Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/1548cb63-0da5-3100-a2a6-e109b4bcfeea.roa
File:                     1548cb63-0da5-3100-a2a6-e109b4bcfeea.roa (raw, json)
Hash identifier:          /EFZ7gfU4I2GXZ/6ArvoePYUpjaKEh/tP32+jJouyxA=
Subject key identifier:   9E:A5:73:1E:3D:63:57:70:15:04:08:63:0A:17:C3:E1:8D:A7:F0:42
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F432858475D12752A2927F1D535F7A700
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/1548cb63-0da5-3100-a2a6-e109b4bcfeea.roa
Signing time:             Sat 28 Sep 2024 11:27:19 +0000
ROA not before:           Sat 28 Sep 2024 11:27:19 +0000
ROA not after:            Fri 27 Dec 2024 12:27:19 +0000
asID:                     834
IP address blocks:        64.112.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 05 Oct 2024 23:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:12:75:2a:29:27:f1:d5:35:f7:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Sep 28 11:27:19 2024 GMT
            Not After : Dec 27 12:27:19 2024 GMT
        Subject: CN=ebe57b3c-c353-4ce5-84db-4cb14d6723c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:13:18:64:a6:c6:34:02:af:76:4c:1c:56:
                    77:4c:dd:79:33:58:ee:1d:5d:64:da:d9:d1:21:d3:
                    72:4d:3d:26:12:2f:a2:60:7a:94:bc:c1:d7:be:36:
                    93:e8:dc:4f:f6:eb:69:a2:dd:27:11:de:51:0b:0f:
                    37:3d:38:5d:84:5d:be:a9:82:40:e9:f3:51:30:cb:
                    31:1b:76:7a:d1:b7:63:13:96:1e:ec:1e:42:c7:41:
                    d7:10:51:ef:80:21:3e:86:b2:79:c3:0f:b0:3f:f8:
                    b4:d4:6e:e8:c0:ba:db:a0:1f:04:d7:62:e0:8e:59:
                    6b:bb:22:88:49:21:82:5f:4d:85:64:2b:21:96:fa:
                    f0:fb:a0:20:19:ae:9b:22:ba:00:d9:71:ab:0d:de:
                    24:c6:8d:76:0f:3d:52:12:cd:66:0b:8d:6c:d1:f9:
                    ea:1e:7f:30:5a:23:6d:0e:6d:0d:9e:0a:f4:58:61:
                    5c:3e:f0:6d:93:77:fa:f0:ec:33:43:ad:6f:82:c5:
                    55:de:7b:0b:d1:fd:11:81:80:ce:2b:a1:f2:ef:b5:
                    52:76:97:53:63:a9:55:c2:20:14:81:fc:5d:fd:69:
                    6f:c0:84:64:ee:fc:1d:d0:13:c9:5b:65:58:73:19:
                    bf:26:5f:59:d4:a8:da:12:f6:3c:9c:ce:da:3c:3e:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:73:1E:3D:63:57:70:15:04:08:63:0A:17:C3:E1:8D:A7:F0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/1548cb63-0da5-3100-a2a6-e109b4bcfeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:90:a8:8c:99:cf:ee:d7:32:80:7d:c8:ac:65:e7:82:98:
         35:4e:cf:05:fb:0c:0d:fe:15:8e:0c:b3:a5:60:ea:ba:99:bf:
         b5:4a:47:08:5a:a5:aa:eb:7d:2f:dd:55:ca:62:9a:f7:cb:5e:
         26:45:e9:7a:38:b4:c7:f2:39:86:11:7d:9f:b0:e0:a1:4c:ef:
         db:1a:05:4b:00:8f:6f:da:33:23:5f:e1:a2:c3:a0:65:50:36:
         51:d7:03:f9:2a:e1:95:a9:f3:07:6b:1d:bd:58:d1:43:5c:cd:
         db:e7:96:de:72:96:ec:a7:c8:ea:6a:17:c2:5d:3f:e8:ad:12:
         c6:28:80:60:cd:0f:1c:c6:d4:39:82:c5:e0:f4:e1:e4:4f:32:
         f7:82:67:4b:b4:61:20:ba:26:eb:ad:78:85:f4:11:8e:0a:90:
         b4:29:20:64:d2:ec:61:0a:ce:04:55:60:39:a4:88:fe:33:a0:
         4a:a1:f0:4d:ec:8f:b7:ab:14:89:c2:9b:84:6e:bb:25:27:2e:
         37:da:86:67:f2:4c:1a:07:77:04:fc:85:39:c0:ce:cb:ac:d1:
         0a:0c:6a:f9:f5:18:57:ba:a3:1b:69:59:65:37:a9:d1:e7:20:
         f7:68:72:4c:02:ed:ee:5a:e8:a0:2f:5a:8f:81:51:5c:be:93:
         23:01:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----