Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa
File:                     f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa (raw, json)
Hash identifier:          TXnqzBugIbUbdil2AwqPV2KHANPVLoHBGapc+7Y411U=
Subject key identifier:   F5:36:4D:A1:94:F3:78:C5:FC:B3:41:00:09:B0:7D:C0:AC:06:19:CB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858473D2600764C781765F4096500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     9009
IP address blocks:        172.111.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 10:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:00:76:4c:78:17:65:f4:09:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=66844d11-ed4d-48de-bad0-566d0c38263d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:d1:9b:10:8b:f7:10:6d:82:5a:af:96:6a:
                    5c:8e:8b:86:b2:5e:58:e6:be:b4:e6:54:cf:c9:50:
                    e8:6a:80:f0:a8:4c:b1:30:c9:42:d2:ad:ff:76:c7:
                    51:8d:ba:6d:a3:92:0b:3d:d4:7b:e3:d6:46:b8:5a:
                    98:e1:06:f4:33:ac:ab:8d:8d:00:61:91:d8:81:55:
                    e3:18:60:93:e3:38:77:e3:a3:f7:15:66:da:81:a3:
                    c3:1f:ed:c8:e2:7f:97:34:06:67:7d:e8:c2:dd:4d:
                    f4:8c:7e:f5:46:0b:93:4f:28:e0:99:0f:df:93:88:
                    77:39:41:27:c4:97:eb:41:3b:1b:f7:c1:54:29:6b:
                    b4:96:16:71:b0:b1:44:be:e5:11:a9:89:73:2b:08:
                    5b:e2:99:e6:ef:44:6d:46:95:c1:0c:c3:26:5b:b5:
                    26:c9:b5:b2:77:46:ac:4e:d6:77:a6:5d:d8:94:d0:
                    d5:48:87:b2:a2:87:b2:39:2e:1e:6b:78:5c:e0:f5:
                    f0:3f:ce:94:a6:a2:d3:25:44:04:78:af:04:e6:40:
                    2b:ad:60:4c:32:fc:64:33:6a:9d:4a:6c:33:d9:38:
                    33:35:25:92:29:3e:da:c3:18:23:15:62:cd:80:69:
                    ca:7e:e1:fa:e3:71:c5:7c:8e:93:4e:d2:7a:0f:30:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:4D:A1:94:F3:78:C5:FC:B3:41:00:09:B0:7D:C0:AC:06:19:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:83:c8:3e:9f:8b:36:74:e7:18:01:39:10:eb:68:81:69:16:
         b8:aa:ec:7e:a7:19:3e:70:7d:f9:eb:0e:61:7c:3f:16:e0:89:
         a7:f4:7c:51:35:01:ba:eb:21:b6:d7:d1:9e:f3:31:35:59:09:
         40:3c:08:98:96:36:de:a4:fc:14:05:f4:20:9b:64:65:fc:bc:
         02:85:98:16:c5:81:0c:07:a1:f6:2b:e0:51:bb:92:a9:b9:63:
         ea:26:e3:0a:d3:36:e0:ee:2c:e1:b4:24:e6:a5:3e:7b:7a:a6:
         22:e1:b1:b4:df:fc:06:91:1b:c6:40:af:03:3b:94:e9:62:a6:
         c8:d7:73:35:08:98:5a:57:4d:32:63:d6:c5:74:bb:e5:91:26:
         65:b5:ae:6a:cd:1c:5b:30:fb:0f:f3:96:d6:17:c4:80:34:bb:
         6a:f7:b4:42:de:1c:02:94:85:38:78:fc:f1:47:61:2d:4e:36:
         d4:13:b3:7b:3b:be:d2:36:a0:40:7f:cd:63:fd:a8:61:40:ae:
         17:7a:4e:65:2a:52:35:94:4c:e4:b4:f1:09:6a:9c:c8:5b:1f:
         76:16:eb:7b:23:92:1a:6b:0a:52:0f:5c:df:a0:7c:b9:cc:a0:
         f8:53:36:4e:55:92:fe:54:99:00:8a:59:cb:55:c6:c8:4b:b5:
         ed:1b:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----