Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ec1b42f-a80b-3d06-8376-68fea11cfa42.roa
File:                     1ec1b42f-a80b-3d06-8376-68fea11cfa42.roa (raw, json)
Hash identifier:          PvFsa+FzRcxD27nl3yOqS/RNSQX3lhmvm5TnQc2Oq4E=
Subject key identifier:   15:98:59:38:0A:8C:2D:21:70:97:50:94:C5:A7:2F:44:4D:36:28:21
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858463F19D7A9DCEBDB1A573FAC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ec1b42f-a80b-3d06-8376-68fea11cfa42.roa
Signing time:             Tue 18 Jun 2024 01:00:25 +0000
ROA not before:           Tue 18 Jun 2024 01:00:25 +0000
ROA not after:            Mon 16 Sep 2024 01:00:25 +0000
asID:                     834
IP address blocks:        104.247.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 18:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3f:19:d7:a9:dc:eb:db:1a:57:3f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 18 01:00:25 2024 GMT
            Not After : Sep 16 01:00:25 2024 GMT
        Subject: CN=8f7e59f1-7101-4af5-bfc3-6dc1841f9eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:d0:f7:cc:08:c4:07:2b:bd:33:d5:6f:ab:
                    11:54:f4:20:1e:4f:41:12:82:a4:29:d1:e1:e0:d9:
                    d7:00:cb:4f:a2:5c:92:75:db:0b:10:bf:0c:b5:6e:
                    15:41:db:8d:4c:19:67:25:70:0d:dd:47:73:e0:85:
                    bf:21:70:12:73:ba:28:51:d1:cb:21:73:21:07:d7:
                    30:5a:00:56:78:d0:2b:ec:8b:05:65:4f:d6:33:d5:
                    a7:3e:4a:ef:17:9c:2e:f5:7c:68:a5:ed:5a:03:41:
                    2f:c1:60:4f:b4:68:44:18:68:cc:0d:e0:85:4e:e6:
                    81:97:e6:79:9a:6a:17:4a:2c:1d:9f:58:5d:64:ea:
                    fd:ee:41:9e:ad:1c:b9:e0:8a:6c:7f:22:dd:66:a9:
                    b9:3b:c8:7c:4f:e4:81:18:2d:1a:e5:a5:b0:d3:ad:
                    c2:d8:04:a1:51:a3:52:0e:a8:fe:42:70:d4:6e:44:
                    87:76:67:31:75:06:de:dd:0e:8f:80:e0:0e:cb:fc:
                    f1:a3:44:31:c9:b6:d4:1b:21:42:25:8e:24:60:fa:
                    13:db:67:35:10:f6:8d:94:d6:ed:de:87:7a:15:d5:
                    1f:60:2c:4b:ca:be:f7:25:f3:86:c0:26:fd:88:c4:
                    01:4e:57:ac:14:fb:fe:48:1e:fe:52:b1:58:ba:3f:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:98:59:38:0A:8C:2D:21:70:97:50:94:C5:A7:2F:44:4D:36:28:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ec1b42f-a80b-3d06-8376-68fea11cfa42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:45:a3:3f:db:5e:0b:1d:2d:7a:0a:e2:0d:2d:a1:ca:f0:21:
         0f:8b:4f:21:6c:7d:53:0f:6e:f9:3a:83:cc:b6:4e:7a:79:c1:
         0a:84:fb:e9:df:94:f3:c8:9f:75:9d:a9:4e:89:04:e8:f5:a8:
         3a:cf:fe:c5:0a:fb:5c:b6:2c:3c:90:4b:cd:22:99:82:46:e1:
         2d:3e:ca:2c:14:79:29:3b:f6:10:1a:89:0b:8d:46:8f:ef:bc:
         49:9f:27:50:d1:ce:eb:60:0f:59:dc:2e:aa:88:ee:f0:6c:b2:
         48:f8:c3:ca:c2:1f:24:36:35:39:37:b8:9f:8c:b5:c6:7c:b5:
         f4:b7:bf:ee:67:33:19:bf:0a:bf:09:3e:a1:d4:7e:54:31:a1:
         1f:e1:1f:48:d8:ee:38:fe:ad:ef:15:29:e6:ea:4a:51:d0:3b:
         c4:05:6a:3c:19:63:ac:51:b5:53:c3:d1:5b:de:11:65:fb:0a:
         53:95:b5:08:21:5a:0e:e1:7e:3a:c8:54:19:fc:1e:c0:6c:2f:
         c6:1f:fd:44:31:d5:9a:7b:7e:44:2a:72:5c:c4:2c:82:37:9e:
         27:33:5d:45:df:4e:fd:15:ef:24:01:11:03:de:0e:55:e7:61:
         b7:48:fc:48:46:98:e9:ae:a5:20:32:5f:13:35:40:0a:8d:9f:
         60:66:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----