Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/5728ae7f-d8f1-3e2f-9276-ae36636b1515.roa
File:                     5728ae7f-d8f1-3e2f-9276-ae36636b1515.roa (raw, json)
Hash identifier:          DO3d8iuHpELTb/67wtfLFIOPv5+rf90dAMNlKQYQNbw=
Subject key identifier:   FD:C2:80:9C:93:73:13:FC:BC:3E:34:25:2E:6D:63:81:9B:D4:5B:57
Certificate issuer:       /CN=30d537f2-f871-4f81-b20b-ae04610c521d
Certificate serial:       010D0C9F432858455C1369D12D7727462BA0A680
Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/5728ae7f-d8f1-3e2f-9276-ae36636b1515.roa
Signing time:             Thu 28 Mar 2024 17:19:33 +0000
ROA not before:           Thu 28 Mar 2024 17:19:33 +0000
ROA not after:            Wed 26 Jun 2024 17:19:33 +0000
asID:                     15169
IP address blocks:        45.41.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 18 May 2024 11:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:13:69:d1:2d:77:27:46:2b:a0:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d
        Validity
            Not Before: Mar 28 17:19:33 2024 GMT
            Not After : Jun 26 17:19:33 2024 GMT
        Subject: CN=3e06f991-35ba-4f57-82b3-3b10b30ea4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:05:c5:b5:23:7b:ef:cd:63:1d:cd:00:35:
                    05:6b:50:9d:67:10:e4:e0:10:5e:8e:7c:33:04:94:
                    53:06:2f:dd:e9:97:c7:cb:71:6c:2d:ff:2b:b9:bb:
                    01:53:7f:e5:bb:79:ee:e9:61:9a:f4:83:e4:7e:b8:
                    8e:bb:2d:04:e5:10:34:c9:93:23:bf:47:ee:90:a4:
                    6a:0b:85:96:5a:4f:0a:78:9a:74:0b:8d:5e:d0:2f:
                    89:61:9d:a0:4d:a7:12:05:0b:5e:fd:97:f9:1d:7e:
                    f5:6f:38:92:e9:26:49:1a:ae:a9:3d:ae:f8:ce:09:
                    7c:4d:b9:cb:77:c4:0c:e2:9e:15:a3:14:e7:cb:0c:
                    1b:72:df:7c:ef:9a:b1:5c:92:14:f6:9e:60:77:fe:
                    45:b9:3a:cc:cc:05:8d:d0:50:7c:1a:d2:12:56:22:
                    6c:40:ba:75:18:54:b4:64:10:af:08:67:8c:75:c6:
                    e2:c6:e0:ae:38:c9:69:ba:9b:16:58:7c:96:4e:14:
                    a8:b3:a5:6b:30:6a:a6:97:82:cd:2e:d1:cb:4e:0d:
                    d7:d5:89:3d:01:0b:a3:e6:91:f3:20:cc:85:4f:55:
                    2b:27:c2:ee:fd:5d:e8:1f:d2:ef:51:e8:65:e0:f2:
                    49:30:7a:aa:67:12:42:2c:48:60:22:e0:a7:f3:c5:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:80:9C:93:73:13:FC:BC:3E:34:25:2E:6D:63:81:9B:D4:5B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/5728ae7f-d8f1-3e2f-9276-ae36636b1515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:ab:37:6a:29:b1:f7:e9:6e:14:6e:b3:d7:d2:e3:32:ea:
         84:55:0d:a0:28:6f:05:07:3c:f7:54:1d:1b:07:4d:77:4d:88:
         a1:e6:c5:7d:90:d4:13:40:25:44:11:ca:b3:72:76:af:96:74:
         86:6c:06:4f:09:ba:ca:78:cf:9f:af:8c:e3:42:fc:cf:5d:4a:
         37:a5:0f:5b:79:87:08:d7:8d:15:0a:ca:61:c7:19:05:42:93:
         3b:c3:88:98:1a:79:de:f3:c6:25:d0:d0:92:cd:45:7e:16:5f:
         5d:c5:13:81:21:7b:e7:68:fd:f0:b0:4f:fe:58:07:a6:81:71:
         69:75:aa:85:2d:13:31:c1:05:b8:c9:78:bf:cf:e3:4f:2c:08:
         46:e0:1e:82:6e:95:7a:37:03:e7:7a:62:ba:bf:7e:76:d9:b0:
         c0:6f:44:7f:4b:7e:0a:29:9b:fc:23:a8:fb:11:f1:63:c2:8c:
         4d:46:8e:85:95:88:1d:c3:c2:e5:97:0e:5c:49:38:5f:ec:67:
         fa:74:49:9b:d3:aa:e9:84:35:e2:9d:b5:e8:66:eb:cf:13:24:
         21:cf:16:59:c9:b3:9a:77:cf:17:bd:b0:92:78:77:f3:35:ce:
         df:56:d9:2f:f5:95:ce:85:21:73:e3:8b:ce:d8:8b:d3:d7:90:
         79:cf:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----