Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b55786c-b141-32ab-8d0b-5f1808003888.roa
File:                     1b55786c-b141-32ab-8d0b-5f1808003888.roa (raw, json)
Hash identifier:          r4CjP0/VcAGeMQjPBK7ZFqmXtM5LfCDZKxGAjca4CY4=
Subject key identifier:   1E:37:3B:E0:8B:D6:39:04:8C:F4:6C:0A:50:26:41:A0:6D:91:28:52
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847AB6C159FA03FB06D85FE1540
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b55786c-b141-32ab-8d0b-5f1808003888.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     63018
IP address blocks:        206.123.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 06:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:15:9f:a0:3f:b0:6d:85:fe:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=216dc7fe-30bf-447d-ab4e-ef68b615d470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:3b:07:f0:3a:74:78:a8:81:60:2b:88:5b:
                    ac:6c:94:40:a7:58:04:45:2e:ef:42:e3:ba:33:98:
                    5e:9c:0e:f3:aa:49:62:1f:93:09:5a:fa:41:94:e4:
                    35:ad:da:74:25:64:81:e7:dc:35:ec:8c:ba:3d:ac:
                    a4:6f:b8:1f:6c:04:fa:f1:2c:7d:8d:9b:52:1a:e4:
                    1e:5e:b2:7b:02:cb:48:f7:db:00:e1:1e:01:68:c0:
                    18:91:bc:3b:0a:7a:90:39:23:fa:60:55:69:ef:93:
                    6d:e1:70:2f:d7:c1:b6:d5:96:4d:7a:7b:49:0d:29:
                    58:b9:e7:9d:35:77:be:c3:2d:41:9a:38:b4:65:1b:
                    69:d4:53:be:1b:c1:90:35:57:6c:46:16:61:84:6e:
                    ef:48:63:88:5b:2c:35:92:64:05:03:18:5d:6c:05:
                    0c:0c:fd:23:ca:ba:51:79:77:e8:f6:b9:6a:0a:26:
                    2d:0e:0d:fc:2b:65:2e:64:c6:b7:47:3f:7a:bc:97:
                    52:4e:fc:b4:33:15:ba:e0:06:e3:4c:34:f3:8a:b5:
                    1e:13:6c:87:3a:ae:de:99:dc:98:03:4d:4e:0e:71:
                    73:65:00:bd:3e:be:fe:bf:f6:59:c3:55:57:fe:fd:
                    1a:5b:e9:86:1d:b4:86:27:69:b0:14:30:fe:5c:d9:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:3B:E0:8B:D6:39:04:8C:F4:6C:0A:50:26:41:A0:6D:91:28:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b55786c-b141-32ab-8d0b-5f1808003888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:41:93:a2:83:29:ae:ac:1f:8b:d5:22:d6:af:6c:f5:9b:
         59:ba:f2:10:34:fc:bd:ca:43:03:12:e1:e9:24:26:73:5a:2c:
         35:50:f9:f1:a4:7b:1c:7c:fd:9a:65:15:da:66:55:f5:0b:1c:
         dd:1e:73:fc:05:58:a4:5a:08:f3:a6:e3:9a:90:68:ea:f3:9f:
         97:c9:d5:11:b3:f4:d5:a5:8a:a8:42:1b:5f:c4:03:09:86:57:
         8c:75:65:56:b6:86:b8:19:4c:f0:64:a8:18:15:90:f9:37:79:
         d0:4e:fa:28:dc:24:31:fd:ce:6f:8e:85:9b:63:bd:e2:0d:6a:
         d5:00:d0:8b:5a:eb:2a:f7:42:a9:d4:f3:4b:2c:cc:4d:5c:29:
         f5:8d:f1:86:02:54:31:ed:c1:b9:46:47:51:b8:a7:fe:95:c9:
         d1:0b:6c:fa:a6:ed:63:ed:22:8d:76:af:2c:66:c9:79:c9:14:
         28:f2:e8:f1:f6:b7:a6:97:0a:cc:e7:4b:9c:e5:6b:dd:f1:95:
         05:0a:ed:40:a1:0c:09:28:9b:0a:28:2b:06:d0:da:70:c0:e3:
         35:49:37:e9:39:01:31:33:9c:d9:07:c2:e4:ac:e9:b5:d0:5e:
         c8:e9:fe:93:64:c9:93:8f:f2:4a:35:27:04:aa:75:db:ea:59:
         f6:f6:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----