Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13c51984-78e1-3c8b-87e9-35cfa60fabaa.roa
File:                     13c51984-78e1-3c8b-87e9-35cfa60fabaa.roa (raw, json)
Hash identifier:          3cy4AkiapBvnmSofDZjyvvEKGLHfkkEtBjP9iZgDHck=
Subject key identifier:   24:14:4C:9E:CA:2D:62:7F:11:5A:6E:0A:3D:4C:AF:86:9D:4E:82:DE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858468B58E85A04B366313B9B8300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13c51984-78e1-3c8b-87e9-35cfa60fabaa.roa
Signing time:             Mon 15 Jul 2024 08:29:31 +0000
ROA not before:           Mon 15 Jul 2024 08:29:31 +0000
ROA not after:            Sun 13 Oct 2024 08:29:31 +0000
asID:                     9009
IP address blocks:        172.94.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 12:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8b:58:e8:5a:04:b3:66:31:3b:9b:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 15 08:29:31 2024 GMT
            Not After : Oct 13 08:29:31 2024 GMT
        Subject: CN=afdb740f-165b-4c49-bc17-0d75a672483e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:09:35:42:3a:ea:ae:c9:83:2f:93:c8:71:
                    07:35:a0:67:f3:e1:b6:dd:1b:c1:02:7c:ba:74:5e:
                    33:30:3f:50:e2:0c:c4:54:df:7b:b4:29:5f:4c:1d:
                    6c:de:16:64:0d:3a:50:1d:f0:e7:b7:9b:32:fa:87:
                    93:a7:51:68:5d:65:c4:64:b5:c5:5c:d1:f6:e4:af:
                    14:c7:39:00:eb:ec:37:ce:f6:53:4f:db:6c:93:f9:
                    3e:8e:4a:0e:eb:b7:2f:22:d5:5c:f6:2f:70:39:3d:
                    54:96:10:11:a9:a3:32:ec:50:6c:8a:fa:91:c9:37:
                    4c:fa:aa:7f:2d:27:68:86:aa:17:ba:f2:78:fe:49:
                    b7:42:ee:b0:e5:78:93:bd:9d:f0:49:71:f4:11:38:
                    09:91:e9:d4:07:ee:cd:06:d7:26:0f:93:95:36:8a:
                    50:df:fa:c4:9a:dd:e3:86:a5:b0:87:9f:51:f5:8f:
                    b6:de:b9:b2:0c:d7:51:f3:a7:94:af:47:83:cf:9a:
                    c3:da:a8:38:4e:c1:d9:de:24:5a:4e:a6:12:3c:75:
                    55:97:0d:bf:03:fa:e5:e4:af:01:d2:39:90:8c:5b:
                    fd:a3:29:b9:3a:15:01:c7:9c:32:12:7a:fc:87:2b:
                    c0:99:4f:cd:81:ea:1d:da:28:cd:dc:16:5a:18:c0:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:4C:9E:CA:2D:62:7F:11:5A:6E:0A:3D:4C:AF:86:9D:4E:82:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13c51984-78e1-3c8b-87e9-35cfa60fabaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:a9:e9:3e:7a:c3:10:cf:b6:f1:11:b4:83:fa:9c:96:07:
         37:67:10:d5:e7:3b:d6:7e:e3:11:37:fb:5a:51:32:96:3f:0b:
         ad:7d:0a:bb:10:95:46:d3:86:83:fd:cd:dc:f3:5a:4f:93:9e:
         ee:73:a4:72:db:63:ef:5c:b3:01:df:a3:38:3e:e2:04:a3:2e:
         95:84:65:46:0f:d0:1f:56:c1:f0:e9:52:e4:b5:26:57:6f:8b:
         a0:3e:3e:67:26:46:29:d7:01:20:0f:2a:c8:a6:b6:7a:ec:92:
         e6:df:b5:77:2e:b3:7f:33:6a:cf:8f:be:f2:7d:73:ed:ea:03:
         8c:ee:b0:bc:f7:1d:cf:50:f9:ee:f9:de:20:fb:dc:ae:46:15:
         b3:29:81:54:7d:8d:1e:a4:83:f4:d0:60:83:14:29:35:67:e5:
         79:63:3f:e6:29:9b:82:26:dc:d3:c7:fb:9b:f6:ae:e0:23:c7:
         80:83:51:2b:fa:0a:5c:2f:1f:4a:96:f6:06:0f:65:ca:65:5c:
         08:09:40:5f:23:6a:8f:d7:d7:d4:c5:43:4f:11:0b:9c:11:dc:
         7d:c4:b9:35:bd:93:a2:5b:f0:b8:17:ea:1d:79:36:2d:05:b0:
         4c:9f:84:c8:e8:02:0c:1e:c4:de:b6:c1:69:ac:ee:b0:24:05:
         3c:71:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----