Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5de8b8b3-2eed-32a9-8a41-18b049a9cea7.roa
File:                     5de8b8b3-2eed-32a9-8a41-18b049a9cea7.roa (raw, json)
Hash identifier:          bt6HqVRY07gTw7lfntiwNV+2w5NpceNNvGKbVQAymZc=
Subject key identifier:   EA:19:02:97:F4:A8:75:BA:BF:F5:A7:0D:E7:01:9B:80:57:B2:DD:A1
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285845A17D3097B49560ABED3F8000
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5de8b8b3-2eed-32a9-8a41-18b049a9cea7.roa
Signing time:             Mon 22 Apr 2024 14:03:28 +0000
ROA not before:           Mon 22 Apr 2024 14:03:28 +0000
ROA not after:            Sun 21 Jul 2024 14:03:28 +0000
asID:                     212238
IP address blocks:        173.249.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 May 2024 10:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:7d:30:97:b4:95:60:ab:ed:3f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 22 14:03:28 2024 GMT
            Not After : Jul 21 14:03:28 2024 GMT
        Subject: CN=8b8062e4-44ba-4118-bb66-c79d65c1b620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:c5:ba:90:fb:4a:62:f5:6e:e1:bf:9d:0b:
                    82:5c:70:2b:4b:6a:87:f4:50:9b:17:ef:26:67:2e:
                    a9:14:32:ea:03:fa:97:fa:30:01:88:bd:67:2f:80:
                    d4:13:33:24:e6:4d:4d:fc:4b:77:4c:cd:6e:df:79:
                    5a:c1:c6:30:59:b5:fa:e9:91:a4:fe:bb:d3:7d:2c:
                    0d:e5:2f:f2:c0:72:20:00:0a:7d:bc:57:5d:30:d9:
                    c3:92:99:46:33:34:2a:29:81:5e:bb:e4:a3:8c:c7:
                    2e:66:74:86:ae:81:41:16:14:0b:ed:96:7a:b5:07:
                    fb:76:d8:43:da:fa:a0:0a:87:86:49:5d:e0:85:5a:
                    16:e2:62:96:b7:6b:8d:a7:34:30:78:78:b5:0e:63:
                    a1:f3:2e:c0:6c:f7:2d:07:aa:9d:13:c1:79:fa:71:
                    13:b7:65:64:f1:49:4e:13:86:fd:ca:c5:41:68:a5:
                    64:04:ee:2a:34:5b:16:9d:f8:08:56:32:8a:e6:ef:
                    53:9b:9a:05:55:ef:ad:ad:cf:ef:54:06:89:f4:a4:
                    76:41:0c:c1:a7:9b:d0:e8:02:79:1d:a1:30:1b:2b:
                    d3:79:2c:a8:71:8b:b3:6e:a7:29:9a:d1:87:36:48:
                    a3:56:d4:c0:2f:c0:cd:76:95:91:ca:ba:b0:5a:b8:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:19:02:97:F4:A8:75:BA:BF:F5:A7:0D:E7:01:9B:80:57:B2:DD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5de8b8b3-2eed-32a9-8a41-18b049a9cea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:91:72:6f:f0:b4:7a:c2:5c:73:c8:8f:ed:7d:56:f6:bc:56:
         31:93:10:a8:6d:ac:5f:af:08:de:ac:b3:d3:98:51:33:e3:3f:
         f2:bb:4b:87:2b:8b:16:d8:d0:23:04:c5:10:16:9b:cf:2b:6f:
         0a:d2:bd:4f:39:e2:ae:cb:09:48:68:1d:39:bb:49:37:61:9b:
         53:55:51:24:bb:df:f2:ae:86:c7:1d:a1:e3:ee:53:e1:0a:e4:
         d1:c1:46:1a:88:69:9b:65:fd:d1:ea:cc:cd:da:d5:5c:24:a3:
         92:cb:d1:c0:9e:1b:b3:53:af:cb:61:6c:ec:1f:85:14:80:fb:
         2c:a6:ab:a5:65:ac:9f:22:1f:0c:ed:f7:fc:93:db:ac:6d:8b:
         01:99:d2:cd:33:39:a7:73:65:c0:02:f7:04:33:e9:31:16:4b:
         84:f7:7e:4d:77:13:95:1f:83:58:7c:54:42:8d:2f:8f:9a:7a:
         f6:7f:cb:a8:81:b2:6e:3d:ef:14:0e:d8:66:33:28:75:1e:36:
         86:d4:dd:05:61:67:62:05:24:20:9a:c6:a9:54:fb:e3:eb:d9:
         eb:db:d3:20:1c:92:23:bc:13:00:8e:90:a6:8a:4b:b8:81:fb:
         3f:b1:8e:1f:f6:27:fe:de:a2:30:ef:61:40:8f:eb:93:b6:21:
         5e:77:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----