Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fe4883e-0294-3a1d-b13e-0b2ec0b61f93.roa
File:                     9fe4883e-0294-3a1d-b13e-0b2ec0b61f93.roa (raw, json)
Hash identifier:          tEkFomp2ET82v9qzbvcN0lLWGNdJg8NQt/fNBszKRKQ=
Subject key identifier:   94:13:8A:5D:4E:37:17:26:AB:47:04:6F:56:95:64:C1:72:51:7A:88
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846E025AA10BE4D3A0A5A560D00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fe4883e-0294-3a1d-b13e-0b2ec0b61f93.roa
Signing time:             Wed 14 Aug 2024 17:29:58 +0000
ROA not before:           Wed 14 Aug 2024 17:29:58 +0000
ROA not after:            Tue 12 Nov 2024 18:29:58 +0000
asID:                     54004
IP address blocks:        198.89.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e0:25:aa:10:be:4d:3a:0a:5a:56:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 17:29:58 2024 GMT
            Not After : Nov 12 18:29:58 2024 GMT
        Subject: CN=836b82b9-e6bc-4f10-949d-c0f122da508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:31:0e:68:f5:4c:3d:c3:03:22:8d:10:39:
                    b4:d5:b5:31:58:53:ac:5d:8e:3d:21:1c:5b:66:60:
                    b1:79:44:17:a4:22:7e:10:3b:7b:ff:21:f8:e3:05:
                    2c:93:d6:b9:00:1d:df:7e:68:5a:bd:a5:9f:38:17:
                    b7:f0:4d:67:3d:c5:06:8d:dd:39:a6:d9:6c:c9:f7:
                    0c:2f:da:cf:61:86:84:8e:cb:17:af:d6:d4:0e:ee:
                    08:ea:74:5a:b3:e3:6d:71:96:5f:ce:04:45:77:f5:
                    86:22:0e:fa:91:a6:af:a2:17:84:b4:37:a9:09:85:
                    f2:f6:14:fd:6b:d3:f4:33:97:73:3a:d1:8b:a4:93:
                    8e:70:ce:0e:39:54:52:78:7b:2a:bb:d0:e5:0c:c1:
                    53:1b:4f:fb:35:e2:da:7c:ae:ae:81:7a:f6:72:4b:
                    28:23:b1:4a:74:f2:58:37:f1:25:fa:da:29:a7:b5:
                    45:49:4e:94:2a:a4:3a:b5:20:de:3f:9d:b9:3e:fa:
                    e2:6b:0f:1f:8a:46:4c:9a:14:38:7d:2e:7d:eb:be:
                    1b:dd:ec:96:56:14:e6:04:19:7e:b8:44:d8:e6:b8:
                    fc:fc:f4:50:9f:c6:4f:9e:83:a6:08:04:e5:27:41:
                    78:8f:e3:86:db:e8:d7:85:3e:e9:75:d9:cf:4a:e7:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:8A:5D:4E:37:17:26:AB:47:04:6F:56:95:64:C1:72:51:7A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fe4883e-0294-3a1d-b13e-0b2ec0b61f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:74:b2:4f:f2:37:e6:98:ff:b8:a0:6e:c0:9f:32:0b:93:a7:
         e1:c2:30:46:96:05:ec:1a:1c:15:0e:04:54:71:7f:b9:9c:95:
         07:a4:c6:df:0f:42:b2:03:75:55:bf:84:ed:9d:7e:d4:6b:59:
         59:e4:36:c5:6e:4f:df:13:bf:93:c3:d8:18:a1:55:47:e9:59:
         a6:17:21:46:32:da:2e:72:5a:52:65:d7:21:2d:94:1f:e9:86:
         e4:bb:53:ae:7f:7f:cc:24:71:2d:94:89:6b:62:d9:e3:89:c9:
         e3:98:ef:96:ae:9d:da:d8:d7:19:79:3f:1e:8e:0f:07:b6:c2:
         62:6d:aa:fa:d0:a3:97:3b:eb:31:cf:1a:36:f8:06:fd:62:f1:
         fc:28:31:56:6c:a8:14:36:7d:a0:d7:09:a1:e2:46:14:01:d9:
         e9:9d:52:9c:e7:3f:d5:ec:dc:e5:e4:16:02:b9:ee:ca:70:f7:
         3c:16:4f:4b:47:5e:c6:a1:18:62:e2:35:9a:4c:fa:b7:83:72:
         cf:1b:2f:af:ed:36:75:da:d1:2a:92:b5:ca:a2:51:64:7b:c7:
         4b:49:fd:25:43:dd:c7:e9:69:8e:1d:8a:5c:ef:1e:49:22:44:
         79:56:48:6e:c8:23:8f:fb:2a:93:e5:99:9b:95:cb:3d:c7:0e:
         b6:17:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----