Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6f3731e-3468-3d57-b889-f5f96df96627.roa
File:                     d6f3731e-3468-3d57-b889-f5f96df96627.roa (raw, json)
Hash identifier:          q0YWCzxA2kV1eBHwSpHlEd2v79Uw2k+3JWiUwv7/wic=
Subject key identifier:   D5:40:56:1E:F7:6C:B0:AC:7E:54:E2:33:A5:B3:BF:F0:F4:94:BA:55
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584608BF117E158AA92DAF00C750
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6f3731e-3468-3d57-b889-f5f96df96627.roa
Signing time:             Wed 29 May 2024 13:44:27 +0000
ROA not before:           Wed 29 May 2024 13:44:27 +0000
ROA not after:            Tue 27 Aug 2024 13:44:27 +0000
asID:                     215133
IP address blocks:        45.39.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 13:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:bf:11:7e:15:8a:a9:2d:af:00:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 13:44:27 2024 GMT
            Not After : Aug 27 13:44:27 2024 GMT
        Subject: CN=f44a8bf8-4f30-423e-8883-f9e9bfaacf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:41:0e:5a:63:2b:4a:57:e1:0b:bc:32:55:
                    9d:0e:bf:24:c7:a5:8f:0d:85:d4:0d:94:b6:49:6e:
                    74:1d:fc:24:22:db:6a:ed:01:31:1b:59:c1:97:47:
                    96:a7:f3:85:3c:a0:06:47:0f:f1:58:48:b5:50:3e:
                    8d:33:58:2a:13:5f:18:77:51:b4:98:01:68:98:f6:
                    98:81:fc:3e:e7:43:e7:65:8b:42:52:69:40:0b:69:
                    33:7d:a3:f5:87:00:6a:de:5f:d8:e4:a9:30:17:c9:
                    cc:46:b4:9c:65:4a:4e:36:47:3e:f4:94:6e:c7:81:
                    e2:46:8f:27:84:71:15:db:00:36:1a:d4:2a:3e:16:
                    7b:5b:c7:10:60:74:3a:20:6f:07:65:0f:62:f2:2c:
                    30:4e:67:c8:4e:a9:fe:57:6a:69:9f:67:91:f7:83:
                    89:90:32:96:e1:d3:87:2b:cc:dd:49:ff:7f:98:d0:
                    bf:77:26:5e:f7:c0:b9:f4:9c:8b:4a:82:d3:0b:f2:
                    7f:1f:15:39:79:66:2d:17:86:31:90:98:28:30:78:
                    4f:b7:e2:3e:19:a4:2c:de:54:18:5f:4a:92:5d:be:
                    43:e7:03:d2:1d:8e:6d:5b:22:0c:86:b7:bc:50:e2:
                    e4:b8:05:9b:4d:84:f3:9a:1c:1e:a8:83:79:41:cb:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:56:1E:F7:6C:B0:AC:7E:54:E2:33:A5:B3:BF:F0:F4:94:BA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6f3731e-3468-3d57-b889-f5f96df96627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:15:bd:e2:29:50:65:b5:56:85:cd:3a:30:b6:6c:e8:3a:
         2e:30:74:ad:83:9a:1c:75:8b:7e:dc:61:b0:69:68:a1:46:18:
         7f:77:77:38:cc:28:19:7c:ac:59:eb:e9:f1:bd:25:3a:63:62:
         d3:4d:05:4e:65:18:fb:69:02:d1:19:bb:8b:f6:43:be:9f:e8:
         7e:58:f4:44:9e:0f:88:30:a7:f5:f2:e0:54:de:89:8a:7b:63:
         81:75:ad:d8:22:bc:ab:5e:dd:5e:2b:21:51:d0:c7:33:1a:1e:
         c0:c3:2e:bf:ee:cb:34:33:4b:50:3e:57:ef:03:9f:09:fb:a3:
         05:68:ba:40:65:01:13:3e:70:88:a3:19:39:85:93:33:76:0b:
         06:f7:df:7c:10:92:8b:07:2f:04:d8:67:d9:96:e5:72:57:3b:
         45:4d:a7:18:9f:d2:c3:b8:03:14:ff:8b:b8:61:c4:8f:56:9e:
         87:54:36:90:e9:5c:5f:64:91:e8:33:2e:24:fa:0e:7d:8c:d9:
         2b:6d:5f:cd:ec:c5:b1:0f:02:10:da:33:c5:33:bf:28:da:00:
         d5:97:88:74:66:d3:90:cd:6f:8e:fa:72:af:54:9b:0d:a7:2b:
         3b:fc:19:16:61:08:81:79:1a:3f:a5:dd:b5:87:d7:36:05:55:
         24:77:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----