Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49c4005d-5fc7-3d95-9a85-0745dec41388.roa
File:                     49c4005d-5fc7-3d95-9a85-0745dec41388.roa (raw, json)
Hash identifier:          LLNaRsMmitgt++DuUnqAjeyLsabfUF6njLe2FUROOC8=
Subject key identifier:   5C:E3:74:B4:FA:BF:EA:C2:A8:62:34:21:D1:C5:55:4A:A1:99:24:9E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858468443F22DF1183C36EF2AB540
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49c4005d-5fc7-3d95-9a85-0745dec41388.roa
Signing time:             Fri 12 Jul 2024 19:36:37 +0000
ROA not before:           Fri 12 Jul 2024 19:36:37 +0000
ROA not after:            Thu 10 Oct 2024 19:36:37 +0000
asID:                     13335
IP address blocks:        45.40.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 19:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:43:f2:2d:f1:18:3c:36:ef:2a:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 12 19:36:37 2024 GMT
            Not After : Oct 10 19:36:37 2024 GMT
        Subject: CN=21d5790b-11a6-4e63-9f3e-f206de519114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:27:dd:f1:c1:f2:d3:63:76:f7:7e:8e:44:
                    0b:9f:ef:a6:58:53:8b:6f:94:b4:75:fd:50:3c:8c:
                    fd:a8:e3:cd:63:2e:b5:dd:c6:88:d4:a1:fd:6f:6a:
                    51:48:dd:3c:78:27:7b:99:e4:b9:c8:36:4a:f8:1c:
                    0e:43:7c:eb:ee:37:ec:39:bf:5f:c3:67:9a:b2:fe:
                    42:02:1d:83:0b:71:3b:72:51:a1:0d:6f:d3:d8:11:
                    d9:48:17:be:5a:95:59:1b:48:ca:a9:d3:12:bc:89:
                    a8:c2:86:77:c1:13:0d:4c:d0:38:66:94:b2:1e:49:
                    14:6c:3d:89:2b:ec:05:d7:2c:a1:8a:3d:bc:74:a2:
                    f4:ba:52:d0:a9:0a:3e:da:88:25:a8:a4:1c:14:d6:
                    06:ac:3d:87:88:b7:43:7c:83:87:5f:d5:35:17:d1:
                    8f:3b:39:95:b1:97:80:41:37:68:e9:6c:09:0e:73:
                    56:7c:8d:65:be:9d:05:4b:17:16:c4:31:2f:06:ef:
                    a8:8f:65:f2:1c:14:2d:87:55:eb:f5:21:7a:55:1e:
                    4a:fb:0a:34:57:51:10:b3:a7:ed:1d:2b:e7:88:95:
                    a6:39:ee:f5:ef:fc:e0:a7:c6:4f:f4:05:b1:29:52:
                    19:7a:4e:fe:54:10:a0:a7:a8:57:ca:9c:3b:b2:44:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:74:B4:FA:BF:EA:C2:A8:62:34:21:D1:C5:55:4A:A1:99:24:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49c4005d-5fc7-3d95-9a85-0745dec41388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:4c:f2:42:8b:fe:ac:95:9a:da:c1:47:d7:00:47:01:d4:
         61:0c:b3:e1:08:bb:33:9b:76:d6:b5:ef:f0:44:92:11:fa:a0:
         da:d8:e0:44:6b:7c:aa:ed:89:c3:37:8f:c4:ae:a2:5d:10:3c:
         9a:22:3f:de:20:95:6c:4d:e0:6c:79:84:72:21:c5:c8:69:89:
         c8:04:e8:71:0c:02:20:3c:36:e3:f0:40:ed:d6:95:53:c6:d9:
         96:99:63:8c:68:c5:39:c1:6b:59:76:83:9b:a0:a5:d8:89:03:
         e6:26:2f:a8:a8:5b:29:d1:c0:a8:cc:a4:bf:a4:4d:a3:86:8f:
         44:bc:68:0d:d2:4e:41:59:b5:61:68:64:cb:a4:a5:cb:e0:18:
         15:93:e4:f8:d8:05:e0:f2:9c:07:c0:39:c0:49:59:1c:47:16:
         18:97:73:c3:7e:92:56:d6:4b:a1:d6:da:ec:d5:47:29:9c:7d:
         0e:96:5d:25:50:11:e6:ba:47:77:9c:83:fb:32:20:62:ef:b2:
         a1:0a:a0:20:dc:d2:05:22:e2:f0:50:08:75:ba:f7:a0:41:2d:
         c1:4b:bd:0f:d0:de:7d:bd:10:df:7d:e1:c5:73:84:3c:62:cf:
         99:0f:ba:ad:3c:85:54:c7:fe:80:a8:ca:8d:3f:5a:d2:8a:83:
         d8:61:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----