Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa
File:                     c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa (raw, json)
Hash identifier:          ECdQgRPOigR8MRxWULhUT8cjFwMGJuR6WMIEhbdoalY=
Subject key identifier:   8A:38:A3:78:CA:A4:29:5A:2A:28:20:DC:2C:48:40:11:E9:D8:28:12
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285848D641076347623E82200CBF00
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     19437
IP address blocks:        199.101.194.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 14 Feb 2025 19:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:07:63:47:62:3e:82:20:0c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=a3aa2616-fc9f-42c5-8c5a-7423fbb8532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:07:e6:bd:45:b3:1c:46:7a:d3:0a:92:f2:
                    57:a9:1a:c4:94:de:bb:7d:34:bd:f3:7c:53:3f:29:
                    a2:bf:ce:f1:ca:46:ee:c3:b5:52:c2:10:78:14:c3:
                    f2:ed:2e:95:b0:69:db:9f:56:72:24:fc:da:71:de:
                    ef:ef:50:67:74:e3:b0:ca:b9:11:eb:cf:f9:eb:71:
                    33:55:94:4a:d6:91:08:25:2c:9e:61:75:05:bb:91:
                    5d:52:85:b9:13:90:5c:de:59:01:83:08:e1:9c:90:
                    1a:f6:8a:51:ca:8a:48:52:f1:3a:3c:b3:04:fc:c5:
                    aa:e4:45:d1:79:d7:f6:b5:d6:7b:56:2c:fc:98:1e:
                    56:00:87:51:0e:9a:3c:f2:c6:03:73:2b:14:77:d4:
                    85:08:ca:4f:93:39:40:aa:c1:f0:83:7f:7c:54:d1:
                    99:7f:a6:1a:d0:79:e9:a2:5f:66:b7:61:89:83:e8:
                    97:68:80:32:80:a3:bd:8a:a0:a0:f9:ca:52:5d:4c:
                    85:93:74:75:9c:34:0a:e8:28:a6:a7:a9:f8:5e:9f:
                    47:28:e9:35:3a:0e:b7:cf:11:62:59:ed:fc:a4:eb:
                    1a:bf:5f:97:0f:43:2c:68:11:14:a8:4b:a4:e0:25:
                    2c:8a:09:79:b1:94:d7:48:eb:d0:a4:ea:4a:a1:a4:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:A3:78:CA:A4:29:5A:2A:28:20:DC:2C:48:40:11:E9:D8:28:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:c2:c1:8c:05:50:86:9c:06:d8:03:54:c1:39:67:5b:06:
         cb:6e:2b:77:eb:c6:ad:df:c1:f4:d5:ec:55:07:ce:5c:03:64:
         58:ab:df:4b:06:39:48:53:02:31:84:a1:a9:6a:a1:0e:20:19:
         52:9d:17:9c:74:3c:2b:e8:f4:85:ee:1c:18:38:57:8d:d7:0e:
         3a:4c:42:04:e0:29:82:28:69:f4:08:70:cc:a6:6a:f5:d9:05:
         af:ce:f1:9c:c8:52:ca:4c:3b:d9:55:6c:86:d6:e3:6e:21:3f:
         7e:4e:40:33:01:f8:4e:12:6c:bc:df:25:17:0f:04:4d:75:0b:
         84:92:39:af:c7:cf:25:22:14:cf:63:f6:4b:8e:a7:b3:e0:2c:
         87:3f:2d:c3:03:9f:ef:cd:f4:a4:db:5f:86:d3:b5:50:e2:ee:
         19:a4:c6:b3:28:a9:c9:1e:1f:1e:0e:2c:05:ac:47:2f:ce:ac:
         74:c7:af:08:c4:5e:3a:99:c9:c5:51:42:27:11:03:8f:2b:ef:
         ce:57:8b:30:ac:b7:aa:c2:31:d3:09:b7:b8:2e:13:b3:54:17:
         5f:69:21:5e:65:b3:aa:d8:46:d7:88:60:04:bf:98:7d:64:c3:
         64:08:74:28:77:ee:ec:ea:a8:0f:2f:6b:e6:56:d4:4d:ff:17:
         5c:9a:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----