Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/fc030088-71d7-36b1-b03d-4d58ccc914c0.roa
File:                     fc030088-71d7-36b1-b03d-4d58ccc914c0.roa (raw, json)
Hash identifier:          FE8CfDvKPVC10UOSqQISn1qtITq07uXGglbmBI75iDc=
Subject key identifier:   37:5D:A8:2E:A1:91:61:35:31:F0:B1:6B:E7:95:C2:9A:B5:81:BD:8F
Certificate issuer:       /CN=a678b84f-a615-4754-9dcb-e51b04125026
Certificate serial:       010D0C9F43285846F3D23A8D8859DA163D406980
Authority key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/fc030088-71d7-36b1-b03d-4d58ccc914c0.roa
Signing time:             Wed 21 Aug 2024 18:38:02 +0000
ROA not before:           Wed 21 Aug 2024 18:38:02 +0000
ROA not after:            Tue 19 Nov 2024 19:38:02 +0000
asID:                     16661
IP address blocks:        172.83.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 19:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:d2:3a:8d:88:59:da:16:3d:40:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a678b84f-a615-4754-9dcb-e51b04125026
        Validity
            Not Before: Aug 21 18:38:02 2024 GMT
            Not After : Nov 19 19:38:02 2024 GMT
        Subject: CN=0ceccbe7-51ac-4ef2-ba10-4a9c5487150c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:81:85:37:05:cf:97:f1:7c:41:20:02:4a:
                    35:34:75:2b:d2:49:ff:d9:a9:4f:27:4a:26:d1:b7:
                    15:c7:4d:e7:c9:37:d1:bb:83:cd:91:40:8f:57:bd:
                    88:b7:49:f7:63:5e:b6:f1:85:d3:92:5d:cd:bb:a4:
                    01:d0:fa:e0:bf:e2:6e:5f:b7:a0:96:ed:30:ca:e0:
                    a0:2b:f0:6a:29:96:54:24:dd:c6:47:06:7d:9c:c2:
                    74:9b:07:28:1b:05:d4:45:9c:1d:c3:36:dd:ff:3e:
                    65:9f:ac:e7:8e:95:67:8c:bd:02:10:02:ca:74:ed:
                    ac:77:35:a4:ce:40:2f:f8:a4:e7:26:47:5c:af:28:
                    3d:f2:36:bd:db:70:7f:40:99:df:91:a2:20:2b:9c:
                    2f:ae:3d:09:31:90:0c:58:f6:f2:99:d9:9c:7b:87:
                    0f:fa:3c:61:6e:dd:97:a3:49:d1:28:b8:d0:19:77:
                    38:b4:a1:33:cd:5a:69:60:52:33:76:fc:bf:1c:e7:
                    01:bf:05:85:86:f7:5b:b6:07:2d:14:fb:6b:76:0a:
                    3f:a3:9f:a6:16:2a:24:d7:e1:bd:ad:03:33:df:d6:
                    f7:ff:4b:7a:80:1d:8b:9a:aa:e2:9c:50:ff:ef:79:
                    bd:75:6e:b6:be:58:c6:c3:1d:f9:71:92:76:97:76:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5D:A8:2E:A1:91:61:35:31:F0:B1:6B:E7:95:C2:9A:B5:81:BD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/fc030088-71d7-36b1-b03d-4d58ccc914c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl

            X509v3 Authority Key Identifier:
                keyid:D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:70:4b:9f:ef:b9:76:49:89:85:f7:05:01:6c:45:0e:7c:
         fb:02:0c:10:86:10:e8:97:b2:38:94:80:90:19:45:73:c7:2a:
         0c:13:1c:61:c1:00:d2:e1:55:b8:cf:8c:89:f8:38:ef:b4:7a:
         8b:1c:49:f4:00:88:8e:de:42:1c:9c:dd:e9:1c:e6:2d:a4:90:
         ae:08:b3:b1:b9:3c:41:64:2e:48:2c:85:08:8b:88:49:a3:80:
         2e:d8:6c:ea:c5:59:c2:f7:29:bb:fd:85:d8:7f:a9:58:db:67:
         32:17:76:73:03:f9:30:40:3d:0a:96:95:3f:39:b7:b4:c1:af:
         43:b8:9a:03:2b:db:7f:ba:58:db:1b:03:3a:08:34:8b:7e:d8:
         32:3b:89:20:f5:44:5b:4a:20:c6:5a:49:e7:55:67:e7:4a:77:
         03:ad:90:1f:43:15:a4:af:06:27:59:af:f3:3a:6b:1a:3c:43:
         ac:ad:84:19:d7:e9:bd:da:f1:c8:a1:fb:a2:c2:04:24:bd:93:
         ed:d5:7b:bf:07:0f:51:92:82:cd:a3:c6:fa:42:04:e8:2f:4f:
         20:32:45:2a:41:af:ab:17:4b:8a:68:92:3e:00:00:b2:b7:da:
         15:f4:5a:de:f3:6d:30:49:5c:c0:66:b2:a6:0f:02:38:ad:06:
         e9:8b:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----