Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c69505fc-4eec-3ed7-b988-f34852cad76f.roa
File:                     c69505fc-4eec-3ed7-b988-f34852cad76f.roa (raw, json)
Hash identifier:          kHoA2VM/7xf04RsDObPBV4MsmW9oiucGSIoZG/VOLbA=
Subject key identifier:   43:4F:25:10:41:E8:8B:18:99:4D:30:06:D7:36:86:60:EC:3F:59:81
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBB75A076E435D8B8D750
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c69505fc-4eec-3ed7-b988-f34852cad76f.roa
Signing time:             Wed 16 Oct 2024 14:26:34 +0000
ROA not before:           Wed 16 Oct 2024 14:26:34 +0000
ROA not after:            Tue 14 Jan 2025 15:26:34 +0000
asID:                     81
IP address blocks:        152.26.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bb:75:a0:76:e4:35:d8:b8:d7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:34 2024 GMT
            Not After : Jan 14 15:26:34 2025 GMT
        Subject: CN=4511b950-6179-4189-9eef-daa697dd884d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:a7:60:c0:c5:1b:99:f1:8c:37:6d:b7:ba:
                    c4:22:66:60:f7:37:83:f1:22:65:a3:37:0b:a6:a7:
                    94:ed:72:b5:ae:18:e0:e6:74:6c:d7:a3:d3:a4:cf:
                    bc:fa:ac:53:a0:95:2a:e2:ef:57:bf:91:b5:0a:3a:
                    7c:07:2f:e8:d5:f0:32:5b:04:a0:63:cb:7c:47:0f:
                    bf:c0:5c:50:60:bd:a9:ef:85:7a:25:59:17:db:40:
                    9f:1e:43:5a:22:a0:4a:d0:68:22:0b:54:38:42:61:
                    b0:e7:7b:ab:65:57:66:18:d6:fd:46:22:a6:a3:c9:
                    01:d4:97:76:d4:3a:d8:87:6b:57:62:85:93:54:03:
                    c6:e2:eb:32:56:bf:c7:e7:a0:a8:40:10:bc:34:b4:
                    af:78:16:77:33:48:a6:31:9e:69:34:6f:37:6a:08:
                    eb:9d:10:6f:de:40:47:75:37:bf:c9:ac:73:04:1f:
                    33:db:82:b7:f6:bf:67:1c:60:1c:d5:df:af:53:ac:
                    53:3d:fe:bf:8b:6d:64:6c:34:33:8e:fb:74:93:ca:
                    09:9b:df:8e:3b:4c:fa:01:3e:93:ef:40:0a:dc:1a:
                    53:6b:ed:6e:d8:c7:ee:59:48:f1:bd:1a:55:92:77:
                    ce:99:ac:5c:23:99:c4:1a:28:18:ca:d3:f6:f3:39:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4F:25:10:41:E8:8B:18:99:4D:30:06:D7:36:86:60:EC:3F:59:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c69505fc-4eec-3ed7-b988-f34852cad76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:ec:36:83:14:2c:4e:77:0b:3c:a4:45:7e:26:8f:19:ed:
         29:29:6b:af:c8:fc:a5:63:e8:d2:6f:4f:41:76:1a:9c:95:b9:
         7a:8a:cd:48:25:a5:d0:51:ba:a3:ce:95:10:e6:20:8e:38:b4:
         e2:fd:ec:9c:6e:71:38:fd:09:cf:7e:36:46:44:5a:c4:88:f4:
         0d:12:93:6a:76:ef:53:1e:6b:fe:c5:1e:19:c3:ab:e6:7a:12:
         cf:5a:ea:f2:41:4c:1f:b1:68:e2:d5:07:8c:29:c4:03:ff:7d:
         7c:dd:db:7d:7e:72:a5:aa:79:ab:d1:08:64:96:d9:4c:56:75:
         a0:c8:c0:89:1b:45:fc:50:60:16:1b:54:e0:4a:c0:5f:99:cc:
         1d:d4:21:69:cd:36:2b:fe:d2:63:3f:2f:54:70:e2:1f:ee:67:
         ff:fd:79:11:be:1a:39:8f:1d:14:b7:7f:dd:8c:da:83:0a:67:
         57:cc:bc:da:b8:b9:0b:b9:9f:75:0e:06:e9:00:1b:b3:0a:d3:
         25:16:59:b8:bc:55:c5:7a:7c:99:99:9f:29:31:a1:ec:21:ed:
         2d:b2:dc:4f:f6:a5:d9:33:6a:a4:52:83:49:17:ff:6d:0a:b9:
         35:ad:89:36:a9:0f:a1:67:00:10:c1:d8:8b:3a:99:f1:21:56:
         8b:8a:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----