Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34443161-81f5-3c83-91c5-72668084fe32.roa
File:                     34443161-81f5-3c83-91c5-72668084fe32.roa (raw, json)
Hash identifier:          hvcSX+9XAUyPGvVQ3LRvu1ewlw2y9yp7NFo3aHMzyao=
Subject key identifier:   E5:99:AD:08:33:56:7F:C6:80:5A:49:58:E9:13:B9:F5:14:0D:87:92
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858476B363ECFAAA63908085DC980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34443161-81f5-3c83-91c5-72668084fe32.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        45.74.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 08:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:3e:cf:aa:a6:39:08:08:5d:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=2b60e1de-d8de-4e61-9bd7-8a9ab5b329a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:87:dc:bb:5c:c1:9b:2e:76:13:0c:6d:1f:c1:
                    8f:2f:f5:a9:ca:df:5e:f4:5e:12:78:9d:64:be:bb:
                    ba:24:ae:56:93:4f:99:e9:56:ab:b7:ba:4a:b5:d9:
                    f0:d7:13:6a:2f:78:02:64:18:41:b7:c9:a2:11:c2:
                    5f:11:04:16:51:3f:84:1f:05:8a:ea:9e:5f:fa:d1:
                    96:0b:23:3d:d4:ad:a4:10:24:5a:d9:1d:9f:2f:77:
                    19:cb:56:f1:45:1c:01:e8:a1:38:f6:08:4e:5b:74:
                    f9:95:23:dd:9f:78:65:4a:8a:3a:a5:36:51:4a:8b:
                    b1:7e:e4:54:e7:bc:43:ff:5d:02:c4:eb:be:6a:9e:
                    cc:90:15:98:00:70:8c:d2:d1:f8:4c:1d:a9:b2:84:
                    03:f2:a4:18:2b:0a:2f:e0:4c:f5:d5:05:5d:ad:df:
                    f4:22:ac:21:d0:b3:70:b7:44:5c:99:dd:4f:73:2e:
                    6b:3d:ad:ae:32:ba:b4:d9:7d:7e:db:aa:38:a4:76:
                    7d:4b:02:d7:75:56:24:ce:ff:f9:e6:9c:89:e4:e6:
                    7b:9a:85:95:8e:02:b2:3c:ec:2e:16:13:25:2b:a0:
                    7e:c2:74:38:17:f5:39:b9:7c:00:26:aa:5b:39:fa:
                    39:42:47:1a:66:60:7f:eb:1e:52:2e:1f:f5:3a:ef:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:AD:08:33:56:7F:C6:80:5A:49:58:E9:13:B9:F5:14:0D:87:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34443161-81f5-3c83-91c5-72668084fe32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:cc:fc:8b:e3:69:ff:26:3d:f2:8b:fd:fa:50:97:88:95:
         26:1a:74:de:7b:8d:43:d6:9d:67:91:cf:51:27:1a:1c:46:14:
         ed:56:e1:08:bf:6f:2f:f8:50:3e:16:ea:49:84:f0:54:36:85:
         a4:2b:5d:8b:f7:4c:75:fe:15:81:53:ca:a0:33:67:45:e4:7e:
         6f:3c:73:a1:52:1b:4d:98:97:ee:2c:ca:40:0b:99:82:b3:d0:
         1f:d4:1a:fe:a7:5e:66:66:45:8a:3a:d7:44:31:d6:c5:1b:c1:
         8a:a9:ae:c0:0a:7f:76:5e:10:96:8f:8f:04:67:74:9e:aa:4f:
         f4:44:5e:93:32:f1:cd:09:cf:d2:a9:24:21:0b:af:20:e3:84:
         fd:f3:40:ff:b0:82:24:ec:d6:ca:7e:95:2d:22:6a:80:dd:17:
         ba:c9:98:57:4d:df:8d:94:00:89:63:d1:d7:3c:17:7d:15:b8:
         d8:a4:28:d4:f0:95:46:b9:6e:96:39:d0:d7:93:d5:a6:f8:7f:
         58:57:55:eb:a0:fc:af:55:6c:b0:fb:b0:8b:fb:ba:28:cb:00:
         84:0b:3c:33:79:fd:be:76:80:68:db:73:e6:86:34:63:bb:6a:
         95:9d:95:df:48:bb:83:6e:6f:44:62:a3:d1:70:56:46:35:d8:
         e2:72:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----