Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af569b3f-b59c-3af6-b02d-87b31f2a8c41.roa
File:                     af569b3f-b59c-3af6-b02d-87b31f2a8c41.roa (raw, json)
Hash identifier:          CKTrkRzF7Ykyz2Wm+y7glLL2NsVBJnF3VHx5aRrQQy8=
Subject key identifier:   25:48:10:70:C4:6A:0E:24:84:88:C0:1C:86:3A:90:6B:27:6E:F1:04
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858479C1126C7041C2EBE3DCDB040
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af569b3f-b59c-3af6-b02d-87b31f2a8c41.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     53356
IP address blocks:        141.140.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 20:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:26:c7:04:1c:2e:be:3d:cd:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=8822985e-0b09-44ec-b733-b541900baffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:58:53:c7:66:25:09:8f:56:6e:82:e7:eb:
                    2b:4a:b2:54:ee:60:60:72:57:8c:80:3f:6d:98:8c:
                    ab:61:f2:06:bb:dd:95:18:ce:70:76:ef:24:54:79:
                    d4:c4:00:b2:a5:03:4d:6d:71:d5:93:d5:a7:ef:76:
                    87:dd:f0:74:48:15:41:4e:a9:78:1e:fc:c2:99:ca:
                    97:ae:58:fa:a0:9c:f6:9a:1a:48:71:eb:43:3f:63:
                    f7:4e:d9:a3:9c:c6:55:0c:bf:5b:ce:5f:26:49:ce:
                    74:2c:63:18:8d:cf:50:d8:5e:ca:e9:c0:c1:bb:30:
                    9c:cb:de:91:18:1e:8c:53:37:6b:2d:7e:c9:4a:2a:
                    db:b9:45:05:ab:ff:22:6c:cb:f1:1f:4e:b3:02:9f:
                    0a:dc:2d:99:c0:a7:22:d7:0b:de:0e:b2:a9:2c:34:
                    e3:10:a6:98:f4:0c:11:c1:76:7e:c0:89:1d:ff:c5:
                    b5:1e:3c:d7:d0:3b:73:d6:18:c9:06:d0:80:b5:21:
                    6d:49:68:0a:56:db:2c:64:4f:cd:90:18:3b:e8:05:
                    aa:a9:f6:86:56:03:3c:dd:be:7a:f3:84:5d:29:71:
                    5e:ea:83:52:cd:4c:05:b2:5d:d7:b1:e3:bc:b3:f3:
                    c1:67:7b:e2:d7:7e:84:1f:af:a7:b9:61:4e:a5:c4:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:48:10:70:C4:6A:0E:24:84:88:C0:1C:86:3A:90:6B:27:6E:F1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af569b3f-b59c-3af6-b02d-87b31f2a8c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:df:21:05:62:36:3d:99:bd:61:15:f0:8d:8d:28:22:b1:bb:
         e2:4c:6a:d2:52:6e:2e:f3:6e:69:2b:89:32:80:9a:d5:59:0f:
         25:cf:dd:f6:7b:fe:8d:03:a5:f3:b6:3d:f7:17:4e:e4:d4:38:
         30:92:e1:d9:bb:15:6a:05:95:f8:bc:2f:73:45:c9:30:f1:bd:
         5c:cb:0b:70:9d:b5:c4:70:1f:52:92:5a:0a:e2:b6:11:8e:a2:
         5f:fb:f6:19:31:cb:3f:9c:8c:4d:ca:5b:75:b0:c8:83:31:e4:
         b0:70:95:2d:28:59:ef:76:a6:2b:d2:58:a7:72:f2:a1:9c:3e:
         a6:da:d7:2e:29:fc:14:51:a2:73:24:11:f5:fb:26:ca:a0:a4:
         76:86:ab:c6:11:b7:86:5f:02:76:55:66:a7:62:30:7e:ea:52:
         3a:11:f8:c7:a5:1e:4b:3c:2e:d8:0e:41:c3:6d:2c:24:6c:e1:
         7b:1b:30:ba:3a:ce:e5:8a:c3:f6:7e:93:0d:07:65:47:cf:40:
         da:98:4c:bd:f6:4e:1d:40:40:5e:d1:60:c8:90:42:8a:8e:db:
         1c:9a:ed:c9:92:c0:4c:ab:af:fc:6e:dc:d5:27:57:f4:44:4d:
         ed:f3:f0:b8:b7:a6:d6:83:9a:2c:08:31:3b:33:e0:b4:d7:88:
         5a:3a:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----