Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c5ffe25b-7f7d-35fb-9793-a51836bca554.roa
File:                     c5ffe25b-7f7d-35fb-9793-a51836bca554.roa (raw, json)
Hash identifier:          3BcPk8nPCdVtADvIIwy5ih3UHOQjyHzMmBjE9RfnadQ=
Subject key identifier:   44:8F:34:86:B0:20:46:E1:3E:99:46:87:8E:AE:7C:3D:B5:C8:F7:B2
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F43285846F39B7F54FE59381F89F69480
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c5ffe25b-7f7d-35fb-9793-a51836bca554.roa
Signing time:             Wed 21 Aug 2024 16:47:45 +0000
ROA not before:           Wed 21 Aug 2024 16:47:45 +0000
ROA not after:            Tue 19 Nov 2024 17:47:45 +0000
asID:                     43260
IP address blocks:        141.195.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 17:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:9b:7f:54:fe:59:38:1f:89:f6:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Aug 21 16:47:45 2024 GMT
            Not After : Nov 19 17:47:45 2024 GMT
        Subject: CN=e36dd695-366f-4b79-9268-a7e425f06c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:49:35:f3:d5:62:fc:e5:f7:a7:52:fb:bf:
                    66:7b:e1:62:eb:65:aa:78:ec:c0:75:4f:03:13:ea:
                    52:0f:a0:2c:ee:ed:4b:f3:de:f4:23:32:a9:b2:48:
                    e6:30:c1:0f:f5:63:7d:c5:8b:84:59:9f:bb:fb:65:
                    d4:03:c0:74:81:de:5d:e2:48:90:d8:4c:e4:64:78:
                    81:d5:48:c2:38:c5:94:5e:f6:ae:52:2a:31:4e:72:
                    ad:22:41:4c:48:a2:43:8e:5c:80:7f:27:73:82:89:
                    9b:47:ac:a4:50:e9:64:f2:ec:90:46:b9:05:3b:00:
                    40:2f:95:88:9e:ce:55:64:f2:f4:c8:5b:2f:7e:1f:
                    fc:74:f9:4b:85:01:d1:f3:31:e9:c5:db:55:08:28:
                    fa:4e:69:f6:d6:0c:20:1c:8d:7c:74:10:92:27:3e:
                    f0:49:cf:ed:f6:2a:4a:59:04:7d:39:d5:1f:db:8e:
                    5a:7e:8f:0f:fc:a7:7c:cd:a6:7e:90:9f:9c:ae:30:
                    f8:dd:20:9d:93:a9:12:15:79:df:93:73:77:96:64:
                    eb:14:04:a8:5d:02:a9:fb:bf:3c:60:ba:06:64:3f:
                    12:ca:82:17:b1:b1:87:fc:ea:6f:34:5e:5c:79:83:
                    6f:21:90:08:bc:41:ac:9a:67:da:c6:f9:cf:d9:44:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8F:34:86:B0:20:46:E1:3E:99:46:87:8E:AE:7C:3D:B5:C8:F7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c5ffe25b-7f7d-35fb-9793-a51836bca554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:e6:d8:aa:a4:8c:69:6d:19:b0:18:5a:00:2e:0d:46:9a:
         ca:6e:6e:37:ca:05:e9:27:a5:a0:1f:07:0f:f3:7e:c6:7b:3c:
         d7:8a:58:24:74:96:af:6c:24:f2:ff:1f:2f:7e:14:26:60:87:
         86:0c:5a:48:20:05:01:64:7f:c6:81:fb:f8:3e:5a:4e:89:9a:
         99:20:b1:a3:a6:f9:93:49:3b:2c:f4:5c:c4:cc:dc:f4:25:39:
         7b:1f:a6:3b:c2:04:f0:5f:d8:41:b7:ac:5c:4d:58:3b:77:fd:
         16:5e:11:ea:f0:17:a9:7a:1b:32:69:b9:e3:d7:8f:8e:18:12:
         86:de:a1:e7:e7:f0:29:02:12:d0:07:0e:29:ae:8a:f7:5b:40:
         ae:c7:a4:17:a6:f3:f6:88:0f:4c:22:24:aa:91:b3:75:98:5f:
         38:c9:e2:b5:7a:f9:53:9f:bf:95:54:af:f5:fc:78:5a:5d:89:
         bb:01:48:d1:28:05:b8:ca:0f:f9:71:45:50:9f:90:15:01:b6:
         e6:42:89:e6:d1:7f:31:70:bc:32:85:5f:6e:f3:42:6a:82:1f:
         e8:47:0e:1d:35:bb:07:05:3d:46:3b:5e:5a:42:22:24:f5:c6:
         51:f7:50:ca:38:b4:7b:07:c3:20:1e:4c:94:c8:3f:8d:98:a4:
         9c:1b:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----