Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9490c19-e989-38bf-97c0-1465bc8daf08.roa
File:                     b9490c19-e989-38bf-97c0-1465bc8daf08.roa (raw, json)
Hash identifier:          LwqGkX9hHVe2Q3fJRFGM/BnTxSoksgXgN6s8WkCWoDI=
Subject key identifier:   BA:38:EA:29:BC:8A:30:07:C6:57:FE:8A:F4:63:1A:EA:92:F0:F1:B3
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285845F7E9432003733D7E1F2EEB00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9490c19-e989-38bf-97c0-1465bc8daf08.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     151804
IP address blocks:        198.44.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:43:20:03:73:3d:7e:1f:2e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=c34f8749-bf48-42d3-9aab-a40d21e683f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:b2:bd:aa:44:cf:6d:ac:56:3c:41:13:f5:
                    c3:14:49:4e:0d:9d:74:4d:ea:31:85:a8:91:0b:71:
                    4d:68:e7:7e:ff:90:d2:6f:36:e7:3a:fb:84:af:83:
                    4b:31:be:c1:da:48:fa:72:01:dc:81:3b:d7:e4:49:
                    dd:b0:af:1c:ef:c1:bb:66:15:6d:8e:6b:8b:cb:ef:
                    9d:55:7f:c8:63:22:87:56:7c:ce:4a:83:ae:0e:46:
                    07:31:04:8c:ba:fd:df:98:92:06:c8:81:11:90:15:
                    fa:d0:fb:c5:41:2d:41:ef:5a:dd:47:1f:76:d6:aa:
                    5a:1e:e9:24:25:b3:9b:49:32:fb:84:91:76:34:78:
                    3a:4e:f9:7e:a8:ad:c7:5e:bf:94:53:99:8b:00:53:
                    d9:ad:8b:9b:4f:b0:f9:a4:3d:bd:06:ec:0f:83:5a:
                    64:3d:07:68:89:20:17:15:cc:38:0e:72:0f:f4:59:
                    bd:7f:b3:c8:1d:b8:65:f6:77:07:29:48:ac:a4:0b:
                    05:08:60:ea:e7:93:b3:98:fd:0e:00:d8:0a:87:19:
                    77:3b:5f:b3:5b:56:d7:24:8c:db:0d:cc:a2:77:d0:
                    51:c6:7d:37:05:9d:c2:d5:09:0f:46:9f:55:d6:1f:
                    6f:8a:06:56:9b:32:0f:e0:78:bb:c9:78:a4:b9:e4:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:EA:29:BC:8A:30:07:C6:57:FE:8A:F4:63:1A:EA:92:F0:F1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9490c19-e989-38bf-97c0-1465bc8daf08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:03:e5:ba:0b:4b:52:8e:5f:2a:73:c2:04:84:03:99:2b:d6:
         29:4c:b6:dd:5e:13:20:c4:8d:60:dc:e6:04:dc:12:b8:cd:74:
         33:8d:6c:c7:16:43:33:cf:31:f5:9e:fa:45:d4:0e:47:f9:74:
         27:e8:b9:91:7a:21:26:cb:0a:4d:74:1e:10:dc:98:4b:11:0b:
         d1:f2:a6:59:b3:d5:1c:f4:30:d1:8e:db:2b:d6:6b:29:63:05:
         b4:57:1e:85:76:f1:a7:7c:3a:02:02:a9:92:22:6f:32:de:54:
         dd:04:57:e3:66:d1:53:6a:aa:3a:ad:e0:e3:31:be:36:b9:1c:
         3e:24:84:0b:ef:91:ca:38:94:ca:b5:02:a3:4e:62:52:ee:74:
         47:0b:2b:22:16:46:7c:6b:e4:de:f6:f2:12:76:d8:ea:24:cb:
         46:19:cb:56:a2:80:82:47:83:79:9d:80:38:ff:86:c0:5e:cf:
         4d:b7:9b:bc:02:2f:78:d2:12:c4:aa:d6:7c:0f:79:cb:c6:ee:
         07:f0:5b:da:97:44:fd:cb:ae:4e:89:4e:b3:bd:7f:1c:de:fb:
         2e:66:92:ee:36:b6:60:d9:65:b7:c5:ac:10:ad:87:21:e6:a3:
         cd:b9:01:76:4c:4a:cc:54:41:db:5e:bc:a1:4a:50:35:26:c8:
         c4:36:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----