Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a8d4c8-649d-3fba-b4d6-39700d4c5b64.roa
File:                     01a8d4c8-649d-3fba-b4d6-39700d4c5b64.roa (raw, json)
Hash identifier:          i+5i90yHnZAEAJV3jW1CiflCeDLAAUv52saCSren4Fo=
Subject key identifier:   FE:82:54:8D:75:8A:93:00:18:0E:E7:5C:62:EB:3E:AB:33:64:FB:53
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845E1A77FEC4E6018D807016880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a8d4c8-649d-3fba-b4d6-39700d4c5b64.roa
Signing time:             Wed 15 May 2024 13:40:27 +0000
ROA not before:           Wed 15 May 2024 13:40:27 +0000
ROA not after:            Tue 13 Aug 2024 13:40:27 +0000
asID:                     834
IP address blocks:        45.73.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 15:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:a7:7f:ec:4e:60:18:d8:07:01:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 13:40:27 2024 GMT
            Not After : Aug 13 13:40:27 2024 GMT
        Subject: CN=78ec6417-5234-4e9a-b903-bd383c111c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:6d:83:8f:da:36:6a:41:3e:33:b9:0b:f4:
                    c2:66:50:59:66:00:8b:99:70:9b:1d:7d:7c:7e:be:
                    85:ab:63:a4:61:98:c3:90:5a:8c:95:1f:82:4e:84:
                    c6:82:e2:90:75:fc:4a:d0:be:40:3f:36:ab:12:75:
                    c5:64:e1:b3:13:62:dc:67:55:67:89:ac:6d:0c:5d:
                    b2:ec:bd:f7:6d:4e:c2:b2:b8:d2:39:a8:54:4b:38:
                    5c:d4:ca:15:e2:82:d7:92:f5:2d:49:0e:23:09:77:
                    2b:9e:eb:0a:d5:c0:d5:4f:98:4d:70:71:33:9d:c7:
                    ca:64:2f:57:07:b8:fa:4f:cc:25:93:c2:3e:23:10:
                    6f:25:52:b2:43:3d:b9:d5:56:42:82:71:cb:81:56:
                    91:62:ab:84:71:9f:92:3d:f1:98:3d:da:19:96:8f:
                    86:e3:14:96:20:26:8e:3c:38:39:0c:13:17:67:14:
                    44:a9:20:ce:0b:59:d0:c3:c4:21:22:6a:89:0b:61:
                    0d:e1:76:d5:92:46:d1:8c:8b:1f:4a:27:4f:30:5c:
                    80:f3:e1:02:88:8e:87:ab:dd:bd:f4:2d:28:ce:82:
                    df:d3:d1:6d:a4:a7:3c:a8:d7:38:42:92:d6:6d:3c:
                    91:95:35:d5:dc:bb:bc:0e:ce:95:35:6d:30:8f:69:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:54:8D:75:8A:93:00:18:0E:E7:5C:62:EB:3E:AB:33:64:FB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01a8d4c8-649d-3fba-b4d6-39700d4c5b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:34:d5:e6:ef:28:d5:0d:3f:fb:04:55:07:8d:6e:2a:39:0b:
         c1:3c:37:99:e9:dc:fc:d1:6d:46:dc:d9:35:9e:71:c7:c9:69:
         ea:5a:0e:d7:03:e6:5e:0a:86:1c:64:13:64:67:60:cf:37:b6:
         7e:be:99:38:46:9a:63:59:44:e6:bf:32:10:59:3e:a8:8e:8e:
         fe:c3:e7:29:ce:f0:a2:2c:ca:92:59:23:10:83:d4:6f:85:80:
         79:bc:c3:d9:45:25:1a:f2:c7:15:32:19:83:0a:5c:54:2a:69:
         24:72:cd:68:60:69:53:cb:10:f1:0d:b1:1f:d9:32:20:8b:c2:
         f8:98:41:3b:e9:15:0c:44:83:5c:05:ab:ba:42:57:1c:1a:28:
         d1:86:6e:ae:50:d2:e9:d8:af:ce:03:d8:c6:8e:be:b6:68:f0:
         fd:52:27:04:01:ee:9f:fe:d7:4c:5b:2b:99:34:77:d6:c8:1c:
         95:83:88:02:70:52:55:bc:41:00:12:70:ea:f8:eb:14:a8:91:
         db:25:1f:b6:03:03:26:6b:3d:d6:d5:69:92:c5:dd:8d:66:d3:
         3d:d2:ed:63:43:31:16:18:fb:3f:f1:ce:a0:d6:db:95:75:4a:
         0e:5b:67:f8:de:35:18:c0:03:8b:54:1c:68:02:33:5c:96:16:
         49:54:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----