Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/ba24ee9e-d74b-3604-b21c-8638816de171.roa
File:                     ba24ee9e-d74b-3604-b21c-8638816de171.roa (raw, json)
Hash identifier:          KZAFF2AD8RTJKojsm9hV9fdAhvs0DoOVlupmISR4olM=
Subject key identifier:   03:55:C3:71:C9:C2:00:E2:95:75:27:FA:28:BA:C9:23:73:BE:A5:72
Certificate issuer:       /CN=61393699-9734-421d-a324-4f3368d73fca
Certificate serial:       010D0C9F4328584682010C6CBD250DCD01A43500
Authority key identifier: 0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/ba24ee9e-d74b-3604-b21c-8638816de171.roa
Signing time:             Fri 12 Jul 2024 00:10:13 +0000
ROA not before:           Fri 12 Jul 2024 00:10:13 +0000
ROA not after:            Thu 10 Oct 2024 00:10:13 +0000
asID:                     397293
IP address blocks:        216.9.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 01:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:82:01:0c:6c:bd:25:0d:cd:01:a4:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61393699-9734-421d-a324-4f3368d73fca
        Validity
            Not Before: Jul 12 00:10:13 2024 GMT
            Not After : Oct 10 00:10:13 2024 GMT
        Subject: CN=07d96d28-d93f-45fb-9688-dd0be50b7433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:d8:11:59:d8:68:ef:a5:48:30:e2:89:e2:
                    e1:85:bd:3f:19:c2:e5:30:7e:ac:99:cf:33:20:77:
                    07:78:55:18:89:bc:f2:8e:a5:9b:98:d8:f3:83:e4:
                    11:7d:59:98:5d:ff:a7:48:8f:ba:f1:81:7e:78:29:
                    be:83:36:53:6f:c6:e1:6b:c5:50:f9:8a:ac:36:2c:
                    3c:c1:3b:41:90:e6:9d:41:40:aa:c6:4f:60:bc:3d:
                    43:d3:ae:2b:98:7f:42:59:a2:09:2d:3d:e3:f6:7b:
                    b1:77:f0:1a:93:d0:18:69:68:e2:0e:63:e0:75:71:
                    24:4d:f9:1c:8c:64:c1:93:88:ff:01:12:38:a7:1a:
                    b8:ef:6b:0b:23:73:da:00:55:c8:27:dc:26:9c:0d:
                    d9:2d:a1:76:82:1a:49:1e:99:cb:f6:a9:71:43:71:
                    66:b3:95:28:ff:37:92:c2:30:27:71:69:03:9b:f7:
                    7a:f3:7a:1e:33:93:7a:c4:b1:07:c9:2e:91:29:f1:
                    77:0f:e9:44:82:5f:e0:cd:e0:6c:5e:86:60:0f:66:
                    42:26:76:67:61:18:5c:80:71:7a:95:be:71:56:d4:
                    2d:08:eb:7c:90:2a:33:17:96:6d:58:84:a6:21:b0:
                    35:de:ee:31:7c:d5:59:c5:12:80:aa:73:94:b2:87:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:C3:71:C9:C2:00:E2:95:75:27:FA:28:BA:C9:23:73:BE:A5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/ba24ee9e-d74b-3604-b21c-8638816de171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl

            X509v3 Authority Key Identifier:
                keyid:0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:ad:ab:73:9f:dd:94:9b:d0:c8:02:a7:e0:8f:fa:87:a2:
         37:b2:1a:51:02:1e:8c:7a:31:14:38:eb:32:82:e1:8f:c0:d7:
         bc:72:40:da:3b:b6:ab:14:31:38:90:70:eb:ca:8e:6f:33:05:
         54:1b:4b:25:86:82:ea:7b:1d:e0:0a:a9:4b:a4:eb:6f:8f:7b:
         06:0d:75:fc:39:ce:58:4a:35:04:cc:a5:2e:38:28:77:f0:19:
         8d:89:86:16:00:e6:6b:bf:ad:85:f4:dd:fa:4d:84:cc:e1:4f:
         90:5d:fb:4d:e9:34:c7:52:d9:bf:f1:81:c0:44:5c:aa:a6:1d:
         0d:a9:b6:d8:3a:ad:b2:67:1b:2d:0d:fc:1a:b8:97:77:ef:71:
         c9:31:29:5f:91:81:d2:ed:3e:69:d4:37:68:21:58:86:32:f6:
         b4:06:6a:79:3c:a9:f6:53:a0:44:a8:9e:a7:ec:fc:63:37:1b:
         75:be:40:a5:07:88:22:ca:47:00:95:32:03:00:a4:50:83:e9:
         4e:55:a2:b7:55:19:34:12:79:19:60:ec:f2:2d:f9:64:a8:53:
         db:b2:df:fa:6e:99:25:2a:ad:97:8e:f8:9d:b2:b3:39:21:0b:
         9a:f9:1b:48:e5:eb:a7:d5:5d:e6:ca:db:26:f2:12:73:7c:92:
         0c:c9:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----