Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/0fa81e46-023d-310c-b289-66bfbfea2061.roa
File:                     0fa81e46-023d-310c-b289-66bfbfea2061.roa (raw, json)
Hash identifier:          QaYuh8fXC1jcfUOmEo6AUUpstB02LUjRYAoU1kzXMps=
Subject key identifier:   59:6B:77:09:81:02:B2:AA:99:02:7F:42:E3:57:80:D0:9D:86:D3:DD
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F432858478E1BB9B99255F39273C4D980
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/0fa81e46-023d-310c-b289-66bfbfea2061.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     32058
IP address blocks:        216.147.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 15:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b9:b9:92:55:f3:92:73:c4:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=c43aa117-6247-4d39-ba27-929bd95efc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:81:e6:6e:30:68:54:da:84:20:0e:cf:69:
                    17:b1:99:df:93:06:ca:ad:1c:2f:18:11:a1:0d:b0:
                    3b:8f:0f:96:60:13:a1:9e:22:91:2b:aa:23:8b:89:
                    1d:6f:7c:94:fa:5f:07:ae:40:94:c4:6f:55:7e:01:
                    3c:7e:38:88:43:f7:1a:39:e6:13:e7:5f:7b:e5:7e:
                    26:d6:e2:15:f8:c9:ca:60:f1:83:c6:a2:5b:f4:9c:
                    23:2d:19:a0:ba:eb:71:14:77:9f:20:79:9a:bc:b8:
                    bd:94:4e:bc:35:22:54:74:43:26:6c:a1:8a:30:61:
                    cc:73:97:51:cc:11:6b:89:6a:af:04:9f:ae:02:dd:
                    b5:cc:da:bc:05:94:36:99:09:8f:4e:03:5a:9d:1b:
                    50:4e:2a:15:6b:aa:e5:dc:e1:8c:63:8a:ca:ce:d7:
                    ca:18:98:23:f3:f1:52:7a:e0:0a:33:c8:cd:45:55:
                    1e:9c:45:cd:d3:93:01:d8:2b:be:ad:10:18:83:fe:
                    33:17:84:40:74:25:25:c2:91:66:04:ee:49:4f:e9:
                    c3:c3:d6:91:ce:34:1f:31:47:83:b3:45:96:4d:72:
                    af:38:e3:c5:3b:05:e5:f8:27:ef:de:43:d2:39:b6:
                    8f:78:b7:c5:24:da:db:4b:cb:02:c6:d7:36:cb:5e:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6B:77:09:81:02:B2:AA:99:02:7F:42:E3:57:80:D0:9D:86:D3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/0fa81e46-023d-310c-b289-66bfbfea2061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:5a:e8:ab:a6:01:c9:44:72:79:f3:e3:ec:12:96:e1:a3:
         17:ae:63:8a:46:a3:b8:98:93:08:45:e1:67:63:30:a5:d8:e2:
         7f:5c:0e:4c:28:c2:66:0f:14:c5:43:8a:d5:e4:51:63:aa:af:
         5a:6c:16:68:d0:db:67:93:84:dc:2b:37:fa:41:59:d7:5c:60:
         48:12:b1:cb:3c:26:b9:58:2f:80:c6:d2:24:09:9a:1b:73:bd:
         15:1e:19:6b:05:0a:ab:06:50:58:e9:1a:3f:23:48:68:7a:3d:
         cf:0e:4f:51:40:14:26:e8:8f:90:f1:2f:1b:c2:a8:a6:75:45:
         e1:c8:31:16:f4:c6:a4:97:c9:19:10:11:b6:f5:22:b8:71:43:
         cc:38:83:7e:f0:47:85:37:3f:4b:0c:f6:a5:53:4d:f3:b8:7e:
         76:24:ec:cd:f1:20:92:7b:24:7c:a0:96:99:55:c8:26:5f:6d:
         5b:16:17:3d:ad:84:db:10:9b:ac:38:14:24:d5:01:f5:47:6c:
         6d:35:22:5c:54:58:5a:80:fd:d2:e0:e6:eb:e2:81:cd:da:73:
         82:f0:2d:8a:47:9c:33:92:16:3f:47:08:ec:da:e9:3b:01:68:
         b3:89:3d:72:d7:40:3f:ad:bd:cc:47:98:e8:a1:fc:23:f2:60:
         23:61:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----