Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/e0427698-0062-3033-ac92-d1e3388baea8.roa
File:                     e0427698-0062-3033-ac92-d1e3388baea8.roa (raw, json)
Hash identifier:          NpYXLX1QozYQuA8VqHo8hvD339Pa/VnG6DSkcm7w6rA=
Subject key identifier:   EC:B0:AB:FC:80:F9:6C:59:E5:60:10:FA:2E:14:D1:EB:18:68:3C:B5
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584787188A91D24F97A6AFC68AC0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/e0427698-0062-3033-ac92-d1e3388baea8.roa
Signing time:             Sun 13 Oct 2024 12:43:31 +0000
ROA not before:           Sun 13 Oct 2024 12:43:31 +0000
ROA not after:            Sat 11 Jan 2025 13:43:31 +0000
asID:                     400384
IP address blocks:        140.235.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 18:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:18:8a:91:d2:4f:97:a6:af:c6:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 13 12:43:31 2024 GMT
            Not After : Jan 11 13:43:31 2025 GMT
        Subject: CN=07cd50ea-48fd-4d77-9166-da79286ba170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:24:e7:55:be:20:df:52:af:06:2b:25:94:
                    c2:f8:44:23:31:d3:e1:1e:d2:ca:89:92:44:86:36:
                    ce:41:b3:e2:7d:de:15:93:9e:28:8c:ce:cd:e5:8c:
                    97:55:7c:48:f6:fb:7e:a2:12:23:51:6b:51:54:1a:
                    f6:ae:14:37:d8:4a:1a:89:a2:8d:3e:d0:2c:ec:63:
                    3d:76:de:88:1e:df:a7:e8:5a:53:00:06:60:ae:5a:
                    d2:28:fa:da:6a:22:75:ad:65:a9:d3:18:9a:cb:64:
                    79:2f:94:48:9f:bd:bb:22:36:38:1a:41:6b:f3:8f:
                    35:e9:9e:b8:88:18:e4:42:65:65:2a:2e:4b:cb:8f:
                    59:cf:37:00:63:c5:4a:d3:d1:91:9c:2e:f9:2b:bc:
                    57:18:05:10:78:59:fa:79:b7:bd:7e:28:ed:41:e3:
                    4e:70:60:e2:16:1d:c2:50:df:75:f5:1c:05:29:1c:
                    df:e7:2c:0c:2f:12:8b:35:3b:8b:6e:57:76:80:39:
                    be:ce:d7:1b:19:5d:d1:f0:ed:71:65:b6:b1:ff:6b:
                    d9:88:89:c4:ea:47:75:00:bb:a8:81:a6:c5:ca:2c:
                    51:d6:b1:61:2f:40:b7:1e:64:eb:64:dc:d1:0c:17:
                    15:09:99:3b:96:d5:9f:35:c9:2b:05:cf:55:44:10:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:AB:FC:80:F9:6C:59:E5:60:10:FA:2E:14:D1:EB:18:68:3C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/e0427698-0062-3033-ac92-d1e3388baea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:ee:c5:bd:82:76:2c:6a:40:01:b7:e0:61:ea:67:78:98:
         1e:3e:af:9f:52:85:3c:05:93:80:69:2a:24:d7:6b:72:6a:18:
         cd:73:79:45:90:f9:84:5d:3e:c1:1c:d3:58:ff:8a:43:ed:af:
         22:9d:f8:e2:82:1c:db:93:6f:eb:58:8b:6b:fb:0e:38:90:ad:
         7f:93:1f:ec:c0:a8:7b:ba:34:4b:79:14:a2:d6:ea:0d:af:40:
         31:94:40:49:c2:1a:96:f2:c5:5a:1a:cc:f8:04:a7:8f:bb:6f:
         c8:17:2e:2c:8a:7a:f3:99:cf:42:0d:68:8e:bb:3f:62:23:42:
         5e:60:be:7e:cd:44:e1:d6:f9:5e:91:8b:2e:79:06:71:7b:9d:
         bc:c1:a9:11:4d:c9:a1:cc:08:1e:38:8b:98:4d:63:38:a5:48:
         15:a7:94:ff:e9:ae:65:86:80:c2:19:28:bd:32:9e:d0:82:76:
         8e:9e:99:3a:a7:97:79:2b:b8:14:d7:c5:91:98:a1:08:0f:9a:
         f6:5a:ca:18:cb:6a:a1:32:3f:44:52:7d:46:34:a2:da:6e:d2:
         71:37:b3:eb:f9:60:a7:18:88:f8:36:f5:5a:c5:bf:c8:c0:98:
         e4:93:0b:2a:8b:95:c3:5c:bc:92:c1:9a:74:65:4b:ab:6e:dc:
         f1:03:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----