Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db9b6f92-63b5-3dcb-a33c-160e1efbc818.roa
File:                     db9b6f92-63b5-3dcb-a33c-160e1efbc818.roa (raw, json)
Hash identifier:          scucq/KTxGyRlfnCW4nQCMuSifsyCDZ89lGzczhdXDs=
Subject key identifier:   74:B5:B1:40:53:45:34:D0:11:0A:89:A5:5E:B1:A4:C0:BC:B7:1C:B6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBA8946B3518AE7C2E7C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db9b6f92-63b5-3dcb-a33c-160e1efbc818.roa
Signing time:             Wed 16 Oct 2024 14:26:33 +0000
ROA not before:           Wed 16 Oct 2024 14:26:33 +0000
ROA not after:            Tue 14 Jan 2025 15:26:33 +0000
asID:                     81
IP address blocks:        152.26.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:ba:89:46:b3:51:8a:e7:c2:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:33 2024 GMT
            Not After : Jan 14 15:26:33 2025 GMT
        Subject: CN=72bd45c8-7553-4ceb-a0c5-bc413beca4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:4e:cd:33:16:f5:ea:98:a3:ff:0c:b6:46:
                    d5:e1:dd:ec:c6:35:22:1e:a2:f7:c0:2a:5c:2f:2d:
                    c4:f1:b7:3b:70:98:22:ac:14:54:43:94:23:62:2f:
                    86:4f:ed:3d:c9:b5:c7:48:bf:9b:cc:3d:04:a7:a8:
                    91:c1:16:8a:c0:9d:1a:22:23:da:4c:79:60:61:ca:
                    f7:62:d4:14:89:17:66:d2:32:7d:b7:42:3f:21:b7:
                    92:7a:13:06:02:2d:57:34:98:56:ef:45:29:16:7e:
                    38:f0:30:ce:cf:83:fc:20:a5:2c:ef:1a:dc:23:26:
                    d8:26:37:5b:67:5b:1a:6f:67:50:4c:9a:98:8c:4a:
                    36:89:08:b7:89:9e:02:9c:3e:a7:47:f7:39:47:a4:
                    ca:0f:ae:eb:00:7d:13:ca:73:bf:e8:24:d4:83:e4:
                    e9:70:d4:7d:17:25:0c:b6:d0:0e:ec:da:36:32:ec:
                    62:e8:9a:40:82:27:5c:85:53:28:d9:70:75:f1:db:
                    8a:1e:5d:79:6a:98:88:a7:2b:f1:7b:86:6b:8d:b3:
                    9f:4d:0e:d6:cf:99:22:da:3e:15:f9:1f:e6:7f:0f:
                    f7:0f:e7:32:8c:79:aa:da:1f:f9:5d:cf:e3:a9:c5:
                    31:1e:be:fa:59:38:f1:7a:04:7d:64:dc:23:74:91:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:B1:40:53:45:34:D0:11:0A:89:A5:5E:B1:A4:C0:BC:B7:1C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db9b6f92-63b5-3dcb-a33c-160e1efbc818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:05:20:0c:7e:b7:2b:c2:ca:2d:5e:d5:d0:71:48:9b:1c:
         73:9c:61:dd:94:9d:39:5c:26:4e:20:a1:78:90:2c:d8:02:28:
         e8:3b:26:e1:85:be:00:d9:f3:28:63:02:f4:00:58:48:f9:f8:
         48:e7:c8:61:8a:db:77:79:5d:d7:0d:02:2d:25:47:f8:45:41:
         36:40:a1:b6:68:cf:e6:0d:94:f9:ca:7e:e2:4f:68:8d:80:4e:
         12:ce:b7:6b:9f:3e:65:f9:2e:5b:31:e1:98:a4:d2:b7:6d:28:
         78:e6:8e:9b:14:46:69:f2:08:3f:6c:6f:c3:5e:fc:10:d0:83:
         bf:f5:cd:72:c3:e9:f6:4d:da:71:cb:de:41:3a:59:e1:e1:b6:
         04:ec:b2:7b:0d:df:cc:91:05:19:87:8a:17:81:ad:30:4b:f4:
         88:19:3e:62:88:7f:1e:a4:51:73:87:13:66:8c:c9:ca:b3:17:
         4d:f7:d9:9d:26:57:84:3b:df:78:10:0b:91:19:ee:0d:c8:ad:
         4c:73:26:f2:d2:67:0f:23:ee:74:5c:7f:90:a3:bd:4f:5e:b8:
         00:a1:5f:76:b5:95:40:22:92:88:72:9b:d3:f7:07:42:24:ca:
         02:a9:c2:43:8c:14:fc:d8:c1:b4:3f:12:a6:b2:47:3e:00:a5:
         84:53:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----