Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
File:                     6a843965-6a31-3da1-9407-4565c9497daa.roa (raw, json)
Hash identifier:          dowBLKnecab04JuFzPhiHeZwrmc9iTSGuxrOPHtevVo=
Subject key identifier:   C2:06:C8:8E:05:86:4F:16:2D:C8:45:10:EF:9D:77:13:3F:62:DE:AC
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584902EC2F8DFCF62CCD0144C060
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     57043
IP address blocks:        209.182.100.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 22 Mar 2025 04:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2f:8d:fc:f6:2c:cd:01:44:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=d216f923-7f47-44fc-a831-e6956b97b3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:6a:69:c0:4e:40:42:9b:cd:26:23:76:60:
                    c0:04:5b:79:7e:18:ef:f9:4e:2f:81:28:6e:c0:1c:
                    96:5d:32:76:1e:93:a8:f3:ab:23:2b:53:f1:f5:ca:
                    5c:81:49:50:f0:f6:2b:53:7e:2d:a2:d7:0e:64:10:
                    bc:5d:d3:17:17:9f:19:d9:48:e2:6c:1b:30:16:41:
                    83:98:ef:a3:13:63:77:c3:ea:ff:4a:69:01:67:06:
                    62:b9:87:59:7d:30:05:8e:30:cc:b9:34:71:e6:92:
                    61:26:99:40:70:40:aa:5a:30:7d:ee:e7:8b:5e:fe:
                    e9:06:50:12:b0:bc:f1:e7:7f:17:c0:64:62:62:91:
                    11:28:1d:bb:59:e6:33:49:db:1a:47:43:f9:18:27:
                    8c:15:23:a7:ea:e4:ab:40:ef:dd:1c:10:32:30:4f:
                    7a:aa:0f:61:e1:c0:56:ad:1b:38:72:86:ff:02:22:
                    18:d2:bb:5e:d2:83:0e:6e:83:26:74:5e:06:5c:b8:
                    82:e7:6f:7d:ed:e0:fb:4e:da:73:cf:a7:ae:3d:4d:
                    ec:ea:18:38:6e:02:ca:b6:13:a5:31:6d:70:98:a3:
                    2c:3d:fe:fc:b4:c4:2e:84:2b:60:64:f8:b3:06:06:
                    9f:4c:89:c4:21:c1:5b:28:70:ee:57:9a:69:09:38:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:C8:8E:05:86:4F:16:2D:C8:45:10:EF:9D:77:13:3F:62:DE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:23:26:4f:7d:04:85:25:19:df:1c:dd:41:28:6b:b8:35:07:
         2d:78:88:ce:39:7a:8f:46:fe:86:4f:57:80:63:b6:b3:10:8d:
         b1:dc:ef:50:d3:56:20:53:6b:23:fa:1e:58:aa:df:f8:81:b1:
         a4:4f:14:fc:0b:da:f7:02:df:12:6c:76:02:1d:f6:fe:d8:99:
         bf:bf:42:76:7b:a4:1a:55:4d:47:88:a6:b3:9f:72:d7:9a:08:
         14:38:a6:fa:06:0e:11:93:ca:b3:7e:f2:47:e3:8a:c0:60:60:
         50:01:66:4d:89:30:9a:3a:6f:9b:14:00:9a:4e:5f:fd:07:6e:
         80:08:98:2d:20:b6:3c:c3:03:af:44:93:3e:33:79:69:07:7a:
         5a:06:87:94:bd:b5:ac:77:94:67:ff:18:6b:96:3a:ce:91:05:
         89:2e:c9:1a:3f:07:5e:21:08:14:8e:ae:6e:0f:98:e4:69:18:
         8a:ff:50:67:0c:0a:ca:82:69:cd:2e:52:33:f9:2e:b4:71:10:
         da:dc:db:7e:5c:0a:58:8e:01:45:3a:a2:75:78:3e:b6:35:6f:
         db:63:61:93:04:4d:0b:a5:f8:87:7e:2e:df:23:1d:9d:ee:e5:
         ce:bc:93:dc:0a:fa:0a:6b:0a:ed:0f:f7:a9:a4:ec:55:19:dc:
         9c:43:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----