Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/b9f05fd4-2e93-3ea8-af0e-8eec65a731bc.roa
File:                     b9f05fd4-2e93-3ea8-af0e-8eec65a731bc.roa (raw, json)
Hash identifier:          GzoBfqQxLcdV0JLZcB+J+4gV8i0KNd0G3CjYRmjPOuo=
Subject key identifier:   D4:BB:D5:13:A0:52:7A:59:03:54:AD:48:BC:46:85:12:96:85:16:81
Certificate issuer:       /CN=c25fae3c-7a75-46fa-859f-1921cb2d70e4
Certificate serial:       010D0C9F432858478E0F449B8C5A22922AF7BE00
Authority key identifier: 14:6A:6C:23:CE:7B:E8:A4:2E:E9:D9:58:8B:F5:4B:F6:ED:1D:65:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/b9f05fd4-2e93-3ea8-af0e-8eec65a731bc.roa
Signing time:             Wed 16 Oct 2024 00:35:30 +0000
ROA not before:           Wed 16 Oct 2024 00:35:30 +0000
ROA not after:            Tue 14 Jan 2025 01:35:30 +0000
asID:                     3356
IP address blocks:        64.135.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 01:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:0f:44:9b:8c:5a:22:92:2a:f7:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25fae3c-7a75-46fa-859f-1921cb2d70e4
        Validity
            Not Before: Oct 16 00:35:30 2024 GMT
            Not After : Jan 14 01:35:30 2025 GMT
        Subject: CN=6ec2ec81-ad12-4e0a-931f-7aa853024ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:83:95:ef:0b:00:91:8e:e7:7f:f0:9d:e3:
                    89:b5:54:c1:fa:87:9e:45:cd:06:73:f1:7f:ed:75:
                    9c:8e:aa:b8:3c:e9:ef:64:76:bb:49:6a:7b:32:55:
                    21:e9:1c:28:69:74:f5:01:35:af:38:1a:8f:2c:ff:
                    8f:fc:3a:3a:40:ff:78:99:dc:de:12:99:cd:cf:15:
                    da:0c:f5:c7:d8:66:ab:3b:e5:75:3f:f0:02:88:46:
                    f3:5d:e1:e0:bc:60:59:e9:91:67:8c:e7:cc:ac:54:
                    90:f0:18:ef:fc:c5:e6:a5:b6:1b:d5:06:46:48:94:
                    6b:54:81:41:4d:49:90:08:90:54:30:39:e0:bb:d5:
                    d4:db:cd:cb:2b:e3:3a:9b:db:06:39:36:86:e4:ce:
                    02:2a:fe:0d:30:bf:87:04:36:00:a4:cc:11:e8:c2:
                    80:00:40:3d:80:1f:20:3e:e4:61:2f:71:ee:ec:3a:
                    88:e4:28:eb:92:67:af:4f:74:95:92:9b:8a:ab:b2:
                    c5:27:cb:b1:fa:19:9c:13:b7:db:9f:86:3c:b0:3f:
                    12:68:73:3f:1c:cb:b2:2e:30:df:eb:ef:7d:ef:32:
                    73:ac:38:ea:f4:2f:3f:7a:f6:bc:ec:f5:00:45:d8:
                    82:5c:e2:ff:c5:09:0e:01:3a:eb:e2:08:e6:f2:c4:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BB:D5:13:A0:52:7A:59:03:54:AD:48:BC:46:85:12:96:85:16:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/b9f05fd4-2e93-3ea8-af0e-8eec65a731bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/c25fae3c-7a75-46fa-859f-1921cb2d70e4.crl

            X509v3 Authority Key Identifier:
                keyid:14:6A:6C:23:CE:7B:E8:A4:2E:E9:D9:58:8B:F5:4B:F6:ED:1D:65:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.135.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:fc:d6:3c:50:bf:db:25:b5:68:ab:7d:47:cd:ef:45:02:
         3a:e3:bf:95:64:8e:7f:04:de:82:a5:2d:e7:a3:37:5b:12:1b:
         64:71:95:a9:8a:ba:52:1c:ea:82:da:e0:5e:34:6e:5b:d3:4b:
         ce:08:93:50:a6:97:aa:a3:c7:25:08:12:e7:1c:20:5b:5e:61:
         f3:00:68:aa:80:07:9c:e4:5e:0f:16:a8:9a:20:e4:7f:2b:ae:
         04:0a:b7:04:6a:ae:57:ac:51:15:20:29:fc:85:d0:dd:b5:a1:
         24:47:fa:0f:cd:23:10:b3:22:ac:85:e5:ef:59:5b:fe:6b:c5:
         87:c9:c4:92:db:b9:9c:1e:74:9b:9d:bf:d3:7a:13:f9:e0:6a:
         97:07:ee:05:47:b2:36:df:88:5c:48:ca:3e:9c:eb:41:46:31:
         92:40:bd:a6:0a:ed:c8:46:22:65:7e:c6:d7:62:2e:52:b2:48:
         68:00:3e:d7:75:6d:ca:49:92:b0:5b:f2:15:b2:c5:c9:a9:03:
         65:fc:ca:a0:6f:6b:54:e5:6b:e3:a6:74:5a:1d:6a:1c:b5:6b:
         d9:e2:39:01:cc:d5:70:7e:ed:90:87:27:90:3b:a1:76:e9:e2:
         ce:d2:5c:3c:be:74:93:d2:bd:3d:38:e5:dc:9c:6f:bf:ba:cb:
         94:04:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----