Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a93e5e2-8d4f-3b3c-842f-e26c2cba5c8c.roa
File:                     8a93e5e2-8d4f-3b3c-842f-e26c2cba5c8c.roa (raw, json)
Hash identifier:          yRYIdKZ1A92Mz3EJc7xLL26zbUPsZHu+0F/mj6WIoBI=
Subject key identifier:   DF:A4:61:6F:11:99:71:47:68:A9:D9:92:82:EF:1E:45:A7:D4:26:8C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285846C0EA7EC6784AC5427846D080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a93e5e2-8d4f-3b3c-842f-e26c2cba5c8c.roa
Signing time:             Sat 03 Aug 2024 13:00:37 +0000
ROA not before:           Sat 03 Aug 2024 13:00:37 +0000
ROA not after:            Fri 01 Nov 2024 13:00:37 +0000
asID:                     45671
IP address blocks:        104.250.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c0:ea:7e:c6:78:4a:c5:42:78:46:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  3 13:00:37 2024 GMT
            Not After : Nov  1 13:00:37 2024 GMT
        Subject: CN=69d57785-059c-4969-8e8b-4f8fe29b3e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:21:05:11:b0:c2:18:b7:57:e0:e0:d2:cc:
                    b9:3f:72:4f:f4:b3:85:2b:24:3e:49:e8:dd:f0:a2:
                    f2:23:c3:34:73:e6:6a:8c:a6:2f:a0:f3:68:73:61:
                    7c:ea:ad:d5:79:52:82:47:a5:09:02:d8:cc:ee:a5:
                    df:cf:00:98:ae:4d:08:0a:4a:db:09:22:67:31:b3:
                    c9:4d:f5:ff:06:ad:b0:1e:e0:54:79:b3:97:f4:0f:
                    df:a7:3b:41:19:52:69:05:83:29:b4:9d:cc:3e:ac:
                    39:07:0f:30:2e:7f:e4:29:3a:f0:d0:77:81:f4:86:
                    d2:aa:cf:16:77:27:d4:ba:63:32:14:62:ac:88:a6:
                    fb:1a:89:12:4f:df:64:d6:70:a1:d5:4e:a6:a3:87:
                    8f:55:92:b0:10:ed:df:42:8f:4e:44:5c:62:c8:d7:
                    54:f4:d4:cd:3a:be:46:9c:ea:e9:48:e4:38:0d:ce:
                    5c:5e:9a:be:99:3b:c8:74:ae:44:91:13:2a:54:89:
                    ee:6b:9f:ae:a0:85:53:c2:4f:68:1e:05:d0:c4:d2:
                    23:c7:4c:3a:3c:d9:88:73:c7:39:05:dd:49:70:97:
                    90:bc:df:02:45:ad:e0:26:1f:c6:1a:1a:a4:90:d0:
                    16:2d:7f:c1:cc:eb:ce:86:d9:54:77:08:b0:ad:53:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:61:6F:11:99:71:47:68:A9:D9:92:82:EF:1E:45:A7:D4:26:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a93e5e2-8d4f-3b3c-842f-e26c2cba5c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:4b:0a:55:b5:be:85:90:10:0b:ec:79:02:a8:18:54:6b:
         fd:ed:bc:67:1e:ac:f2:ca:7b:1d:05:b8:c8:af:13:3d:43:70:
         f2:8f:43:ee:a4:96:2e:09:52:13:2e:18:b1:1a:f2:54:bd:df:
         2f:bc:e5:de:47:f3:33:a8:fe:07:ba:28:5f:33:17:00:fd:17:
         22:81:a8:91:7e:5a:bc:bb:7f:1b:e8:77:28:0e:bd:b7:78:12:
         d4:82:50:4d:97:1d:c5:19:25:3e:3f:d0:a1:b8:05:25:e1:6e:
         7e:fc:a4:9b:43:56:d8:d0:7e:82:19:74:da:ad:94:84:e4:c3:
         26:4e:93:30:da:e6:3c:fa:8a:b3:85:a6:85:12:a9:70:f1:b0:
         7f:fd:2e:6c:cf:bd:b4:6c:4b:f8:31:97:30:ef:e9:9d:73:1a:
         8e:57:a5:37:f7:34:57:71:42:c1:4a:87:5d:6e:44:f1:2a:15:
         a0:9d:5d:fd:a8:c3:99:4e:2a:ab:ee:71:c3:4d:b9:d2:b8:0b:
         45:6c:85:f7:2d:22:ab:c7:e4:f8:a8:73:45:c6:18:f1:40:fe:
         59:73:6d:1f:20:8e:3c:f1:65:ac:34:8c:31:1a:5a:d0:eb:88:
         b0:ec:98:72:e8:4c:26:27:83:8e:fa:0f:99:f8:78:2d:7a:95:
         d1:7e:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----