash identifier:          uSC7gKMHfjdGnDDfvdevl2yRaDPUStER0YlrR2AQCuE=
Subject key identifier:   0B:0C:3D:AB:BA:CF:D7:E5:94:B6:56:FE:BE:1A:EC:85:8B:5A:1A:DC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858461C342E7749A15AB2B807BA00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/099c8bb6-5101-39fc-9f34-69b73470d38a.roa
Signing time:             Wed 05 Jun 2024 13:00:33 +0000
ROA not before:           Wed 05 Jun 2024 13:00:33 +0000
ROA not after:            Tue 03 Sep 2024 13:00:33 +0000
asID:                     209378
IP address blocks:        192.253.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:34:2e:77:49:a1:5a:b2:b8:07:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  5 13:00:33 2024 GMT
            Not After : Sep  3 13:00:33 2024 GMT
        Subject: CN=a9178980-389f-40c1-8c27-65ef9e6dea9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:42:87:ee:4c:66:19:8b:da:86:74:07:ba:
                    f3:0a:7a:55:93:ae:86:38:1b:73:a9:bb:35:c6:be:
                    06:cb:37:db:f8:08:28:f5:17:43:8e:dd:b8:ee:3e:
                    86:0e:8f:5b:7c:ad:86:29:1c:c1:23:8f:2f:02:a4:
                    c7:f4:7c:ef:3e:8f:a4:f7:1c:6a:36:35:57:fa:49:
                    e5:fe:a9:49:b5:c5:c3:de:ca:5d:17:ca:23:2c:19:
                    81:04:1a:a9:a6:e8:f7:5a:5c:f8:e2:8a:4a:77:11:
                    a4:31:20:d3:20:f3:62:12:56:9c:fe:b3:91:27:be:
                    f6:0b:b1:3b:f4:3c:fe:79:dc:f5:84:ec:7f:17:1f:
                    38:f6:0b:e5:40:fe:73:7d:66:e5:49:2d:79:31:8c:
                    9b:cf:04:41:dd:57:4c:b6:c5:82:b2:0a:ff:c3:05:
                    ca:58:b4:fd:a9:7a:62:24:e7:b4:80:3a:15:c8:99:
                    9d:e9:68:75:0b:bf:c4:30:6a:67:17:2d:97:8b:00:
                    43:f4:c6:da:f6:38:7b:64:40:fb:09:4a:bb:b7:4e:
                    fc:e6:fc:ef:25:68:66:d4:18:2c:e7:b3:c5:77:3f:
                    3c:8a:d1:6f:1e:ba:08:31:a8:13:1b:43:a7:c9:0c:
                    e0:b3:a3:95:28:66:3f:e5:0f:ce:a3:0c:1b:79:01:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:3D:AB:BA:CF:D7:E5:94:B6:56:FE:BE:1A:EC:85:8B:5A:1A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/099c8bb6-5101-39fc-9f34-69b73470d38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:d2:c9:46:17:70:2c:4e:3d:bb:75:65:df:18:e4:1b:4a:
         62:6b:53:cc:3f:a5:b1:60:f6:e8:a3:85:7b:6a:8e:3b:de:bc:
         75:c1:89:7c:18:cb:ae:44:b5:cd:a8:a3:a9:1a:9a:f5:89:c4:
         27:e5:eb:27:c0:23:63:a7:31:ea:4e:53:63:39:40:dc:fd:63:
         5e:97:60:f5:ba:f4:d1:18:24:de:b1:56:fc:21:9f:ed:9a:88:
         f0:47:ee:09:86:60:22:8d:a1:49:7c:f4:67:1e:d8:0c:ab:bf:
         80:1e:fc:a8:79:e5:58:ce:f8:92:29:85:2d:7e:8b:58:e7:9f:
         8d:bc:5b:8a:38:76:ac:31:4d:3b:74:72:b6:27:31:b3:29:ae:
         7d:b9:03:e8:99:ac:e5:5b:58:e4:c3:c0:fc:0f:5e:9e:54:03:
         1c:6e:c4:2a:5c:e8:ac:9a:09:ed:25:83:28:bb:d0:81:cf:fc:
         42:9c:68:c4:71:b1:be:c7:e9:e8:ca:7f:30:93:09:24:95:05:
         53:e7:8f:42:13:85:3e:36:90:d7:e6:1f:e8:72:70:03:87:12:
         8f:b6:25:cb:ce:5b:ff:fe:b7:19:1f:8f:d0:11:b9:3d:6f:8c:
         c4:93:4a:60:02:5d:12:81:30:d3:bf:f2:d6:35:01:c6:d7:23:
         1e:06:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----