Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8432ffcf-641c-35e4-bdd8-d53df65e871f.roa
File:                     8432ffcf-641c-35e4-bdd8-d53df65e871f.roa (raw, json)
Hash identifier:          30p4iDbeGYFVRvjheTriMHBM5ABTAaTTLBBvXBeMB1Y=
Subject key identifier:   D2:E1:49:2C:E4:56:59:40:07:FE:D2:B2:2A:36:9A:0D:C9:2D:A1:5D
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584795DE932D7CB21B721481D8C0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8432ffcf-641c-35e4-bdd8-d53df65e871f.roa
Signing time:             Fri 18 Oct 2024 19:43:51 +0000
ROA not before:           Fri 18 Oct 2024 19:43:51 +0000
ROA not after:            Thu 16 Jan 2025 20:43:51 +0000
asID:                     26930
IP address blocks:        142.214.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 23:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:de:93:2d:7c:b2:1b:72:14:81:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Oct 18 19:43:51 2024 GMT
            Not After : Jan 16 20:43:51 2025 GMT
        Subject: CN=ad06eee0-b459-405b-8ccb-03a669f8fc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:59:2c:c6:60:49:3f:06:dd:27:9a:ac:0b:
                    a3:bb:c4:a3:6c:85:9c:39:6f:0d:b4:2a:90:ff:b1:
                    cd:1d:b2:66:68:11:f1:3f:87:c4:15:18:ec:41:32:
                    25:d9:35:8c:04:43:bc:b8:01:b9:de:d5:e8:10:c9:
                    94:f9:d0:08:f8:36:fd:6d:b4:59:17:ae:74:be:ca:
                    4d:3e:e7:f6:af:e9:1a:56:b2:15:ad:e5:ef:66:6f:
                    14:10:3d:41:c6:11:9d:45:84:44:62:56:af:e5:84:
                    fe:92:69:e1:b9:96:e9:ef:27:ab:f1:c8:18:48:73:
                    ea:6f:20:77:3e:0d:f6:74:39:96:9e:ce:fc:7c:d3:
                    80:57:76:42:2e:2d:89:f3:e6:0b:0e:7e:21:82:b3:
                    90:6b:4e:e3:99:a4:0d:31:30:34:5a:c8:1e:cf:83:
                    5f:b2:aa:b8:50:b4:ed:93:58:40:4e:7b:6d:d0:4e:
                    57:ca:ae:9f:24:2d:da:21:f6:ed:7d:b8:dc:b7:ac:
                    8c:05:aa:d5:9a:22:7d:10:92:ec:0d:2e:42:41:47:
                    b2:2c:32:d8:57:2f:c7:8b:92:cb:55:fd:93:6f:71:
                    e2:e7:bb:52:55:66:46:a9:e0:42:9f:ec:f9:ba:d3:
                    41:ed:9b:f7:3a:81:06:21:93:45:6b:f7:d5:64:54:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:49:2C:E4:56:59:40:07:FE:D2:B2:2A:36:9A:0D:C9:2D:A1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/8432ffcf-641c-35e4-bdd8-d53df65e871f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:64:fd:31:79:c7:31:93:35:38:2d:1b:63:ff:85:50:a6:
         01:aa:c4:aa:d3:96:7d:02:1d:c8:b9:1d:fb:b7:fc:3c:cd:a7:
         3d:01:ff:11:e6:9f:e6:d8:44:f6:40:54:29:a1:db:3b:e0:97:
         f7:25:05:e1:ac:e9:e7:93:83:2d:b2:18:be:ba:5b:7d:17:f3:
         14:85:6c:13:dd:01:44:f1:1a:02:74:0c:6b:2f:92:3a:07:b4:
         4a:fb:91:d1:7d:47:7e:bd:c9:06:01:3b:71:9f:bb:e5:02:67:
         a1:80:79:09:cf:d2:92:0e:ab:6d:77:00:33:38:50:72:d4:36:
         70:a2:2c:1d:77:24:f9:1a:8a:32:74:59:f9:72:6c:7a:c7:e5:
         c6:11:d7:b1:e4:bc:1f:7e:64:f1:b2:c2:ec:88:b2:cd:60:db:
         6d:05:4e:52:f5:70:c5:a6:b7:78:68:83:70:d8:3d:25:06:11:
         bc:14:e0:bc:02:34:4b:fd:13:83:96:5a:a9:97:65:3c:db:e3:
         fa:3d:33:03:aa:8d:09:ed:21:30:4c:7b:1b:4b:69:91:29:8e:
         b3:19:b4:7e:55:2d:dc:e1:23:d8:28:2f:cf:3d:d7:4b:a7:3f:
         96:53:09:e6:e9:7d:40:d1:8d:35:0a:5a:21:3e:06:b7:1d:d9:
         df:30:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----