Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/605b3c61-56e9-3b64-804b-b194ba284c50.roa
File:                     605b3c61-56e9-3b64-804b-b194ba284c50.roa (raw, json)
Hash identifier:          4uKbMpWCNOhi7X86ylyO6WWW5GHYik44OmOQETbeKg8=
Subject key identifier:   59:12:6A:B0:44:DC:90:2B:10:7D:E7:3F:EA:89:4F:C4:3A:16:6C:31
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858473D30DA1E40A6F97233CA8340
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/605b3c61-56e9-3b64-804b-b194ba284c50.roa
Signing time:             Tue 17 Sep 2024 01:22:41 +0000
ROA not before:           Tue 17 Sep 2024 01:22:41 +0000
ROA not after:            Mon 16 Dec 2024 02:22:41 +0000
asID:                     2559
IP address blocks:        198.241.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 02:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:30:da:1e:40:a6:f9:72:33:ca:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 17 01:22:41 2024 GMT
            Not After : Dec 16 02:22:41 2024 GMT
        Subject: CN=2caf5870-c99d-4954-9ff5-7d9074dba531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:47:a8:fb:db:c8:24:42:d7:ea:70:37:6f:
                    e3:d9:67:2f:61:03:2f:57:a8:90:5a:1a:45:c8:6f:
                    75:bf:51:2c:2d:90:b2:f3:60:29:3e:2f:67:64:45:
                    b1:23:0b:0d:3d:d0:ba:0d:2d:de:44:5a:4b:cd:8a:
                    fc:14:e3:3a:4f:6e:2a:51:b2:43:c3:99:7c:96:54:
                    de:bd:2d:76:06:88:a7:20:59:83:7c:81:4b:b0:ff:
                    23:e0:4f:0c:41:83:fd:45:d0:a4:ea:0d:e9:9a:a7:
                    08:14:16:eb:38:53:76:61:7c:4f:53:83:e8:17:3f:
                    5a:d6:03:ef:c9:fb:c9:84:1e:8e:84:62:1b:b6:f9:
                    71:f2:e9:db:7c:d8:09:64:0e:bd:11:b9:e4:d5:62:
                    97:13:f4:3f:95:37:96:66:7d:5e:13:4d:48:7c:7b:
                    37:bf:c4:5d:1e:c9:b0:98:df:e0:6f:6b:e1:28:61:
                    88:2f:33:ec:ee:fa:b1:06:0b:4d:91:d2:28:46:4c:
                    05:4f:39:1f:e7:20:8e:5b:cf:e1:e5:c1:da:74:31:
                    fd:4d:0a:df:0e:b6:67:31:84:d5:f8:77:09:37:14:
                    52:0c:cb:5c:b3:c2:ff:50:64:90:49:ef:85:8d:10:
                    a1:63:ee:62:fa:ac:f5:0d:d9:71:91:91:cf:5e:18:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:6A:B0:44:DC:90:2B:10:7D:E7:3F:EA:89:4F:C4:3A:16:6C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/605b3c61-56e9-3b64-804b-b194ba284c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:82:ea:35:c4:5a:f7:1f:b4:52:14:b2:75:1f:12:59:58:59:
         1c:ce:89:c1:8b:3a:d3:44:b8:ed:f2:71:f7:2e:6f:59:ce:5d:
         3e:20:5f:7c:6b:be:9f:66:21:2e:b9:7d:bf:ad:96:30:2b:a0:
         8e:12:53:df:2c:1a:35:2b:61:ae:21:77:1a:75:16:a7:ac:f7:
         ef:1a:7e:fc:b0:c4:93:9b:54:17:cc:13:06:aa:2f:77:4a:cc:
         ff:c9:35:c1:7e:64:46:7a:1a:4d:e2:0a:dd:30:e0:9b:6b:e6:
         f1:41:06:81:bf:93:a6:96:e6:5f:c6:19:5a:12:e1:ed:97:46:
         e1:2b:ed:77:af:9d:6a:c3:95:73:07:20:26:ad:87:d8:78:81:
         7f:25:32:1d:1b:0e:e8:e3:a0:91:a5:25:f4:53:a3:97:49:b9:
         cb:bc:40:90:c3:9b:4a:1d:96:2c:7a:49:c1:2e:fc:48:b9:d9:
         a1:e3:f7:be:d3:15:cd:1b:fd:e5:e1:d9:36:28:1a:b4:d9:66:
         e9:fd:51:6a:9d:32:f2:e8:31:5f:62:ed:d0:e1:e8:38:36:f7:
         28:1f:af:29:51:0e:fc:0f:19:d9:4b:ff:4d:56:ac:9d:6e:77:
         34:75:c7:33:24:c0:f0:95:97:56:7f:fe:63:e4:ba:5d:4e:17:
         c6:c0:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----