Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea035b38-14a3-377c-9f27-bf0d41870c62.roa
File:                     ea035b38-14a3-377c-9f27-bf0d41870c62.roa (raw, json)
Hash identifier:          VBEm9FCtLz1bclPYhdqe6/ZzdDhkwb5VZtRXNizoOkk=
Subject key identifier:   92:3D:70:99:4B:8D:30:46:CF:54:D1:9C:F9:6F:14:1B:0B:3E:EF:16
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847EFE42B0535B4DD15C0176860
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea035b38-14a3-377c-9f27-bf0d41870c62.roa
Signing time:             Wed 20 Nov 2024 01:37:53 +0000
ROA not before:           Wed 20 Nov 2024 01:37:53 +0000
ROA not after:            Tue 18 Feb 2025 01:37:53 +0000
asID:                     834
IP address blocks:        180.149.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 22:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:e4:2b:05:35:b4:dd:15:c0:17:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 20 01:37:53 2024 GMT
            Not After : Feb 18 01:37:53 2025 GMT
        Subject: CN=7a44cb3e-bcfe-4876-9e8c-6d70030ddebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:2b:e8:4a:c0:4a:2a:d8:33:d3:4e:b5:bd:
                    34:38:bc:fe:0d:7f:ee:31:25:57:2b:75:fe:5c:12:
                    f3:fb:98:7d:16:f7:27:45:59:71:36:8c:bb:8e:da:
                    a1:e7:63:db:62:49:3f:48:86:a7:47:4d:ff:04:94:
                    66:4d:a3:8a:a7:07:47:df:1d:39:b1:8e:33:e2:65:
                    d9:51:01:17:25:46:7c:85:b0:52:2f:e5:49:5f:c1:
                    2f:39:30:49:28:95:b0:81:d9:f1:d2:ec:ea:4c:35:
                    66:57:af:a5:b8:43:4d:f3:ab:3b:0b:28:37:82:b3:
                    72:28:11:f7:fd:22:86:18:7b:ba:ac:c5:66:52:df:
                    2b:a1:e0:c9:73:d9:c5:67:1a:f0:eb:4e:58:af:d6:
                    53:bc:c3:54:25:a4:a3:28:cc:44:4e:6c:b3:82:7f:
                    10:29:47:83:44:68:a3:7d:3b:09:d5:21:fc:4b:94:
                    74:fd:a0:67:dd:76:a4:5a:e0:4f:31:f8:93:9c:e4:
                    20:de:05:7a:54:a4:02:d5:f3:34:d3:37:db:95:3a:
                    4a:1e:f5:12:7b:81:86:ec:d9:ae:15:6d:e4:dd:a7:
                    26:d9:a6:42:86:ab:f0:7c:61:c2:c1:a3:43:b7:32:
                    1d:f2:26:1c:2e:e4:dc:9a:aa:65:c9:70:19:f6:b9:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3D:70:99:4B:8D:30:46:CF:54:D1:9C:F9:6F:14:1B:0B:3E:EF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea035b38-14a3-377c-9f27-bf0d41870c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:a4:e1:bf:ba:03:a1:64:6b:86:4b:6f:24:8a:bc:1d:44:
         d7:59:1b:f9:d4:3f:3a:d0:44:98:74:f2:da:af:3d:5a:8a:c6:
         8b:97:ed:95:fc:ad:de:13:15:02:e3:54:fa:a6:5e:48:8b:e7:
         a3:08:55:6c:99:d0:e0:72:3d:9e:8f:ff:ce:36:bf:40:23:e0:
         a6:a5:f9:a7:a2:06:3a:63:d5:32:55:3e:2e:4e:60:36:67:7e:
         17:dd:a5:8a:01:93:35:71:b4:f0:56:dc:44:c1:24:a2:44:b1:
         b7:b3:e4:47:d5:f7:cf:7f:af:33:1e:09:2c:f7:31:d1:9c:24:
         86:f9:9f:f7:ee:f4:2b:3d:bb:ff:73:d3:6c:36:0b:39:db:ae:
         a6:b5:65:15:5d:54:3d:d9:60:32:8d:fa:84:51:a7:62:8a:5e:
         25:17:2d:46:01:97:62:c3:39:8d:0f:7a:74:d0:73:f3:af:e9:
         bf:3d:04:c3:ba:96:52:27:61:02:d2:64:3c:01:9c:50:10:8e:
         68:67:ba:4e:98:02:47:8b:04:81:af:ff:e2:47:97:de:a2:24:
         16:9c:93:a7:f0:21:42:02:dc:55:c0:ac:87:5c:1b:32:f5:cf:
         0d:de:9a:d7:b6:b1:d9:05:67:05:f3:49:42:6e:b3:95:ee:e9:
         48:86:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----