Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa
File:                     408e0517-5414-33e0-aec6-8883b377a46f.roa (raw, json)
Hash identifier:          eRVFLpdP2Mv04WwR9XUIChx0tHoiEMLdLye+2EKe8S4=
Subject key identifier:   57:68:D3:3E:E8:CB:32:C8:F2:0F:56:07:40:27:95:96:DA:93:02:80
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584789EBFF978E34C43CC5D8F800
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6079
IP address blocks:        167.253.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ff:97:8e:34:c4:3c:c5:d8:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f657bf6a-f2c9-4731-abf6-56bc6b40ea11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:0b:2c:9d:8a:4e:49:fb:13:d8:a3:06:40:
                    a0:8c:b3:e8:fa:61:51:0e:12:42:99:a9:08:44:bb:
                    9f:e7:e0:2e:9d:34:45:77:e5:38:95:81:ae:50:f6:
                    28:3c:d5:87:f3:3c:1c:88:30:01:2e:0b:b2:54:e5:
                    a5:09:96:b1:4d:ca:39:6c:d2:ff:3f:69:41:f4:16:
                    33:ea:57:21:f0:94:45:08:d7:52:0b:bc:96:9c:88:
                    08:2b:1c:8b:17:ef:90:a8:9e:22:5e:38:c1:d4:b2:
                    04:10:ca:86:d2:73:16:81:68:50:77:df:18:38:9b:
                    bf:5c:af:d6:bd:24:ae:ca:1f:2c:bb:4f:ba:5d:bf:
                    c6:39:79:8b:ef:fb:78:0c:18:34:bd:a8:5a:f3:c9:
                    cb:9e:93:47:0f:ed:40:ae:6c:b7:de:56:e1:df:20:
                    58:2f:d5:d5:aa:5d:f2:3b:23:11:83:ea:5c:b0:71:
                    54:1c:25:46:32:c1:6d:1b:b7:a3:be:50:67:01:c3:
                    74:31:5b:75:4b:84:bf:bf:4a:7b:f4:b6:b5:9a:dc:
                    61:09:08:b7:82:ac:65:1f:bf:c3:cd:4e:d7:e3:b8:
                    6d:89:e2:6c:d4:14:87:0e:7f:78:e1:04:6b:50:40:
                    12:9c:5c:cb:e7:60:5f:18:41:40:7e:18:15:36:b6:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:D3:3E:E8:CB:32:C8:F2:0F:56:07:40:27:95:96:DA:93:02:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:82:19:27:f2:d0:f2:73:82:e1:20:29:97:d5:01:a4:c9:d7:
         f5:d9:56:73:6c:a0:4a:4f:01:f1:40:0f:b2:56:be:b9:f3:db:
         68:b4:1b:43:d1:f6:b8:78:91:b0:57:43:7e:6b:02:3a:6a:45:
         48:6c:20:f9:7b:b1:2d:c3:bb:13:bd:d4:53:19:b4:08:4f:84:
         79:e3:6c:14:c0:50:22:ef:a3:a6:73:5e:8a:28:d1:61:7e:94:
         1b:40:a9:7a:4c:44:1a:9c:c4:5d:cc:73:9b:18:10:4e:56:c4:
         98:1f:5d:4c:d8:e9:06:e7:da:e5:e3:70:0a:25:8c:21:f5:4d:
         ea:fb:19:01:3d:e4:c7:04:a2:d2:aa:7e:7f:22:9c:dc:56:15:
         9a:b3:56:3b:8a:0d:35:c2:39:ac:b5:d6:9a:9a:d6:ce:79:01:
         bf:7f:4e:f6:8a:2a:1b:9b:c1:e3:68:5c:1a:98:76:1e:fb:82:
         95:c8:92:28:46:0e:b3:9f:74:e1:bb:73:00:36:cb:92:4b:56:
         56:c8:8f:dd:a9:0b:87:08:cd:e6:52:1c:04:5a:f6:00:f0:19:
         34:b3:89:86:58:d4:90:e0:f7:4d:d8:fc:0d:fe:86:0f:95:79:
         5f:86:d2:bf:fe:09:25:53:12:c3:68:21:7b:8b:0e:02:c6:b7:
         ee:8c:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----