Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/bdb7d380-b34b-3859-91e9-a03fb89e4543.roa
File:                     bdb7d380-b34b-3859-91e9-a03fb89e4543.roa (raw, json)
Hash identifier:          ZhGbGdg5TSLZ/d7wYT7gtSmdmNvs7A2cpLxET1RZQkg=
Subject key identifier:   DC:81:80:AD:33:DC:DF:B3:95:35:6F:D7:EE:1F:FA:9B:66:92:27:B9
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858459907A21BE518501070F01100
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/bdb7d380-b34b-3859-91e9-a03fb89e4543.roa
Signing time:             Fri 19 Apr 2024 13:20:08 +0000
ROA not before:           Fri 19 Apr 2024 13:20:08 +0000
ROA not after:            Thu 18 Jul 2024 13:20:08 +0000
asID:                     23470
IP address blocks:        128.254.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 May 2024 17:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:07:a2:1b:e5:18:50:10:70:f0:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 19 13:20:08 2024 GMT
            Not After : Jul 18 13:20:08 2024 GMT
        Subject: CN=d642e06e-a35f-4c53-a1ee-7e40bf90c6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:16:74:67:e4:c5:cb:22:b5:2f:dc:31:f3:
                    1c:17:ab:77:93:f5:9e:37:3a:e3:2f:47:8e:cc:9a:
                    b8:b3:3d:c8:30:72:ef:19:13:9c:a3:e0:03:a0:1c:
                    1e:78:dc:d0:87:73:0c:e5:de:07:d7:76:4d:fe:17:
                    b5:35:85:c4:64:48:49:bf:a4:0b:ae:4e:e0:3f:f7:
                    cb:3d:a8:81:f3:0c:25:c8:eb:25:ed:79:e6:82:92:
                    d9:68:ad:ad:04:99:03:5a:c8:dc:fa:1d:e3:3a:81:
                    89:d9:34:04:53:93:7e:fb:17:4a:0a:a0:d7:88:e4:
                    0e:3a:d9:b5:e9:d6:6d:b3:41:e1:60:fb:fe:c6:4b:
                    12:cf:af:d2:cb:43:5a:36:32:dd:e1:3f:02:45:90:
                    59:a4:4c:7a:2a:ee:95:39:d5:a9:4a:3a:65:d1:49:
                    01:f8:f3:6b:7b:63:04:39:10:4c:3a:a6:d7:84:ed:
                    22:e5:d1:12:6f:25:b7:ae:e5:d8:1b:7b:bc:a7:2d:
                    83:b7:80:72:0d:42:8f:ed:dc:82:0d:e0:fe:42:b6:
                    e5:59:70:47:05:f7:5e:4b:51:99:7c:f3:7d:18:10:
                    6a:42:3c:d7:60:dc:86:4a:ca:9c:eb:86:a0:cc:0b:
                    a5:a5:49:64:ea:42:89:b7:fb:40:95:ae:03:fe:56:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:80:AD:33:DC:DF:B3:95:35:6F:D7:EE:1F:FA:9B:66:92:27:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/bdb7d380-b34b-3859-91e9-a03fb89e4543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:19:80:eb:37:89:e2:ae:1c:0c:13:c2:40:65:a8:74:59:27:
         95:0b:d7:64:fd:92:d1:0b:f0:52:80:6f:8d:23:cb:8d:c4:be:
         78:2f:bb:e1:d8:ac:c8:18:64:6a:4b:a6:f2:fb:43:b5:52:9f:
         b1:23:9b:fc:53:df:5e:3b:fe:fd:00:08:21:5d:9c:d3:8b:7b:
         9e:98:6d:6d:1d:f5:11:4f:26:e5:76:b2:56:ea:86:fe:c4:a6:
         ac:ca:4c:4a:a4:93:8c:6e:0e:3e:b5:1e:8d:9a:dd:a2:8c:45:
         a4:b7:6f:ef:2c:f6:5e:bb:89:8a:72:64:8c:67:5f:5f:7f:ab:
         a4:59:60:eb:a6:47:49:90:f0:4c:e3:94:08:ab:94:cc:9a:58:
         c9:45:7d:23:87:9f:3d:41:d8:b5:41:2f:f1:f7:eb:38:cf:a6:
         ad:7a:a1:b2:a0:dc:8c:0c:71:a2:e6:34:7a:4a:f8:5f:c0:83:
         2e:70:d6:fc:cb:d9:02:d9:0b:ef:63:63:95:87:ae:34:f2:73:
         af:a5:b0:60:e0:17:16:03:26:c7:23:18:94:d6:00:06:dc:44:
         24:9e:19:0a:1a:8e:b6:6a:4d:8f:68:7b:b3:68:bf:02:e8:a0:
         6c:e5:ad:64:c1:e7:82:2b:27:0c:cb:07:a8:7b:0d:61:50:41:
         48:4a:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----