Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9c91c97f-a6e0-3226-bc91-c70e6ea2735c.roa
File:                     9c91c97f-a6e0-3226-bc91-c70e6ea2735c.roa (raw, json)
Hash identifier:          /jraV8R3Y+NIHaAPIVDiWg3+1AbIfabbKUcBQ/o5xq0=
Subject key identifier:   FE:E5:92:0A:41:24:B9:4F:24:8B:E5:1E:64:14:45:43:43:D4:10:B3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858479D6B2C33B407A286D1964E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9c91c97f-a6e0-3226-bc91-c70e6ea2735c.roa
Signing time:             Mon 21 Oct 2024 12:37:48 +0000
ROA not before:           Mon 21 Oct 2024 12:37:48 +0000
ROA not after:            Sun 19 Jan 2025 13:37:48 +0000
asID:                     15731
IP address blocks:        172.111.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 12:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:6b:2c:33:b4:07:a2:86:d1:96:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 21 12:37:48 2024 GMT
            Not After : Jan 19 13:37:48 2025 GMT
        Subject: CN=18dc7e7b-71b9-4e1a-8907-aea1242e4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:93:a8:92:9b:1f:ed:4b:42:ad:a9:0b:b1:
                    a3:58:d7:3e:69:03:bd:43:71:e5:eb:ca:6f:3f:26:
                    10:1d:fd:6b:ff:17:ee:7e:62:b3:30:41:73:51:f5:
                    05:ce:d3:23:cf:db:f1:3d:e6:af:24:ed:45:7d:2b:
                    0b:ff:45:8f:35:7b:1b:33:0c:ce:18:2a:a9:41:75:
                    4b:ff:67:06:e1:da:58:a5:d4:41:e2:f0:79:a0:62:
                    90:3c:2c:28:72:7a:fb:17:96:42:34:d1:78:00:b5:
                    5f:c6:17:6b:f4:3e:14:82:fb:4a:a9:e0:c3:f8:aa:
                    35:d9:a9:68:84:09:c6:ab:9c:2f:47:28:35:0c:e1:
                    e5:f9:bd:5e:2d:a5:9b:99:40:b5:69:75:44:fd:d2:
                    9e:cb:47:ba:7b:4b:f2:c0:fa:f8:d0:4a:49:f3:c1:
                    49:d2:84:95:d4:3b:8d:2c:74:b1:fd:79:7b:55:6b:
                    e1:25:bb:5c:d5:e0:15:c9:9c:65:a6:52:1f:aa:d5:
                    65:d5:ad:da:a2:75:a7:87:80:83:25:67:2e:c8:d6:
                    07:df:fb:44:4e:a3:a7:bd:84:53:41:6f:99:af:dd:
                    e3:22:21:66:58:3e:af:39:07:21:bf:9f:aa:86:4e:
                    0f:9f:89:17:a4:11:16:61:39:e2:f3:10:1a:eb:c8:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:92:0A:41:24:B9:4F:24:8B:E5:1E:64:14:45:43:43:D4:10:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9c91c97f-a6e0-3226-bc91-c70e6ea2735c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:7e:d3:ee:e7:39:77:dd:ca:7c:72:54:6b:d6:2c:56:9c:
         4c:19:c7:7f:f7:36:21:a2:73:81:6c:ae:eb:4b:d8:d7:0d:fe:
         2f:82:7b:39:86:29:a2:18:18:01:f2:d5:35:25:77:43:d1:e1:
         00:01:42:a3:2d:ae:81:a6:91:91:5b:23:8b:10:37:d9:80:ed:
         5a:75:b7:f1:da:d4:71:cc:f3:20:39:b9:3a:8d:25:23:c3:b0:
         49:a2:7f:15:3e:cb:6d:65:f9:2d:15:c5:81:28:82:89:83:9c:
         c5:55:c0:45:43:17:bf:dc:c9:17:9e:ec:26:0c:b7:d2:6e:d5:
         43:e5:d2:37:85:97:c2:6a:29:7d:38:c2:72:ad:18:89:77:d4:
         60:a9:35:24:f5:be:e1:cc:d5:2c:1d:d1:7e:92:5c:57:ce:20:
         e5:64:a6:48:8f:06:f9:e4:02:6d:5d:9b:1a:b8:99:77:07:31:
         ec:55:af:f1:54:fd:59:39:10:34:dc:18:b1:9c:ca:86:21:49:
         b1:58:4e:00:c6:f1:93:2e:e7:97:4a:c1:5d:5e:ad:6a:48:7c:
         49:38:b5:04:7b:1a:8d:12:1f:83:0b:c5:4b:06:17:53:ca:a1:
         43:37:72:39:f0:20:63:9f:0d:39:63:db:99:7f:28:2e:df:b1:
         6c:be:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----