Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ea5c7be7-00f6-38d8-aabb-52ab7d030043.roa
File:                     ea5c7be7-00f6-38d8-aabb-52ab7d030043.roa (raw, json)
Hash identifier:          UGGMnoOH/obphFYVysIe3KhbDSXQLXLKym5Yal83k5Q=
Subject key identifier:   AF:7B:DA:2A:58:60:CF:2A:93:D4:9C:F9:F5:79:C6:77:24:37:EF:25
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBD663138AB12323B45C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ea5c7be7-00f6-38d8-aabb-52ab7d030043.roa
Signing time:             Wed 16 Oct 2024 14:26:35 +0000
ROA not before:           Wed 16 Oct 2024 14:26:35 +0000
ROA not after:            Tue 14 Jan 2025 15:26:35 +0000
asID:                     81
IP address blocks:        152.45.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bd:66:31:38:ab:12:32:3b:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:35 2024 GMT
            Not After : Jan 14 15:26:35 2025 GMT
        Subject: CN=32cbadc1-77dd-49b2-9e1f-2f2db6e16276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:80:11:cc:0a:21:e8:59:11:0c:ff:b8:c4:
                    03:b3:d8:ce:4e:6a:2e:c6:01:c1:86:85:5a:75:88:
                    e0:c0:c6:cc:fa:08:64:87:0f:03:cf:4b:0c:63:c1:
                    b4:8b:52:74:2a:6a:2e:69:89:c8:6c:9c:45:d8:3a:
                    40:0f:ef:83:68:e9:77:60:7e:56:23:3c:2a:07:a8:
                    c0:0f:73:6a:3d:1d:24:a1:9a:e7:8b:f9:72:28:09:
                    d8:a8:06:cb:58:87:61:29:f9:38:e1:ea:76:32:5c:
                    33:44:dc:c1:37:20:07:14:6d:56:57:df:88:ae:59:
                    de:9b:97:08:2a:44:da:08:9d:c0:6d:b8:89:b2:d2:
                    46:2b:62:2b:d5:ad:21:1e:35:9d:ef:c2:38:99:3e:
                    ad:88:7e:76:26:33:87:50:79:83:27:b0:1c:1b:d7:
                    3c:90:67:f7:89:1c:28:e9:a4:e3:15:fd:37:8e:da:
                    62:1e:5e:66:8f:12:56:a1:0d:63:a8:e3:6c:2c:80:
                    6b:a4:1e:b7:be:97:45:9f:c2:34:02:8c:0b:4c:80:
                    49:2d:a5:83:c9:5b:b6:04:22:ed:cf:3b:b3:ea:91:
                    4a:7b:e7:b8:cc:76:ec:33:d9:06:b9:e2:23:05:d6:
                    5c:aa:b5:1b:18:25:01:8c:ad:17:de:7b:cc:17:c3:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7B:DA:2A:58:60:CF:2A:93:D4:9C:F9:F5:79:C6:77:24:37:EF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ea5c7be7-00f6-38d8-aabb-52ab7d030043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:f8:6a:db:ac:91:4d:a7:f1:5c:46:96:a9:50:f2:66:0c:
         19:f7:0f:fa:fb:2a:9b:b3:85:db:0e:2d:05:58:d9:ce:76:c5:
         b6:ee:60:c2:0d:77:b8:41:6a:77:f7:9e:13:4c:46:9b:c6:5b:
         22:06:4e:a1:34:67:5b:b3:98:e4:08:c6:c2:9c:62:70:24:4f:
         87:29:96:18:9b:e0:4a:b9:57:fa:4c:fe:99:19:92:38:84:e0:
         c2:0f:ba:dc:15:5d:26:ea:0b:03:7a:61:02:9d:76:97:bf:7b:
         6b:d4:7c:30:63:ef:56:a2:7a:02:c4:99:85:f8:2a:3a:03:59:
         31:41:49:ed:49:68:cf:50:b6:c5:ee:6e:66:27:ed:65:df:39:
         59:87:b8:70:23:84:4d:cf:54:2a:07:08:ed:9d:cd:07:db:1d:
         08:26:a9:44:10:a3:25:76:45:eb:02:6b:68:47:60:13:ac:5d:
         c9:76:04:1f:21:07:db:b8:4e:61:7b:b4:ad:fe:02:3a:74:10:
         bd:9e:80:70:92:41:d0:64:f3:e6:f9:4e:ea:ba:e7:98:0c:7d:
         f3:7e:e0:a6:ba:9f:2d:e0:f4:ba:51:4b:36:c3:ab:62:35:db:
         bb:f3:b8:a6:3c:f0:3d:78:0c:62:21:d2:c8:b0:3a:d0:e1:76:
         e7:3f:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----