Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/e9113198-4487-35e5-ad64-205b6fcf20da.roa
File:                     e9113198-4487-35e5-ad64-205b6fcf20da.roa (raw, json)
Hash identifier:          Z73kerLJz+QxRI6N7eSYw83Xa6X1Mt8OzWBU4Ft84I8=
Subject key identifier:   EA:23:34:52:70:AF:47:1C:DA:15:EB:21:B9:CF:AD:FF:81:94:EF:41
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F432858476067A95A8F97F2B027C8E900
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/e9113198-4487-35e5-ad64-205b6fcf20da.roa
Signing time:             Sun 29 Sep 2024 16:06:25 +0000
ROA not before:           Sun 29 Sep 2024 16:06:25 +0000
ROA not after:            Sat 28 Dec 2024 17:06:25 +0000
asID:                     834
IP address blocks:        134.195.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 15:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:67:a9:5a:8f:97:f2:b0:27:c8:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Sep 29 16:06:25 2024 GMT
            Not After : Dec 28 17:06:25 2024 GMT
        Subject: CN=8f4fdc89-568d-43c7-b19e-8b01158ccfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:8a:72:7f:f6:d4:ae:ac:ce:4f:da:65:74:
                    d1:dc:a7:ce:3c:7c:0c:45:bc:9e:ef:a5:c7:85:e4:
                    b1:25:0d:52:23:82:15:07:bb:55:3d:93:e4:6b:57:
                    53:92:8a:3b:23:55:b0:ce:25:a9:c8:d2:f6:a7:91:
                    ae:28:b0:27:bc:76:06:ba:21:e2:7d:d8:07:48:2e:
                    a1:72:ad:d8:13:a4:d3:f9:c3:3c:b1:a8:b3:fd:35:
                    f5:5e:8f:11:97:04:e6:cc:86:ac:d4:cd:2a:6b:ac:
                    7d:1d:39:27:53:65:b9:74:10:66:3c:c1:16:16:a4:
                    c8:09:07:c4:06:f6:8f:b4:50:e1:82:49:e7:df:ff:
                    9a:d0:36:14:85:49:bd:3c:ca:6c:ce:0f:db:e1:d5:
                    29:c1:ff:27:86:5e:53:9f:05:31:63:c0:3b:9c:82:
                    25:f5:b5:a4:2f:14:0d:50:9e:4f:46:fc:ed:7c:e3:
                    65:8b:7d:a6:22:60:1b:67:0c:a6:7e:b8:5a:71:3b:
                    86:f0:72:a8:5f:e9:e8:b6:48:8f:70:17:51:05:c9:
                    51:e1:f0:34:ea:bf:b1:49:0f:3f:0d:fe:bd:08:90:
                    10:01:f1:83:ba:9d:6e:bf:25:22:fc:d7:02:a7:d5:
                    3e:39:7c:72:b8:f1:3e:5a:a6:62:76:71:70:2b:fc:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:34:52:70:AF:47:1C:DA:15:EB:21:B9:CF:AD:FF:81:94:EF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/e9113198-4487-35e5-ad64-205b6fcf20da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:d7:02:d5:11:33:13:ea:76:41:23:22:e2:0d:d6:c2:5e:
         7d:8f:36:0a:84:07:4f:08:d0:04:76:58:5d:f3:0c:e6:65:52:
         79:ac:5a:52:7e:e7:2a:be:3e:cc:d9:a7:0f:2f:d5:a1:2f:0e:
         e6:7b:69:11:4a:15:4d:e5:73:0a:f3:79:c0:70:93:1c:07:ec:
         76:4e:f0:a1:c2:b6:f9:4c:20:5d:58:a0:28:8a:6f:97:0a:45:
         92:03:17:55:79:73:76:99:7c:51:dd:42:04:6f:92:db:48:39:
         4c:1f:ce:29:7c:d2:57:56:d1:8b:b9:31:50:61:09:74:7b:7c:
         80:c3:35:15:51:da:3b:94:34:a5:2f:f0:82:f9:fd:74:72:c3:
         53:a6:be:30:52:1a:f5:12:2a:cb:0b:76:4f:13:1f:67:19:3e:
         10:03:a9:99:34:0a:3d:c8:35:18:9d:ad:ea:47:67:c2:15:1f:
         df:02:8f:d2:75:00:1a:91:dd:d8:ac:e6:84:71:cb:fd:52:4f:
         05:91:ef:73:2a:e4:f5:66:f2:c6:76:86:65:ee:d8:d2:a2:f1:
         16:0b:78:d4:3d:61:de:43:a6:63:80:aa:93:17:6c:a0:29:34:
         9a:e0:bd:d5:f9:79:04:1f:41:5d:8c:f6:4e:37:63:d4:7d:c1:
         38:93:a6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----