Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ca8457a9-02cc-32cf-8f39-a99b9e836564.roa
File:                     ca8457a9-02cc-32cf-8f39-a99b9e836564.roa (raw, json)
Hash identifier:          dAf9DBFI8wt1VyplrEmXcJtayauaHX+9OkSKg77/+DQ=
Subject key identifier:   49:80:1F:A5:92:A4:FA:5B:E7:09:A1:FC:98:E8:E6:49:B9:C7:A4:8C
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C3062350C078D38D5131B0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ca8457a9-02cc-32cf-8f39-a99b9e836564.roa
Signing time:             Mon 11 Nov 2024 18:47:30 +0000
ROA not before:           Mon 11 Nov 2024 18:47:30 +0000
ROA not after:            Sun 09 Feb 2025 18:47:30 +0000
asID:                     376
IP address blocks:        206.167.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c3:06:23:50:c0:78:d3:8d:51:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:47:30 2024 GMT
            Not After : Feb  9 18:47:30 2025 GMT
        Subject: CN=e2ec4680-e72b-4bce-8c94-dacbf2e6c574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:43:0a:83:38:40:2c:f9:49:cc:06:f9:a1:
                    ef:c9:98:0e:9c:04:8d:9c:9f:c7:8e:4b:62:fe:00:
                    51:1d:39:df:56:f6:16:c2:93:7d:2c:80:50:ee:0f:
                    8a:c6:8f:e4:f3:23:7c:1b:7f:ad:6d:02:33:6f:24:
                    a6:f1:88:92:49:b0:a4:69:71:bf:3e:81:09:75:2c:
                    c8:12:23:ad:8d:57:e5:ff:74:77:4b:c2:12:ce:26:
                    67:8a:94:28:6c:08:d5:40:36:75:3c:46:ce:97:83:
                    32:86:5b:eb:19:1c:52:ee:2e:5b:fe:2f:60:45:c7:
                    ed:cd:72:c3:35:52:9f:bd:8d:11:b6:5c:db:70:cc:
                    49:7a:7b:79:d8:c5:ee:c5:c9:ab:d5:3f:c4:b1:a4:
                    d5:c2:f0:8d:40:58:4d:53:cc:d0:9a:ef:b6:e3:de:
                    8e:5a:f1:8e:0a:b6:a9:2e:af:e8:c4:f1:16:43:4c:
                    0a:9a:c7:6b:34:65:1a:39:2e:11:9f:f0:9c:20:44:
                    33:a5:60:e3:10:32:56:0a:8e:48:91:03:9b:6a:25:
                    94:58:20:e3:f2:4c:52:8b:a2:d5:d2:7a:53:ea:a8:
                    7b:f6:17:32:ac:08:6d:c5:01:b3:8f:27:50:db:a3:
                    fd:55:5b:d6:58:0f:d4:fb:ca:42:a0:87:c4:69:d3:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:80:1F:A5:92:A4:FA:5B:E7:09:A1:FC:98:E8:E6:49:B9:C7:A4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ca8457a9-02cc-32cf-8f39-a99b9e836564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:67:66:ff:0e:21:4d:7f:d3:3a:14:ef:74:d8:8e:cd:db:54:
         13:4e:9b:b3:1d:b2:cc:d6:8b:c2:6b:b5:3d:d2:37:88:ab:f8:
         00:b8:02:b2:0a:51:44:47:9f:e8:93:9a:e2:07:11:b5:1c:75:
         39:31:83:ee:2a:43:5a:3b:2f:70:06:a6:f4:58:89:4b:62:e3:
         69:65:cd:74:97:49:4e:24:11:75:69:9d:1b:89:76:3a:24:b4:
         7b:b3:ca:ac:29:14:4d:c9:f6:04:17:40:bb:77:56:c7:ab:9e:
         90:99:ac:02:e4:37:77:6f:69:14:8f:05:21:cf:23:99:4c:f3:
         58:3d:1c:ed:7b:d5:39:28:c9:33:42:e5:26:df:c1:db:5e:e7:
         11:52:cc:9b:2e:38:e0:d9:c4:13:89:a4:a3:16:a9:0b:c4:33:
         cb:cd:99:dd:8c:5e:94:7a:31:4c:ae:d3:24:25:15:a9:3c:2f:
         82:8a:4d:5f:4f:7e:b9:c6:5a:01:4b:d4:1d:8b:6f:21:fc:1d:
         22:57:a8:aa:43:15:b0:2e:0c:8a:bf:bb:56:fc:2b:a3:53:ea:
         96:a0:d4:30:69:b0:1f:84:1e:c4:23:87:b5:98:4d:79:3b:0c:
         e0:96:3d:67:a3:9d:c9:5b:52:ee:91:53:61:af:c0:d5:f8:69:
         1c:6c:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----