Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/6cd23ff0-274f-340a-a6f7-c62ee0d3909c.roa
File:                     6cd23ff0-274f-340a-a6f7-c62ee0d3909c.roa (raw, json)
Hash identifier:          demnYJxu0VY0QCPwkBppYVw4Cj7vXZn1RU4XOY6LwXM=
Subject key identifier:   8C:B2:16:17:21:3C:2B:FF:D9:54:B0:43:30:37:8C:B6:EA:97:5D:19
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F43285845D9164396DDAD146E90FCC180
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/6cd23ff0-274f-340a-a6f7-c62ee0d3909c.roa
Signing time:             Sun 12 May 2024 12:01:21 +0000
ROA not before:           Sun 12 May 2024 12:01:21 +0000
ROA not after:            Sat 10 Aug 2024 12:01:21 +0000
asID:                     23470
IP address blocks:        45.45.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:16:43:96:dd:ad:14:6e:90:fc:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: May 12 12:01:21 2024 GMT
            Not After : Aug 10 12:01:21 2024 GMT
        Subject: CN=4dff08aa-e80a-4a98-ba88-85c33582e880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:ed:3c:b5:92:c8:d6:ad:93:82:44:99:49:
                    2c:5c:71:16:6b:3e:11:7c:85:e6:5d:d6:36:5f:7a:
                    0f:bd:a9:ef:79:f1:f2:32:9a:c5:bd:09:08:60:21:
                    62:85:a8:79:b7:cb:fc:41:d7:77:91:23:a5:74:2b:
                    05:29:4f:a9:23:24:86:66:48:bf:f1:e3:c1:c5:7e:
                    a5:9f:b4:eb:55:a7:31:fb:f1:8b:75:fd:4a:04:f8:
                    67:4c:bd:ea:2f:2b:b1:52:ed:23:c5:5c:e2:9b:15:
                    a6:a6:38:c0:48:0f:98:b7:d5:d1:d5:d0:9b:fe:55:
                    5c:bb:42:b7:ad:eb:05:7a:32:10:c2:f3:f0:74:dd:
                    3c:97:1d:21:c3:a7:11:d1:4f:d4:0a:eb:c0:da:54:
                    0f:31:43:97:c6:f1:8f:2d:4d:fb:54:50:c6:8e:d6:
                    6a:0b:27:59:07:11:a6:1e:c4:1f:f8:bb:30:1f:a4:
                    e3:22:31:1e:ea:98:a6:89:95:07:2f:1c:ef:26:0d:
                    52:f8:a0:5c:70:9d:8f:fb:00:b4:b3:20:e7:9d:9e:
                    0a:28:cc:e0:ef:76:75:8f:7c:ac:f4:3a:c4:96:f5:
                    6d:2c:d5:a3:84:5d:db:9e:e9:e1:96:82:8c:db:16:
                    7e:4e:60:e9:c3:c3:56:c3:9c:88:51:7d:2a:29:fc:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:16:17:21:3C:2B:FF:D9:54:B0:43:30:37:8C:B6:EA:97:5D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/6cd23ff0-274f-340a-a6f7-c62ee0d3909c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:d2:df:93:b1:35:8c:d5:c1:8c:16:9a:a0:69:27:c2:a8:
         6c:df:2a:91:f9:e1:f4:ee:79:06:0f:38:95:81:5e:7d:90:c6:
         e3:26:81:ab:04:56:1e:27:a2:82:e0:9f:6f:a3:55:e2:65:aa:
         c7:60:b9:6a:dd:04:19:ac:00:90:47:10:d6:ff:7d:de:ff:c4:
         dd:76:89:23:39:b0:8b:80:03:f9:99:89:6f:63:05:4a:99:32:
         68:2c:6f:f3:6b:38:84:3c:f8:d4:c3:d1:68:57:cd:54:99:34:
         b7:80:29:5f:9c:de:2f:39:cc:35:68:ba:25:f3:2b:a2:10:9f:
         91:c7:2f:a7:fe:c8:90:4f:eb:7c:74:f9:cf:a8:76:af:99:9b:
         d3:9e:32:25:ce:53:a3:14:b4:e9:fa:2e:a1:21:0c:f8:4b:f0:
         8c:6a:ce:72:4a:ea:2d:34:96:69:9f:d3:2d:1d:2d:64:f0:fb:
         2b:07:f0:5c:ae:7d:4a:66:f2:50:e2:92:4d:07:88:8f:ac:fb:
         45:79:5a:63:ae:17:2f:25:5d:ac:cd:6e:d9:fe:d7:b6:d6:b3:
         ae:a1:52:e6:e1:f5:91:f0:e1:28:2e:ee:89:13:8b:5d:63:da:
         8e:f6:e9:41:5c:60:9e:83:12:1f:30:ba:8a:58:6f:cb:e4:fb:
         82:10:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----