Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/34efd2b6-351f-3471-befa-9164985f9dfa.roa
File:                     34efd2b6-351f-3471-befa-9164985f9dfa.roa (raw, json)
Hash identifier:          46ElhOySsPtxblfhZtJW4ksKjtMWAFk3uQHdzu37EUY=
Subject key identifier:   C9:D7:89:84:1B:CE:03:47:DB:3F:FA:65:F8:1B:DC:2A:F0:78:CA:28
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F43285847E069CD3349943B7D4373E500
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/34efd2b6-351f-3471-befa-9164985f9dfa.roa
Signing time:             Thu 14 Nov 2024 12:34:12 +0000
ROA not before:           Thu 14 Nov 2024 12:34:12 +0000
ROA not after:            Wed 12 Feb 2025 12:34:12 +0000
asID:                     188
IP address blocks:        198.151.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 15:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:69:cd:33:49:94:3b:7d:43:73:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Nov 14 12:34:12 2024 GMT
            Not After : Feb 12 12:34:12 2025 GMT
        Subject: CN=9888583f-b89d-4c0c-a563-a1fb31262ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:93:7b:49:08:1a:d8:53:ec:b6:9f:fc:16:
                    8f:e5:f1:b6:9c:c8:ba:c5:9f:16:23:b3:5e:38:83:
                    75:81:51:af:db:70:be:16:a8:ee:00:ef:b4:fa:f6:
                    25:95:54:c7:40:37:12:1c:00:f3:60:03:d1:fe:f0:
                    7b:4c:2e:e0:a2:73:64:7e:ee:20:75:bb:bc:c3:d0:
                    2b:65:c1:07:ea:66:ee:91:d8:24:11:b7:13:55:62:
                    8d:2b:79:63:1f:e9:67:3f:93:3a:d4:29:2a:dc:f2:
                    84:a6:ea:12:a7:4c:23:a9:b1:d3:a9:09:5a:fe:7f:
                    e9:35:cf:4b:12:b4:49:2b:ae:e5:24:90:c7:25:eb:
                    36:00:4f:3f:21:0d:eb:c0:0b:57:7f:9c:45:b9:de:
                    a4:bb:72:20:25:53:dc:d4:67:8d:ec:8e:f5:71:7b:
                    f2:38:27:db:54:e4:f5:ed:f7:54:f1:90:09:7e:a6:
                    d7:76:d1:0c:f7:3d:5a:ab:83:a7:e8:e6:13:a8:9d:
                    22:dd:7b:f8:34:98:48:c5:fd:df:99:b3:fa:9d:1a:
                    1f:48:11:f3:52:74:27:4f:41:7b:e6:95:17:a4:6c:
                    60:32:4b:89:0a:b2:65:14:18:a5:82:eb:f3:1e:96:
                    6f:56:47:af:38:71:76:9d:2d:ae:13:ce:c5:62:a0:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:89:84:1B:CE:03:47:DB:3F:FA:65:F8:1B:DC:2A:F0:78:CA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/34efd2b6-351f-3471-befa-9164985f9dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:86:f1:96:0d:27:5b:3d:0d:30:36:6b:1c:54:c6:89:78:
         c8:ef:31:99:b2:c6:ec:30:14:1f:c7:0b:81:3a:c3:b5:10:c6:
         87:13:68:75:f5:5b:ee:67:47:78:e1:9b:80:b0:b6:f5:73:4f:
         55:aa:59:c3:76:c2:76:56:c0:21:20:16:dc:5b:23:d0:9c:00:
         46:e6:6f:c6:1a:2f:ff:0f:b1:e0:54:95:fb:8c:44:ee:2c:8c:
         d3:78:b8:27:c3:9d:90:a9:61:e3:f1:35:04:c3:a2:e0:bc:33:
         c6:c3:ab:bf:92:fe:4c:b3:f9:ba:1e:0f:66:fe:17:dd:25:75:
         5a:e2:0b:3c:c8:55:28:4a:35:77:9f:44:6a:7d:04:c9:52:a6:
         7a:cd:43:55:21:61:ae:0b:04:c3:62:37:6f:78:58:1e:42:1a:
         ee:96:8c:74:f3:b5:af:ee:33:8d:1a:2c:7d:7b:e8:10:94:67:
         00:a0:60:4a:5b:26:cc:63:4d:c3:74:98:a3:0e:44:9d:bc:05:
         e5:2f:fb:f9:39:2f:15:f8:b9:72:4a:da:88:73:16:a5:80:1c:
         0b:3f:fd:5c:e7:35:d4:d9:90:af:6a:46:d4:e3:fc:fa:84:c5:
         0c:ca:07:30:24:39:3b:9d:ed:81:32:c5:dc:f7:9d:06:83:3f:
         21:22:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----