Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/57321d0c-9efa-32de-a5c7-4fccba8994d9.roa
File:                     57321d0c-9efa-32de-a5c7-4fccba8994d9.roa (raw, json)
Hash identifier:          EKEQNHxFy1ViO3pjuHEkoMcJU3zrrocB2qdFFDTM+is=
Subject key identifier:   DC:F5:73:63:2A:DC:67:D3:19:46:FB:6E:05:46:17:88:75:0E:D9:16
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285846A7CA4D0B54BD063312E98500
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/57321d0c-9efa-32de-a5c7-4fccba8994d9.roa
Signing time:             Thu 25 Jul 2024 13:00:36 +0000
ROA not before:           Thu 25 Jul 2024 13:00:36 +0000
ROA not after:            Wed 23 Oct 2024 13:00:36 +0000
asID:                     149197
IP address blocks:        103.251.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 05:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a7:ca:4d:0b:54:bd:06:33:12:e9:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jul 25 13:00:36 2024 GMT
            Not After : Oct 23 13:00:36 2024 GMT
        Subject: CN=7545c131-3a4b-420f-9a02-52bf185ecddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:af:bc:27:51:37:d4:8e:94:41:bc:d6:9d:
                    e8:4f:06:c8:df:2b:3f:59:10:f2:4a:e6:02:aa:c1:
                    98:69:6a:a9:08:42:2b:6d:c4:02:41:b3:fb:e0:ce:
                    40:0a:d9:f8:f7:be:d6:3b:1a:fe:8d:7b:0e:9c:25:
                    64:89:42:c7:56:34:00:f7:62:68:58:74:08:a7:e1:
                    4e:2a:a3:ad:cf:03:86:f0:62:68:71:42:af:a2:cb:
                    73:57:95:29:52:02:93:d3:1b:f6:d4:32:09:cd:1e:
                    c8:a1:3d:19:23:4a:49:c8:f3:ce:13:10:35:6c:a0:
                    b7:8e:6a:7e:7c:24:fa:66:d4:f1:26:36:36:76:cf:
                    48:78:d4:d2:85:ec:7e:a9:04:26:ae:86:de:d8:a9:
                    4f:ad:2c:df:cc:90:65:e0:2f:24:40:63:bd:ff:7b:
                    d5:a0:a9:39:6e:47:06:8c:b9:4e:58:cf:a8:25:66:
                    31:b3:b5:b9:46:2c:62:8e:30:77:86:83:a2:2c:e4:
                    b8:23:07:13:a0:77:90:4a:06:26:00:a8:3b:93:0c:
                    de:ce:c0:91:08:64:5f:e3:75:a9:3d:a2:3e:4a:aa:
                    49:f3:e3:50:e6:eb:b5:54:92:0b:dc:55:67:67:29:
                    dc:e1:df:fe:8e:18:f1:5d:6c:05:86:58:d3:de:8f:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:73:63:2A:DC:67:D3:19:46:FB:6E:05:46:17:88:75:0E:D9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/57321d0c-9efa-32de-a5c7-4fccba8994d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:e2:2e:e3:b2:ec:47:36:7c:80:ad:02:37:45:c3:59:93:
         55:60:db:05:b7:ce:ec:5d:09:f1:d1:2b:8b:6c:60:8e:56:d6:
         e5:35:6e:4c:46:39:d3:01:66:34:7f:d9:30:45:12:de:b0:35:
         99:b6:9b:73:9a:8a:7c:94:e9:98:f0:5a:ce:fb:ca:b6:22:0f:
         d8:43:b1:a6:fb:59:c8:00:77:34:4a:9a:11:58:73:09:6a:d6:
         d1:95:aa:97:40:db:b9:57:fd:a6:84:27:67:6a:f8:27:7d:8c:
         8d:66:ae:1d:59:86:58:6e:96:e3:8c:c6:61:02:d4:b8:16:97:
         06:e7:ed:80:ab:55:06:0f:f2:11:3d:54:e5:ef:1b:bb:ad:3a:
         ef:83:93:9e:9c:bf:4b:da:bc:d8:ff:bd:9e:92:02:9b:72:59:
         03:7a:4e:12:6f:cb:0c:4a:81:b8:1d:93:23:c8:c7:ce:8b:02:
         cf:8d:12:66:e3:f2:20:3e:22:8d:3e:f2:f8:d6:33:af:43:0d:
         72:a3:07:bf:bc:a7:ed:c5:05:2d:75:9d:b4:93:93:2e:08:ba:
         84:c3:74:96:85:eb:72:51:e0:26:e0:71:fa:05:e6:ae:e9:62:
         01:41:29:ed:aa:04:6c:ab:e8:12:d6:a4:70:eb:70:3e:33:a7:
         ed:a6:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----