Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/00934bb7-d10e-38e0-ac83-dccebbbfbb76.roa
File:                     00934bb7-d10e-38e0-ac83-dccebbbfbb76.roa (raw, json)
Hash identifier:          N4W1aTmMIKvdOqOZH0Mzi1Nd2RUi8auRpKZTUmo6nv0=
Subject key identifier:   E4:96:52:81:87:D5:F6:F1:B9:46:C8:DC:BA:C9:F8:2B:0A:B0:DA:15
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F432858479362FDD9EACB5FB82C040D80
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/00934bb7-d10e-38e0-ac83-dccebbbfbb76.roa
Signing time:             Thu 17 Oct 2024 22:23:14 +0000
ROA not before:           Thu 17 Oct 2024 22:23:14 +0000
ROA not after:            Wed 15 Jan 2025 23:23:14 +0000
asID:                     401395
IP address blocks:        192.157.36.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 21:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:62:fd:d9:ea:cb:5f:b8:2c:04:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Oct 17 22:23:14 2024 GMT
            Not After : Jan 15 23:23:14 2025 GMT
        Subject: CN=48fdcb4d-2fd6-4e0a-86a5-32cc4971c68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:c4:03:5f:0e:65:9b:19:cf:08:51:d9:f0:
                    48:ac:b7:f5:f6:13:9d:d5:8a:e2:70:a1:cc:58:6a:
                    4a:74:d4:80:d7:1d:a6:e5:b0:e1:9f:35:79:26:13:
                    a9:a1:f2:05:c8:25:82:38:93:d5:30:b7:b8:0d:f1:
                    93:45:9f:8d:06:a1:bb:70:f4:b0:77:0c:64:6d:c4:
                    0b:db:7b:82:aa:b2:0c:cb:09:e2:d2:51:ea:10:ac:
                    f2:48:28:82:14:7d:42:92:2d:12:13:54:00:b9:0e:
                    f4:38:1e:da:1d:67:2a:74:a8:7f:5a:04:28:1f:28:
                    30:49:9b:45:19:c6:d1:39:9e:d6:3b:5b:fc:20:10:
                    1a:2d:93:eb:ae:96:b4:cc:dd:d0:1b:2b:7b:ed:9d:
                    3b:44:6c:f7:e9:8f:cd:91:c2:2b:55:1f:9e:56:16:
                    ca:17:1c:78:f7:e3:f2:ac:db:ab:7c:2e:15:3f:fe:
                    62:3b:e9:6f:3a:0f:6d:de:b9:5c:6b:6b:27:b8:5b:
                    67:96:57:15:1c:f9:a6:57:81:f7:c0:74:61:0c:21:
                    cc:5f:af:4b:3f:05:8e:29:1d:07:b9:17:4c:c0:e7:
                    83:71:bf:2a:3e:64:99:ce:f5:bd:4d:77:2c:7a:c1:
                    df:03:87:64:c8:e6:2f:d1:eb:cb:ca:a1:11:59:e5:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:96:52:81:87:D5:F6:F1:B9:46:C8:DC:BA:C9:F8:2B:0A:B0:DA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/00934bb7-d10e-38e0-ac83-dccebbbfbb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:43:4f:70:44:2f:f9:54:c9:24:8a:bf:b3:de:b6:ee:00:5e:
         3f:e9:6f:77:0e:5d:dc:25:8d:c7:07:73:49:a7:ba:ab:25:a3:
         2b:e1:ae:36:a1:31:46:fc:69:94:0e:60:3b:87:76:cd:99:40:
         f6:45:da:bb:f4:12:50:27:21:0c:00:3d:1e:85:f3:e8:95:ea:
         4d:53:f9:4a:d0:a7:59:a0:e9:58:59:1d:cd:b1:8e:70:59:9b:
         a8:0e:cc:33:92:89:56:8f:31:65:4c:4b:f3:c8:26:d8:1f:ae:
         6b:80:2b:10:d3:71:05:41:61:32:48:80:2d:3f:f8:73:90:99:
         22:55:23:94:da:a2:7b:7f:00:b4:78:87:eb:6f:f3:67:50:9e:
         eb:35:22:dc:00:89:26:72:a3:ce:bb:3c:b7:39:ce:89:55:cf:
         54:32:58:24:83:3c:85:80:54:a1:35:22:e8:2d:35:8f:55:67:
         24:99:ee:95:e7:f1:cb:a3:08:0b:bf:a8:9d:0b:9d:b1:d7:30:
         a2:62:43:cd:85:c8:51:ca:56:64:59:b1:21:07:ec:40:7c:d4:
         c7:d2:0f:a1:80:99:e6:4f:08:2f:1e:42:f6:a1:c9:23:85:9e:
         ad:02:de:f2:1d:99:90:62:01:39:38:31:43:52:57:d2:ac:9e:
         f0:e0:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----