Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8f6e143-8045-3ca2-b53b-fe09aac06de7.roa
File:                     c8f6e143-8045-3ca2-b53b-fe09aac06de7.roa (raw, json)
Hash identifier:          OzH4pbu3UewadtPAHv+ZHGKd0Er1ByvC1ZYcjaJi9Is=
Subject key identifier:   89:F2:13:34:BF:4C:B3:E9:1D:32:27:C8:0B:8B:19:23:C2:C2:17:89
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847600B99A2CA3067864DAEC3E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8f6e143-8045-3ca2-b53b-fe09aac06de7.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     397630
IP address blocks:        216.172.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 18:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:99:a2:ca:30:67:86:4d:ae:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=cbd781dd-e8c3-4db4-ac2d-404281cf2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:2e:be:51:c3:08:4f:78:c3:36:85:64:bc:
                    34:60:87:8b:ec:73:e3:b8:75:0c:cc:21:35:96:80:
                    1d:fd:97:9b:d2:a9:17:50:67:eb:aa:63:45:04:05:
                    95:72:46:9f:66:c1:5e:57:88:04:84:7d:da:b8:49:
                    82:bf:52:cd:39:ff:f5:f7:23:48:cb:3d:49:ea:de:
                    21:4d:7e:3c:74:c3:de:73:74:5e:38:83:c1:da:39:
                    f3:59:4f:f2:89:fa:83:45:4f:ef:fa:6d:3a:f7:f7:
                    1c:f9:28:9c:e3:91:6a:dc:9d:f3:cd:ac:dd:e5:99:
                    96:6c:ff:de:7b:51:ce:c4:c1:30:29:7e:35:3a:57:
                    73:01:04:a7:77:fb:8c:de:85:22:74:ea:c1:35:37:
                    a3:31:29:24:07:d0:1f:56:26:8b:4b:5e:b9:f6:1e:
                    6e:4d:1e:5b:38:e1:4d:16:5f:df:ae:e0:8e:91:9c:
                    01:13:00:57:c3:1d:0a:d7:55:36:6b:f2:ce:21:cf:
                    c5:3c:7f:1d:7a:c3:33:db:bb:38:c2:b3:e3:18:73:
                    3d:c9:b0:84:6a:44:bd:42:7f:62:6d:82:c2:4a:eb:
                    63:5d:99:29:29:80:c1:3e:09:c8:3c:96:aa:2f:9e:
                    d6:a9:13:1f:60:b9:c2:5b:f9:50:7b:be:08:e0:75:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:13:34:BF:4C:B3:E9:1D:32:27:C8:0B:8B:19:23:C2:C2:17:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8f6e143-8045-3ca2-b53b-fe09aac06de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:c3:28:9f:21:5a:ba:db:fe:c1:80:e1:bb:d3:5a:f4:bb:
         b5:2c:61:3b:fe:86:a3:00:dd:c9:08:65:9f:cf:f3:e9:4d:d3:
         b8:6c:6d:3f:f3:3f:ae:01:01:ed:ef:bb:53:c0:54:10:16:2b:
         d0:d8:bd:b9:41:11:d4:a7:47:56:e6:d9:b9:b3:2e:52:f8:49:
         7d:50:47:05:0a:4a:fc:6a:fb:e1:80:5c:9d:ca:e2:ac:01:48:
         49:9f:35:7b:c7:82:52:b7:43:ba:4b:7b:6d:32:2e:32:33:0c:
         b7:af:66:41:78:a2:f6:9e:fd:89:ad:87:3a:be:34:df:15:a1:
         ac:36:20:b4:41:a3:04:34:fd:81:8a:d6:49:b3:4a:7e:35:2d:
         c0:58:51:2a:58:02:86:90:d0:cc:fb:30:7d:d8:0c:e9:e8:ee:
         34:c2:5c:0c:c7:e4:bb:ed:3f:70:c3:90:5a:33:d0:a4:c5:ce:
         6b:c3:06:6d:cb:4f:99:57:57:47:92:47:00:a5:af:d9:83:8e:
         a7:28:c7:75:a2:68:40:7a:4b:b9:4d:18:1c:e8:97:58:f8:2d:
         c6:8c:e1:b9:4d:9d:a6:9d:35:41:89:ee:44:a4:35:b1:01:8c:
         64:00:58:9b:d5:16:7d:7f:eb:3a:9d:43:48:23:e3:5d:ed:7f:
         69:c0:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----