Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa
File:                     a6460052-5de3-3c91-9d36-794d06b46d69.roa (raw, json)
Hash identifier:          4ANEbpJrKopLaVIAjiw6sfSqYIYcu8RG+VPFzq2ehmw=
Subject key identifier:   59:1F:74:A5:EC:29:D0:B3:1B:10:DD:AC:8D:D9:5F:EA:5C:98:36:4E
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285847B1015D33EE629B1A89531740
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        74.117.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 18:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5d:33:ee:62:9b:1a:89:53:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=19399d5b-9cb0-4d2d-a24f-46a61ce87c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:88:80:1b:dc:c1:7f:0d:bf:96:e9:db:27:
                    fe:ce:e0:96:68:6e:e3:e4:d2:4d:a2:a6:b0:59:2e:
                    3d:f8:62:c2:da:41:92:1d:de:2f:05:f4:ef:ec:77:
                    47:b0:52:4d:e9:d2:9c:45:6b:7c:3e:10:53:34:b5:
                    b6:9a:6b:df:d4:02:98:be:13:8a:66:07:c4:29:c4:
                    5c:7c:80:d8:8e:9b:f5:e6:94:83:40:b7:07:b7:e0:
                    bf:d4:bc:9a:9a:62:e5:3b:f4:0e:c5:02:ff:73:a1:
                    73:e9:ea:43:8a:55:7a:92:c5:92:24:dd:7d:ac:ac:
                    c5:39:e9:71:82:03:17:69:72:34:ab:5d:ec:58:ab:
                    74:83:cf:e4:97:b5:7d:5c:21:1e:f5:5a:01:a1:32:
                    3b:cb:39:9c:2b:46:32:56:61:71:27:95:27:43:eb:
                    5a:4e:d6:1a:22:7a:fa:b1:ed:0f:6a:b1:fe:a1:45:
                    22:a0:40:25:55:69:db:e7:57:6e:70:f2:67:17:b9:
                    bf:21:c8:83:36:61:8e:b3:82:fb:88:79:20:ee:b0:
                    a7:cc:f9:0f:f4:45:ef:f6:68:cd:65:99:8e:e4:71:
                    07:82:b1:1f:17:50:1b:13:ae:95:81:f3:f5:c0:11:
                    f2:c5:2f:bb:8a:8b:60:61:b7:8a:b5:74:d2:cb:be:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:74:A5:EC:29:D0:B3:1B:10:DD:AC:8D:D9:5F:EA:5C:98:36:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/a6460052-5de3-3c91-9d36-794d06b46d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:d1:a1:d1:fe:40:f9:da:2e:c4:79:57:26:7d:01:2f:f4:
         aa:f0:7e:23:37:ed:71:a2:19:c2:cd:9e:92:57:f8:b3:10:73:
         5b:e7:1d:56:9a:25:5a:94:5e:37:33:31:52:1c:ca:ca:2f:3a:
         bb:e1:6f:1e:0c:43:01:9f:49:5a:09:96:22:86:45:cc:c4:cb:
         90:ca:30:38:33:51:81:ad:1b:05:ec:e0:07:55:40:3e:7c:de:
         f3:0c:1c:f3:fe:8a:ce:58:70:cc:8f:f2:e1:2b:c4:38:7f:24:
         90:5e:03:ae:43:db:b5:47:10:c1:cb:71:9e:5e:35:6d:41:01:
         5e:3b:c0:9e:b1:9f:9f:c1:ca:9a:f8:85:df:a4:53:81:28:52:
         e3:16:a3:b6:40:64:c9:e2:c4:ad:46:3d:1c:38:31:e1:ac:61:
         fe:21:8b:7d:f7:cd:95:a9:68:01:cc:c3:4a:b2:d0:3c:77:2e:
         d7:c9:1b:9d:e5:58:09:d9:4b:3d:b9:e9:6e:75:c8:8f:a8:5f:
         9b:22:4d:64:02:4e:0d:76:a4:5d:a5:12:a5:c8:f7:62:2a:14:
         e1:d0:83:d9:55:5d:7c:8a:b1:df:82:9d:28:10:33:9f:96:c6:
         c2:a7:05:0c:5c:21:5d:ba:20:0a:c3:d9:e0:13:d6:6c:a7:ab:
         03:cd:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----