Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/bf278c6e-851b-32e5-90c2-a60f2591340a.roa
File:                     bf278c6e-851b-32e5-90c2-a60f2591340a.roa (raw, json)
Hash identifier:          WydVIQg92xE6tmBnJZ52ZWGQDylwqh6PxrkZ088AH94=
Subject key identifier:   C5:9A:94:5A:F0:A7:60:2C:C6:99:10:8F:85:87:76:76:17:A0:13:D3
Certificate issuer:       /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial:       010D0C9F432858468BEA6ACBC985A095DC234300
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/bf278c6e-851b-32e5-90c2-a60f2591340a.roa
Signing time:             Mon 15 Jul 2024 13:22:42 +0000
ROA not before:           Mon 15 Jul 2024 13:22:42 +0000
ROA not after:            Sun 13 Oct 2024 13:22:42 +0000
asID:                     399970
IP address blocks:        149.112.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 14:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8b:ea:6a:cb:c9:85:a0:95:dc:23:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
        Validity
            Not Before: Jul 15 13:22:42 2024 GMT
            Not After : Oct 13 13:22:42 2024 GMT
        Subject: CN=ee50c804-75b3-4563-b501-991ec5ecac04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:c6:4c:1c:23:9d:2b:77:ba:62:7f:bd:fe:
                    19:c7:9b:43:a3:44:4b:0d:58:91:56:3c:fa:24:cd:
                    1a:14:5e:8d:0b:65:90:b1:34:56:4c:03:60:3c:8a:
                    8e:a7:51:d4:a2:5e:b3:79:c6:ab:24:d0:9e:43:53:
                    30:4a:95:42:a3:4a:bf:78:0f:85:4d:d5:1f:87:55:
                    57:62:b1:f8:41:6b:3f:39:25:8f:4f:7f:b7:d4:e6:
                    67:9d:25:e8:81:ae:83:6a:ae:09:99:09:7a:1d:18:
                    4a:5e:96:14:57:7c:18:84:26:60:03:fa:1d:05:51:
                    89:31:64:fc:a3:d2:04:3d:9e:69:d8:ab:df:a9:c4:
                    cc:91:0a:b4:1a:33:0b:83:0b:ef:ea:c0:e6:9f:7c:
                    a3:20:1e:f7:dc:39:bb:58:9c:ba:4f:c5:2d:1f:9c:
                    a0:46:4b:12:0b:28:6e:00:56:86:6c:f8:31:3c:a3:
                    b9:89:ce:0c:65:97:77:98:3d:4c:72:f9:aa:80:29:
                    24:1c:b4:70:32:9e:16:cc:bd:19:cd:18:e0:a2:36:
                    fb:74:95:95:43:29:0f:ce:2b:ab:15:de:aa:96:7e:
                    fe:67:b5:73:8d:a5:48:de:27:f7:b2:67:a4:27:31:
                    2a:82:31:1d:a6:47:47:0c:f4:18:87:5d:73:c3:53:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:94:5A:F0:A7:60:2C:C6:99:10:8F:85:87:76:76:17:A0:13:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/bf278c6e-851b-32e5-90c2-a60f2591340a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8d:40:10:66:24:8b:e5:ba:9e:f6:42:39:c2:3d:4c:41:2b:
         db:35:cb:1b:82:5b:21:83:62:5c:43:1b:f1:70:1e:19:82:fa:
         09:7b:2c:d1:d7:8e:93:63:ad:a0:49:23:ee:72:3f:93:9f:e2:
         52:7b:1b:14:64:58:68:b0:24:aa:ae:95:34:42:3e:db:c8:d5:
         d0:39:50:87:2f:ae:b4:69:d0:2c:53:25:31:6d:d8:8f:2a:35:
         4e:a9:d7:72:cf:bf:a4:57:53:61:0b:57:2a:58:90:f5:16:ad:
         dd:b5:98:29:a3:27:b7:6b:e2:20:48:80:a6:4d:f1:48:2d:7c:
         13:43:ee:11:1d:59:83:18:fc:bb:f9:6d:c1:93:8f:0a:ac:b5:
         f4:50:80:cb:36:9e:58:35:61:b8:f0:87:7e:0e:70:7a:6d:43:
         56:03:17:40:2e:56:9e:67:15:fa:46:80:3b:50:ca:48:32:d1:
         02:ac:5e:0c:df:b4:a4:23:41:7d:e5:88:a7:fe:8a:16:c7:d0:
         ff:40:17:e3:79:aa:15:4b:0a:be:fd:47:58:a0:30:88:d5:ca:
         e1:90:9b:f1:54:54:af:d8:8a:78:e5:93:8c:94:9e:4a:b8:8c:
         76:f9:87:fe:32:7f:83:70:78:78:fa:c3:30:80:d1:6e:18:20:
         d8:13:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----