Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/d9c8a155-1db3-352d-b308-62cf41238218.roa
File:                     d9c8a155-1db3-352d-b308-62cf41238218.roa (raw, json)
Hash identifier:          tAsB7LVNj1fEAz1rXnTXA6Rsc0r8Wn3kJlLcQavQaAs=
Subject key identifier:   5E:7B:7F:5A:CA:C2:F7:BB:AB:CD:64:1D:3D:51:F2:3C:BB:2A:55:CF
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F43285847F4A6D313014FCCFC7D758CC0
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/d9c8a155-1db3-352d-b308-62cf41238218.roa
Signing time:             Thu 21 Nov 2024 18:33:19 +0000
ROA not before:           Thu 21 Nov 2024 18:33:19 +0000
ROA not after:            Wed 19 Feb 2025 18:33:19 +0000
asID:                     401395
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 22:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:a6:d3:13:01:4f:cc:fc:7d:75:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Nov 21 18:33:19 2024 GMT
            Not After : Feb 19 18:33:19 2025 GMT
        Subject: CN=8827a3bf-80da-47c1-91df-3dd01f5b4ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:60:b1:ed:34:46:fd:f2:e3:20:2d:64:43:
                    0a:8e:66:c9:dc:b6:4b:23:39:df:a9:1f:1c:cc:6f:
                    72:b7:98:9e:99:4b:5c:42:cd:be:26:5b:ba:81:6a:
                    fb:15:81:fe:1b:7e:83:03:0b:14:f4:21:1f:c5:d8:
                    8b:49:ad:e2:69:46:dd:d4:07:7d:8a:5a:a2:d2:c2:
                    d4:0f:e6:61:e9:e9:bf:82:7b:f9:a2:6f:8c:db:90:
                    f2:71:8b:6b:bb:a7:20:f3:55:28:84:74:81:49:d9:
                    a3:68:97:df:ac:4f:60:70:83:75:51:6b:be:5b:27:
                    15:22:98:3f:d3:29:61:e4:e5:44:60:42:ef:9d:7b:
                    04:7f:4b:7a:31:8d:13:1c:4c:5e:2b:dc:05:da:82:
                    4a:2c:0f:59:7e:8c:7e:b6:e7:63:bc:b1:cf:b3:da:
                    60:7f:2b:4b:0f:d6:4b:29:1b:8c:d9:55:27:85:7a:
                    16:5f:f1:a7:d8:fc:9e:0c:1b:bb:36:cf:17:16:6f:
                    7f:fe:7b:5a:a8:23:34:83:71:e3:9a:55:8f:2a:30:
                    20:a6:ee:36:46:92:1b:8f:e8:2e:76:d1:a5:96:32:
                    ac:cc:16:fe:e2:30:4e:49:49:a1:25:e8:19:64:5d:
                    3b:42:df:86:7d:a3:18:a1:0c:78:c7:70:2f:0c:b3:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:7F:5A:CA:C2:F7:BB:AB:CD:64:1D:3D:51:F2:3C:BB:2A:55:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/d9c8a155-1db3-352d-b308-62cf41238218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c3:1f:b9:1b:95:c1:2e:66:d6:4d:ee:ba:b6:62:a1:db:75:
         2e:96:fa:dc:74:21:a5:d6:df:2e:cc:a2:e9:bd:2f:44:5c:79:
         53:66:b7:87:f4:94:83:ea:25:b6:6b:8e:3f:06:f9:da:5e:b6:
         22:ff:83:be:ff:ba:f2:dd:e1:20:6a:4e:ab:3f:9e:12:0b:c8:
         d0:e6:7f:a5:fa:97:27:90:cf:7f:57:40:56:18:0d:e8:eb:80:
         c4:1c:0e:55:15:b6:cc:7a:f6:e3:00:8c:49:1d:a3:93:69:24:
         7e:43:a8:7d:1a:32:45:e3:b9:d3:c7:95:5c:55:51:fc:8d:ab:
         06:b2:ce:05:8b:29:1a:49:42:94:0b:d7:bf:93:10:0f:11:2a:
         51:7e:29:23:1b:c5:15:7b:ee:05:e4:dd:f4:e9:f3:93:de:10:
         15:3e:89:46:bb:0e:dc:bc:d7:48:76:b6:13:a5:98:ad:39:03:
         d5:c9:e9:2a:c4:26:7f:ca:3e:22:e4:aa:c4:fe:d6:25:90:63:
         e9:eb:1d:7c:5d:78:e5:4f:a8:19:5e:68:f9:a9:b8:e5:45:22:
         39:e0:29:7e:7e:13:db:98:46:52:fd:b5:9c:fe:07:43:a4:e7:
         b6:6a:e3:05:00:4d:90:0e:df:24:e5:19:b8:21:ae:45:c9:de:
         07:34:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----