Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/8d5c707c-b07d-38d1-8a21-574bbb990317.roa
File:                     8d5c707c-b07d-38d1-8a21-574bbb990317.roa (raw, json)
Hash identifier:          JKjd5cDfNxqCAtSORBK93K7E6STfGwMxxhi+18hg0Vw=
Subject key identifier:   4C:4D:6C:C8:0A:8A:D7:73:DA:8A:6C:F1:F9:78:44:0B:F4:D4:33:3A
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F43285847600B9968CD6B64B7CAF51480
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/8d5c707c-b07d-38d1-8a21-574bbb990317.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     212271
IP address blocks:        208.65.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 20:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:99:68:cd:6b:64:b7:ca:f5:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=01f68c6c-b71d-4d28-8562-fda443b26297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:c3:36:00:b8:5b:28:9f:5e:3f:78:dd:e5:
                    10:92:05:8b:08:ee:95:bd:1b:32:2a:cd:32:5f:28:
                    b9:24:f6:df:f1:d5:34:f5:9b:c2:28:9a:b2:81:68:
                    fe:41:bf:8a:df:e4:3c:13:5d:46:44:b4:b5:b7:0e:
                    b9:bf:05:cc:40:50:5a:49:2c:e7:a9:fb:e9:fd:59:
                    23:27:2f:ff:ca:c2:da:3e:4c:5f:1d:23:65:9c:37:
                    9a:0a:c8:69:de:5d:f1:ae:4d:6f:75:46:f3:aa:12:
                    79:1c:2e:10:45:5a:fd:ce:bf:aa:88:d7:2f:ae:f1:
                    7c:ae:2f:db:c7:e4:95:f6:b0:14:45:93:63:20:38:
                    82:b9:ac:4e:55:c8:7c:27:00:a9:4c:4d:b6:98:7b:
                    b1:a6:9e:19:67:19:79:e9:b0:e7:88:43:75:c9:a4:
                    3f:f4:e2:f8:bd:db:82:c3:f4:2e:8f:e4:95:0a:c0:
                    d8:82:8e:24:a0:59:c4:43:7b:51:1f:49:f7:87:ba:
                    f2:f9:fd:d3:dc:e6:c7:d6:45:a9:f5:e6:c2:07:3f:
                    0f:86:6f:cc:9e:a6:29:d9:88:10:f2:4e:3b:85:40:
                    76:16:a8:83:64:af:6e:1c:de:0b:d5:0e:80:08:3b:
                    2a:f3:a1:bd:be:d0:7e:9c:cc:90:2e:7f:52:ef:86:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:6C:C8:0A:8A:D7:73:DA:8A:6C:F1:F9:78:44:0B:F4:D4:33:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/8d5c707c-b07d-38d1-8a21-574bbb990317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:06:81:85:08:98:2a:6a:46:39:ea:e8:2c:4c:30:05:bc:
         c3:7c:aa:bb:98:90:5c:4f:b0:9b:3b:50:1b:bc:f9:0c:e5:26:
         dc:6a:fb:92:8a:8c:c0:b6:cb:ad:5b:8a:e2:5a:9b:88:00:73:
         4c:b9:c1:e1:df:ef:b1:64:b2:9c:34:64:10:93:a8:0b:9a:8c:
         9b:d0:c7:17:15:5a:65:99:6e:30:d1:e5:e4:c7:5a:ff:36:08:
         36:09:85:62:8a:0c:f1:90:bf:4b:0c:bc:8c:72:2e:92:c7:49:
         1c:88:92:96:85:56:e0:26:04:fc:e3:37:4d:25:7a:be:33:e5:
         c5:d1:e2:e3:6e:59:8a:78:cd:ca:db:b4:49:9b:94:e2:a5:85:
         bc:c1:a2:82:60:fa:a4:8b:be:53:e2:77:2d:e4:65:e1:12:a0:
         40:85:1a:07:bd:2c:f6:89:5c:61:80:cf:89:24:78:6e:6a:29:
         0f:c4:c3:a4:40:71:fd:22:ce:9a:f3:51:d6:5b:cb:cd:54:5c:
         2a:5c:f7:2a:13:2c:ea:a3:7c:44:53:55:72:d0:02:f7:16:c3:
         26:23:db:22:40:6a:4b:b7:de:bc:f7:31:f4:e3:a9:1d:72:8d:
         bf:ef:05:b1:4a:37:a6:e5:cf:d0:b2:6a:04:4b:72:b8:84:33:
         2f:ee:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----