Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa
File:                     d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa (raw, json)
Hash identifier:          dbWiRmtCnf0mRFuWI1C4qyWcGEoVONM5jneS30Rruco=
Subject key identifier:   C6:23:20:7E:62:8F:DD:41:D5:35:96:A1:38:26:E8:1D:8F:18:9C:14
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F432858473360A438A6102F3911FCA680
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     26548
IP address blocks:        104.193.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 21:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a4:38:a6:10:2f:39:11:fc:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=814d404d-7ea3-488f-9d01-fa6f68931ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:46:6f:68:d0:13:f8:4a:b2:4b:c1:0a:e4:
                    bc:7e:b0:98:1b:d2:07:e6:ec:18:16:97:c8:fb:08:
                    f4:35:df:d2:13:32:96:60:2f:5e:58:7c:1c:6d:93:
                    57:27:8a:4e:73:26:45:fc:20:78:8b:3e:44:3d:0d:
                    84:bb:52:4a:11:89:75:68:ab:38:09:19:0e:3e:2a:
                    2b:3e:ff:be:b2:4f:9f:02:82:91:7c:1e:0f:51:12:
                    fd:87:86:15:63:d0:c6:43:ab:5d:49:f7:e7:2e:ea:
                    41:b0:bd:db:d0:14:f8:35:d4:5a:70:31:ae:24:94:
                    11:37:e2:c6:6b:79:3b:00:ed:a0:5c:2f:41:68:06:
                    bd:0e:f3:83:f1:85:01:08:39:ef:5c:7d:5c:db:94:
                    61:d4:dd:46:31:c2:0e:81:20:ea:9e:cb:4c:10:7d:
                    cd:50:2e:3b:ed:b7:75:90:16:33:f0:c1:6a:e5:32:
                    f3:40:fc:51:84:72:7d:b5:1d:db:a0:4c:ce:ec:37:
                    bd:33:1a:b7:c6:9a:c1:8c:3f:a9:d1:ae:f6:ae:ed:
                    f6:33:3b:b2:f5:12:da:d1:2f:70:ac:e5:22:fd:86:
                    19:5c:6b:a3:0f:08:19:5d:22:fe:c2:8d:dc:61:e4:
                    2a:20:83:30:39:25:6a:3f:76:bf:e5:d3:6e:e8:d0:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:20:7E:62:8F:DD:41:D5:35:96:A1:38:26:E8:1D:8F:18:9C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:59:b5:3b:b6:5a:71:55:92:e7:68:0b:9f:e3:34:c7:80:d8:
         f0:c7:c0:73:db:96:4b:ba:fe:cc:63:52:0f:17:e3:1f:64:3a:
         b4:61:dd:ac:99:bf:fd:c6:f2:92:45:eb:c9:fe:37:37:ce:6d:
         fd:04:13:a2:ce:f2:cb:c6:75:b4:cf:26:d7:df:81:12:92:5e:
         cd:cf:49:1b:5f:89:0f:86:95:a2:4b:64:6f:ef:03:1b:e1:a3:
         02:16:d7:4b:8f:24:8f:5a:89:41:4d:53:e8:55:54:ff:5a:c9:
         04:93:67:fc:32:2a:19:8f:47:8e:25:55:71:78:ca:0f:af:de:
         a9:79:d0:c1:d3:b0:ce:75:8a:d4:33:ea:19:7f:e5:ff:6b:46:
         1e:d6:16:07:b3:25:b2:b9:af:35:f8:ca:e2:c4:2e:ec:77:d8:
         18:32:63:a7:a0:c3:5a:32:58:f2:6c:ad:b8:b1:66:73:f9:bd:
         1e:25:86:0a:54:28:03:c5:63:2a:00:77:f6:94:61:f3:5a:8d:
         17:2a:c0:5b:55:88:c0:2e:37:65:d5:6e:af:84:59:77:3f:0e:
         43:28:d7:ad:04:d7:2f:f6:64:80:40:49:a6:52:4c:b0:18:cb:
         8a:61:ec:ac:43:6b:d5:9e:28:68:64:96:97:4f:43:c5:96:22:
         d7:90:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----