Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/edf3b238-03f1-33d4-bbd7-8aad9a2cbc76.roa
File:                     edf3b238-03f1-33d4-bbd7-8aad9a2cbc76.roa (raw, json)
Hash identifier:          uF0PudWkrnQig6zLQXpSJE1X8KOsEgv746OWsadvSQw=
Subject key identifier:   A8:0E:99:47:6A:AA:D6:33:99:7F:A2:95:D1:E4:5E:EF:5A:9B:32:76
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584700A3DC87AAED6BE44838362E
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/edf3b238-03f1-33d4-bbd7-8aad9a2cbc76.roa
Signing time:             Mon 26 Aug 2024 08:50:07 +0000
ROA not before:           Mon 26 Aug 2024 08:50:07 +0000
ROA not after:            Sun 24 Nov 2024 09:50:07 +0000
asID:                     43260
IP address blocks:        23.160.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 12:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:00:a3:dc:87:aa:ed:6b:e4:48:38:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Aug 26 08:50:07 2024 GMT
            Not After : Nov 24 09:50:07 2024 GMT
        Subject: CN=6c68cfdd-fcab-4c0b-bfa3-b2ac9ecd7100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:34:98:f5:c4:86:59:07:11:ad:ec:4c:80:
                    2b:2b:53:87:69:65:2b:51:eb:d4:bd:c9:9a:22:87:
                    b6:a2:db:0b:ca:b2:5b:e4:bd:96:95:4f:3b:94:f8:
                    45:58:0d:f4:ae:b6:63:61:30:49:fb:7b:73:07:3a:
                    c3:42:9c:6a:4e:51:3a:54:35:3f:45:6f:37:37:5f:
                    5a:2e:bd:81:1b:86:09:0b:2a:11:bb:8a:b8:dd:8a:
                    ec:f3:f5:48:a0:49:f7:2b:4d:76:e5:23:4b:b1:e0:
                    c5:0f:3c:04:d5:fc:ca:e8:93:57:13:b1:de:20:94:
                    be:13:60:d6:1d:2e:84:6b:b1:12:0a:d6:d9:c8:09:
                    da:88:da:32:5b:0d:02:08:2f:fe:50:26:71:f2:67:
                    d5:04:c6:31:bd:29:74:67:2d:be:29:ae:a2:74:1f:
                    e3:cc:20:fd:4e:53:57:a7:69:7c:a8:0f:93:82:7b:
                    a7:7c:9d:cb:dc:81:3d:46:c2:72:0e:dd:35:93:a2:
                    a0:f1:b1:c2:48:d8:a1:5a:18:64:1f:e9:7a:38:f7:
                    22:ea:b6:d9:14:f7:76:75:c5:af:01:94:3f:8b:8f:
                    d7:45:b4:3b:61:aa:66:a5:7f:b3:80:37:9f:a9:e6:
                    ba:ea:13:fa:9c:26:32:69:2c:7e:27:06:ee:c2:e6:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:99:47:6A:AA:D6:33:99:7F:A2:95:D1:E4:5E:EF:5A:9B:32:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/edf3b238-03f1-33d4-bbd7-8aad9a2cbc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:0a:1b:49:2c:54:7d:f0:24:6b:ca:14:ad:a6:2c:2b:af:
         68:26:ea:37:cf:22:af:fd:19:76:29:18:c0:bb:20:41:fa:c7:
         68:ae:2f:ab:08:7b:f0:ad:d9:45:33:5f:fb:26:e6:b5:f5:1e:
         a4:ff:6b:5b:49:32:0b:6c:64:aa:94:f0:5e:a1:72:7d:0d:6c:
         b7:e2:a8:98:ed:bf:33:c8:19:ea:b1:a1:93:a0:3f:72:f2:41:
         a5:62:76:38:d5:be:77:aa:76:46:b6:04:b1:0f:c9:9d:5d:68:
         1f:78:a5:bd:1c:28:e8:39:1b:5d:f3:29:d1:ef:83:be:cc:41:
         2b:80:38:6d:ce:6a:c7:c6:e6:25:a7:89:ef:b6:c6:b9:f6:03:
         0e:a5:3f:89:8e:f4:7d:5e:e8:ad:10:65:92:3e:e0:91:66:27:
         bf:0f:fe:f5:5d:87:c7:24:0a:72:3a:7c:a6:61:4e:99:71:fb:
         60:da:d1:7a:b7:f8:67:94:bf:82:3a:a6:18:af:38:24:03:87:
         03:1c:ed:be:e2:45:98:61:76:f4:fa:27:af:51:f6:d6:54:a7:
         a3:7d:d3:e9:32:14:e6:c9:9b:46:32:9f:57:33:62:10:90:d6:
         2a:a3:ab:ef:53:ad:e9:0e:81:15:f5:76:99:16:51:0f:99:59:
         81:c5:e6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----