Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/51ff2d6b-2193-35ed-873f-971d609df011.roa
File:                     51ff2d6b-2193-35ed-873f-971d609df011.roa (raw, json)
Hash identifier:          EbN2Uu/XPoU5bkRj1+34nYZLKDeTrEe2vBwytxrBtcU=
Subject key identifier:   23:AB:74:FE:BE:73:45:27:71:25:C3:6B:CC:90:EB:D0:C3:15:C5:6E
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285845F1DAABF9F512AAB587618D80
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/51ff2d6b-2193-35ed-873f-971d609df011.roa
Signing time:             Tue 21 May 2024 08:56:29 +0000
ROA not before:           Tue 21 May 2024 08:56:29 +0000
ROA not after:            Mon 19 Aug 2024 08:56:29 +0000
asID:                     834
IP address blocks:        172.96.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 12:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f1:da:ab:f9:f5:12:aa:b5:87:61:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: May 21 08:56:29 2024 GMT
            Not After : Aug 19 08:56:29 2024 GMT
        Subject: CN=b732c082-5d55-4666-afc2-20a7ab03d44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:a4:ae:70:1c:c4:70:af:75:69:cc:eb:e8:
                    82:a5:1a:17:09:c8:1b:11:cf:1a:32:a4:63:9e:41:
                    f4:59:fd:68:74:87:83:84:c6:d5:5e:2c:0e:93:46:
                    88:9c:8e:07:dc:85:30:17:c0:2b:c8:1a:4b:2f:0c:
                    31:cc:68:c7:0c:8a:cc:8b:2c:43:56:7d:67:98:0f:
                    97:87:c6:3e:2d:9e:b6:48:67:ee:dc:99:be:c4:2e:
                    fc:f8:81:24:0c:d5:52:98:93:cc:e9:09:92:06:b8:
                    7b:1e:a7:2a:bb:33:7c:7a:56:72:1c:28:94:19:b7:
                    ea:9e:35:6f:c0:5c:32:ee:3b:c7:5a:04:ed:9f:e9:
                    5b:03:df:c0:06:70:5d:76:15:f2:c2:a7:a7:ca:8c:
                    f7:ca:6e:d0:77:cb:ed:a5:a4:fe:64:54:c8:9f:10:
                    64:f6:92:9b:10:01:22:ae:df:ab:f6:8e:fd:82:b9:
                    c6:0d:2d:66:51:c4:80:17:03:aa:7a:3f:c3:3d:ca:
                    44:97:43:3c:ac:17:c3:0c:4e:7a:52:06:17:c6:a9:
                    ae:68:e9:cb:8b:52:7d:7a:a7:b0:42:d8:04:ba:a3:
                    55:34:79:38:59:f4:63:01:35:0d:8b:c1:96:2a:24:
                    1e:9e:90:b9:f7:a6:7f:39:ff:31:f9:6a:a1:5e:8c:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AB:74:FE:BE:73:45:27:71:25:C3:6B:CC:90:EB:D0:C3:15:C5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/51ff2d6b-2193-35ed-873f-971d609df011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:2f:4f:40:15:c6:29:76:d9:16:8e:19:c7:3a:d0:3c:37:83:
         12:26:4c:43:a3:f9:18:1f:46:6d:77:15:5d:88:cf:a9:6c:3b:
         28:12:57:5f:e7:4e:3a:2c:25:76:61:54:e7:20:f7:92:ce:bb:
         d2:c6:a8:d6:c8:54:7c:8b:b9:f5:de:11:c9:6d:ae:45:6f:e1:
         9b:69:0e:76:ad:bc:b2:61:a4:04:78:ae:e0:36:74:be:c7:bd:
         77:5a:0c:87:dd:7d:df:25:cb:9c:a5:42:f8:78:c7:32:a5:ad:
         bc:7a:4a:32:53:a3:a2:2f:a4:e0:d7:48:70:5c:41:d9:5e:f2:
         98:65:c0:e0:38:f4:33:34:ad:a2:83:58:73:cf:da:cb:12:86:
         c0:03:9b:b5:63:e8:99:f0:e6:6d:96:9c:fc:6e:f6:08:69:a5:
         44:9c:fb:f6:14:ca:db:0e:42:7f:6c:d5:98:58:16:66:2d:1d:
         f6:b1:e9:94:6f:69:7d:17:c8:43:0c:0e:f2:e2:71:33:4f:aa:
         c9:14:49:9c:b8:91:08:bb:18:27:55:76:68:63:cd:d5:7d:85:
         c5:f6:70:41:3b:2a:78:0f:09:20:14:a9:3f:cd:66:b7:0b:1c:
         69:d3:5d:e3:92:bd:50:8b:d8:4e:01:35:c3:68:db:61:e9:b6:
         3c:44:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----