Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a5826a0-fe54-3075-86e2-12df618a7d2c.roa
File:                     9a5826a0-fe54-3075-86e2-12df618a7d2c.roa (raw, json)
Hash identifier:          hwo8weT8TovIsF/ivTw6n+Lt4UbGbmZg/Q+dJQqbMIY=
Subject key identifier:   82:63:2B:71:88:7C:43:DA:97:D0:EE:DB:54:3F:D6:71:9E:5F:0A:8E
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847ECC38EAA6CF9B03119DCB980
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a5826a0-fe54-3075-86e2-12df618a7d2c.roa
Signing time:             Mon 18 Nov 2024 22:44:45 +0000
ROA not before:           Mon 18 Nov 2024 22:44:45 +0000
ROA not after:            Sun 16 Feb 2025 22:44:45 +0000
asID:                     834
IP address blocks:        162.33.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 20:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:c3:8e:aa:6c:f9:b0:31:19:dc:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 18 22:44:45 2024 GMT
            Not After : Feb 16 22:44:45 2025 GMT
        Subject: CN=08b9af92-31d0-42ea-92f7-68ab32a2ae42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:30:b5:7f:67:40:45:b7:b1:19:05:8a:29:
                    14:02:3c:c4:87:d3:fe:8c:55:5a:b6:45:2a:3c:9a:
                    59:59:f9:10:37:d6:d0:be:88:9e:d2:bd:78:75:d5:
                    e4:1b:d7:7c:03:92:a0:a8:1f:d0:06:c7:81:45:b0:
                    74:1e:0d:8b:81:5c:32:96:35:55:19:56:f8:bb:24:
                    68:d0:08:13:b3:25:08:69:d6:0c:f8:64:2d:02:e5:
                    3b:80:bc:f9:30:77:d5:0a:e3:0a:7a:78:48:96:24:
                    b5:14:6a:93:46:ae:2c:5a:98:95:0c:d4:fe:4a:a7:
                    dd:98:b8:9d:27:34:d8:20:c2:87:4d:29:47:4b:15:
                    cd:4f:fb:fb:c8:be:9f:36:b5:ec:1a:03:cc:a8:67:
                    45:d7:17:26:1f:b4:44:ab:3e:1d:e5:ac:65:78:4e:
                    17:ce:7d:d4:18:de:d3:aa:14:68:43:76:bd:ce:36:
                    9f:6b:81:c8:9b:27:35:5c:98:b0:8f:41:0e:4b:79:
                    36:39:6d:26:1e:71:91:73:5f:7a:3d:fa:6b:e1:d5:
                    0a:8c:71:88:a6:fb:56:19:a0:91:7c:2e:27:3a:b9:
                    a7:1a:26:bf:d3:90:81:fc:98:89:f2:ca:18:3c:62:
                    bb:7a:a3:3c:07:96:68:36:fe:d1:c4:6c:16:d2:00:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:2B:71:88:7C:43:DA:97:D0:EE:DB:54:3F:D6:71:9E:5F:0A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9a5826a0-fe54-3075-86e2-12df618a7d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:41:7c:b8:76:ac:4b:50:8a:3b:66:17:b7:f2:aa:8d:5a:
         45:f4:09:94:ad:3f:80:db:c0:a9:2f:a8:ce:87:c1:61:23:cc:
         8b:2f:98:94:e4:a9:fa:dd:dc:d0:e3:c7:59:fc:3d:04:ad:91:
         97:52:c7:30:b3:35:27:30:df:80:a6:e8:7b:49:d3:90:59:dc:
         e1:9a:96:5d:60:5a:9d:c6:2b:18:33:f6:cc:8e:c6:1d:0f:32:
         ea:0f:da:85:7b:d5:11:2c:12:20:35:a2:48:09:e4:8f:d1:c7:
         ce:54:32:79:c8:d6:84:3b:d1:9b:45:e9:e6:82:e0:a7:01:ae:
         7d:f8:27:ea:47:6c:4f:16:0f:41:3c:6b:1b:ea:1c:7b:90:28:
         59:a3:71:cc:53:ad:17:70:b6:7d:f1:d8:1c:39:b8:80:58:8d:
         47:ae:c0:8a:0a:eb:5f:73:f1:40:0a:23:84:bc:53:70:71:3f:
         78:44:4e:74:73:51:c7:fa:80:35:4b:5e:ae:00:60:cf:b9:51:
         6a:5a:8e:8c:f5:ec:88:63:78:54:4a:4b:61:34:ea:1d:d6:d3:
         85:86:84:e5:b2:a2:7e:59:b8:d5:26:22:49:8d:f2:3b:ae:af:
         38:ab:0b:31:75:f4:35:1e:bd:27:f9:db:30:b0:47:a5:71:09:
         d1:19:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----