Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b40e76c9-4e97-3067-aaff-f526ab80fb96.roa
File:                     b40e76c9-4e97-3067-aaff-f526ab80fb96.roa (raw, json)
Hash identifier:          +2cJhtXPNM1q9ZmtUVx3bQY+M3DBDa4hDlmRKpqj3mY=
Subject key identifier:   80:4F:9D:4E:0B:29:47:59:E0:01:FF:C9:C2:9F:B9:75:F0:62:8A:34
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847A3A9C44F5A684E634DDB25A0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b40e76c9-4e97-3067-aaff-f526ab80fb96.roa
Signing time:             Wed 23 Oct 2024 18:18:46 +0000
ROA not before:           Wed 23 Oct 2024 18:18:46 +0000
ROA not after:            Tue 21 Jan 2025 19:18:46 +0000
asID:                     834
IP address blocks:        216.24.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 16:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:a9:c4:4f:5a:68:4e:63:4d:db:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 23 18:18:46 2024 GMT
            Not After : Jan 21 19:18:46 2025 GMT
        Subject: CN=2e8a9b83-2676-4f79-9675-e24353b55462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:94:a5:18:3f:f2:4f:00:2b:ce:31:78:4d:
                    f7:e4:af:0c:61:13:3f:cd:e5:3d:c0:d2:f3:42:ac:
                    c6:b0:31:39:98:52:33:54:e2:9c:e8:2a:f5:e8:a6:
                    06:29:06:e3:f1:60:85:62:86:67:f7:77:6f:60:d0:
                    2e:cf:0b:8c:e4:32:57:8e:15:9f:6c:62:75:d9:7d:
                    5d:8a:89:ee:7c:52:62:6b:1f:72:8a:a1:87:c4:a6:
                    97:de:e7:29:33:ed:c0:7f:99:f8:83:a4:15:f0:ee:
                    7f:d3:65:46:14:a0:73:38:a9:aa:d0:a7:c6:c3:ff:
                    58:37:8e:45:a7:ab:19:b7:36:d7:9e:7c:59:f5:73:
                    ce:02:67:ee:70:6d:24:af:e7:04:33:cc:50:e8:88:
                    d0:29:06:c0:97:50:db:38:7d:56:79:3b:1d:37:25:
                    95:67:79:ab:35:22:10:83:43:45:8b:3b:e7:74:8f:
                    d3:9f:28:1e:28:f8:16:b8:cb:da:58:32:2e:9b:6d:
                    80:0d:f0:54:0b:79:a3:93:4a:7d:9c:7b:36:97:11:
                    dd:fe:47:71:7b:27:39:8a:f7:cf:bf:6f:5f:ac:7c:
                    74:14:cd:a6:ea:88:c4:d1:a7:19:45:e1:89:9b:6d:
                    d6:7d:60:0c:43:75:b8:82:7f:9a:6c:84:48:7f:ea:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:9D:4E:0B:29:47:59:E0:01:FF:C9:C2:9F:B9:75:F0:62:8A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b40e76c9-4e97-3067-aaff-f526ab80fb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:32:4d:9c:6a:4d:4b:4d:f5:9f:d3:5f:52:26:a5:aa:ae:
         c1:66:ca:eb:7c:27:da:61:33:f2:86:91:80:e4:f9:07:ca:c0:
         77:95:a8:d9:7a:e9:6b:d4:b0:c5:14:30:34:ab:23:95:55:75:
         94:3c:a0:ee:87:9d:21:db:c2:b2:31:2e:cc:11:45:eb:0b:69:
         5f:18:d4:4f:23:78:12:a2:e3:89:af:1f:c7:ce:ec:9c:d1:fc:
         c7:e7:34:10:fc:90:74:88:12:dd:70:b7:27:c9:ef:a0:96:2d:
         4a:5d:76:93:e4:72:48:40:7a:c6:e2:fa:65:13:73:a9:60:11:
         16:ef:38:77:70:a3:ef:80:8b:19:93:78:46:71:17:4c:45:c7:
         0f:0d:ff:40:a9:db:0a:0b:36:48:61:13:10:57:ac:91:8f:e4:
         c5:01:ff:c5:06:86:3e:5a:b2:13:59:d2:a3:ad:29:5a:ef:c6:
         c1:8c:5d:7b:08:85:88:fa:02:bc:de:6a:ac:9d:26:77:45:26:
         6f:e5:03:59:c3:e9:bc:21:68:fb:07:8e:d0:d3:db:c9:52:3f:
         1d:8d:c0:ab:2d:2b:38:7c:af:d8:6f:aa:d4:21:ef:43:7f:16:
         59:33:39:3c:f9:f7:50:52:7e:25:32:f9:5e:de:6d:97:5d:dd:
         3e:dc:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----