Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/943af190-6796-31a6-a6eb-d31677d52aca.roa
File:                     943af190-6796-31a6-a6eb-d31677d52aca.roa (raw, json)
Hash identifier:          huq0cY+0ee8zU0NjJe/lhZFCiQE+qYHm0t2ikFQjsSs=
Subject key identifier:   73:DD:56:95:6E:BF:A5:DC:B0:0C:A0:6E:B9:E4:18:A5:A4:55:6A:C6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBF82273D305CB480C180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/943af190-6796-31a6-a6eb-d31677d52aca.roa
Signing time:             Wed 16 Oct 2024 14:26:36 +0000
ROA not before:           Wed 16 Oct 2024 14:26:36 +0000
ROA not after:            Tue 14 Jan 2025 15:26:36 +0000
asID:                     81
IP address blocks:        152.46.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bf:82:27:3d:30:5c:b4:80:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:36 2024 GMT
            Not After : Jan 14 15:26:36 2025 GMT
        Subject: CN=d5c8e525-cdb7-400d-96d4-51ebb5328460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:da:a9:53:cb:15:cc:78:53:19:2b:52:8d:
                    a3:59:6f:f1:73:23:44:01:f9:79:20:48:5a:0c:4c:
                    e9:75:c5:37:7f:10:6e:43:75:fd:69:51:33:eb:3e:
                    69:80:93:5b:5a:3f:aa:d8:2f:d5:3c:26:10:64:ab:
                    c7:e2:8c:9d:49:b2:75:ff:6d:d4:03:cb:4e:d4:2a:
                    e4:28:ff:08:bd:d6:32:48:ab:86:9f:8a:c4:45:9b:
                    49:74:33:2e:99:f6:b2:ba:dd:5f:07:d5:8f:4a:71:
                    44:5b:00:76:0d:b9:86:8a:4f:e8:9c:14:bc:11:53:
                    1e:0e:9e:b6:e8:79:2e:e3:11:12:ce:d8:10:0c:7c:
                    f7:20:da:f6:87:98:75:13:0d:3f:22:c6:ac:bf:65:
                    63:9e:62:8a:39:9a:1f:79:cc:c1:a5:73:bd:30:8c:
                    3b:04:5a:9f:d4:fe:8d:91:6c:d3:5c:75:02:f4:2b:
                    80:d7:8b:98:1f:0c:2b:ec:1e:a8:9f:5d:2a:da:5e:
                    50:f5:fa:dd:26:5b:57:3c:42:2f:28:37:bd:13:35:
                    d5:12:9d:d5:f7:16:29:2c:3d:1c:c3:72:71:03:62:
                    df:c2:8a:72:de:f0:98:a3:99:f4:38:5c:4c:21:c5:
                    7f:db:8d:00:b9:9a:04:7f:50:93:a8:ce:b9:8a:42:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:56:95:6E:BF:A5:DC:B0:0C:A0:6E:B9:E4:18:A5:A4:55:6A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/943af190-6796-31a6-a6eb-d31677d52aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:57:f2:f7:4b:27:b4:bb:e5:92:5b:9b:02:06:6b:31:c0:
         8b:48:9f:8c:98:98:e0:a7:32:79:ca:56:1d:93:e4:49:a2:9f:
         54:89:1f:a5:68:5c:59:1d:6f:14:db:24:21:1c:f3:13:3d:03:
         5e:6e:27:bf:7f:a1:e8:57:56:de:3b:fd:74:c9:63:e9:7e:0a:
         45:a9:db:9d:10:70:71:6d:95:78:27:8f:79:9d:7a:df:c9:2e:
         37:34:58:da:04:f6:7c:51:11:14:fc:1a:d1:6f:37:18:c8:ca:
         a2:0d:42:42:a5:32:d6:d1:9d:df:e1:70:63:d6:cb:6a:4d:fe:
         89:c3:e7:7d:20:20:db:76:be:a7:a7:15:3b:ca:8b:a7:60:ce:
         91:a2:71:b8:0b:39:b5:ef:bd:56:05:e0:5e:98:79:6a:b9:8a:
         df:ec:28:d0:14:56:de:97:76:9e:0f:f5:06:b8:62:77:ba:f8:
         8f:84:30:0b:5a:3a:d9:c4:c9:de:7e:5b:93:e4:02:de:c7:52:
         a4:3c:9c:01:44:aa:f5:b6:55:61:86:8f:76:af:9f:de:45:f8:
         08:95:42:b2:50:b1:20:67:57:97:4d:bb:22:2f:7d:e2:93:04:
         32:66:e0:ea:c2:15:fe:2e:4b:e5:97:be:d7:20:d5:c0:2e:16:
         41:37:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----