Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/733c68fb-514a-3498-ad52-c4561d5d3dd8.roa
File:                     733c68fb-514a-3498-ad52-c4561d5d3dd8.roa (raw, json)
Hash identifier:          OlbU6VnC+0w0lyw4PeXRbogS7XXyioLp68risoXRAMs=
Subject key identifier:   36:EB:D7:B4:12:71:BC:5A:8B:CE:A8:96:EA:06:35:E8:1A:49:75:4D
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F43285847A06F5E2F4A39EF09EC4DC540
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/733c68fb-514a-3498-ad52-c4561d5d3dd8.roa
Signing time:             Tue 22 Oct 2024 14:33:41 +0000
ROA not before:           Tue 22 Oct 2024 14:33:41 +0000
ROA not after:            Mon 20 Jan 2025 15:33:41 +0000
asID:                     9009
IP address blocks:        104.245.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:6f:5e:2f:4a:39:ef:09:ec:4d:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Oct 22 14:33:41 2024 GMT
            Not After : Jan 20 15:33:41 2025 GMT
        Subject: CN=c97222cd-8af6-400f-a73a-5caa7e0a18d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:22:5c:bd:3a:f2:a0:98:99:a8:63:6d:b0:
                    f0:a3:17:41:0a:bb:19:e7:c1:a0:f0:ab:7e:50:ec:
                    d3:60:58:37:ab:2d:19:10:46:58:b6:f8:8b:cc:7a:
                    52:11:d6:79:b7:17:d2:87:7e:5c:f8:f1:11:47:8f:
                    22:65:cc:50:dc:f5:81:9f:ee:7f:0c:b5:ab:c6:55:
                    75:40:bb:94:2f:29:a6:79:10:b1:7d:d0:fe:1a:c2:
                    40:b0:ca:8b:ee:8b:30:91:66:14:c1:49:26:40:f3:
                    49:e2:dd:75:7a:b8:45:4d:10:50:db:8b:4a:4c:68:
                    53:74:95:63:50:35:9d:46:2e:f7:4e:f7:bc:b8:12:
                    fe:6e:f8:97:22:73:a4:2e:d7:b7:dd:4d:f8:77:4a:
                    e1:04:8a:ed:a3:14:54:45:fb:b2:09:af:9c:cc:92:
                    33:07:57:77:49:f0:da:95:67:9f:fe:ce:e7:39:0e:
                    4c:1e:ab:cc:31:e6:61:54:11:99:68:92:1f:75:d1:
                    19:dd:96:0e:6c:72:29:d3:44:17:e2:90:3b:1e:d8:
                    fb:b5:51:41:04:89:57:7b:c1:38:1f:65:28:be:e7:
                    ae:e5:16:0a:2a:af:de:74:f2:6e:b3:64:c1:6c:d0:
                    9e:a7:9f:bd:4d:3e:cc:0f:b0:2d:9b:e8:e1:78:e7:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:D7:B4:12:71:BC:5A:8B:CE:A8:96:EA:06:35:E8:1A:49:75:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/733c68fb-514a-3498-ad52-c4561d5d3dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:34:6a:62:7a:65:c0:08:5e:b3:a9:64:46:e7:42:f0:59:ff:
         eb:34:64:be:05:dc:36:45:28:7e:ea:64:33:a2:c1:fc:b9:ca:
         4c:7f:22:16:ea:36:8a:09:c1:65:96:75:20:9a:60:92:4a:e1:
         02:17:51:7e:36:dc:5a:7c:d4:50:5b:c2:47:db:c1:e3:82:d2:
         d4:0d:5f:77:fa:37:12:c2:94:89:0d:d7:f7:94:09:16:4e:11:
         23:7a:50:92:b9:7c:30:2a:91:a1:9a:de:83:9c:94:75:95:03:
         e0:0b:2a:b0:57:b2:01:d9:11:c3:a5:eb:c5:1c:a5:b6:83:30:
         91:e2:e6:e4:55:2f:30:8b:64:a1:c1:1d:c7:b0:93:f2:d1:4e:
         5a:54:93:10:9f:ba:7f:a8:b8:0b:9f:10:77:ae:cb:65:d3:ef:
         a6:01:fd:cf:a6:61:e4:f3:66:33:43:45:67:cf:69:91:f9:6f:
         03:bd:e4:e0:4e:90:94:f9:1a:72:19:d4:96:37:27:47:c2:ce:
         dc:68:a8:b3:0f:4f:5d:eb:58:8f:66:ef:ed:09:16:8a:ef:df:
         66:a0:af:56:1a:14:c2:44:bf:93:2a:af:46:07:00:e0:81:75:
         eb:ed:d4:1b:99:ba:98:fe:11:47:00:3d:37:34:39:c0:43:9b:
         92:2f:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----