Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa
File:                     587232f7-fb44-3c9a-9052-19c9094e3ac6.roa (raw, json)
Hash identifier:          vocDI8gS/Df7nysbbfoiApAeB6nDlNly7YTRK+hZZKk=
Subject key identifier:   12:01:89:4F:0D:C4:DA:C1:B1:00:03:7E:CA:E7:D2:9D:94:2A:28:C7
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F432858478CB68DC9EA1AE701DC1C3900
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     7018
IP address blocks:        23.154.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8d:c9:ea:1a:e7:01:dc:1c:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=d626ecd5-6fa2-41b9-95f9-98c2bb0abd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:90:1e:70:12:5c:0c:63:bb:db:87:41:e0:
                    07:08:58:04:55:58:ca:ef:6f:c4:30:bb:9e:51:7a:
                    92:e5:b5:9a:f0:81:5b:23:57:06:65:41:55:e3:bd:
                    40:e9:f8:19:b5:9f:72:ee:91:08:74:ae:38:48:33:
                    01:a2:cd:41:b2:ee:bf:f7:db:bc:7a:d0:76:cd:14:
                    c8:69:be:16:c2:d0:04:4c:0f:3b:74:aa:ca:9b:1b:
                    08:e0:93:0a:9a:52:89:4b:a2:a0:98:ea:34:a8:55:
                    ed:91:be:aa:bc:38:80:05:4b:8b:62:ce:65:22:88:
                    ef:29:bd:db:61:5a:63:97:85:5f:08:31:0d:59:6c:
                    b4:d8:40:ef:70:81:a0:50:87:96:17:d1:0f:d0:b4:
                    61:a6:aa:3e:fa:69:00:a2:4f:39:ee:c8:fe:7e:83:
                    12:d9:d7:ae:6c:5e:c5:45:61:f5:59:38:2e:b3:1b:
                    21:d8:e7:1e:b6:7e:d5:3b:58:16:e7:15:84:20:97:
                    eb:58:ef:6f:e0:2d:54:86:cf:20:e7:47:d8:bc:b0:
                    39:02:53:58:ad:20:25:d1:60:0d:d2:48:81:fb:5f:
                    a7:e2:28:ef:d4:ed:95:d7:5f:61:b2:98:05:4d:cb:
                    13:35:f2:ab:05:f5:ef:5f:57:a3:eb:5c:6a:86:41:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:89:4F:0D:C4:DA:C1:B1:00:03:7E:CA:E7:D2:9D:94:2A:28:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:51:2a:31:99:35:4f:02:1a:01:42:b5:9f:62:d7:1b:05:d3:
         01:b4:ee:b6:99:25:e9:38:ca:70:ab:8a:b0:dc:ab:cd:78:e4:
         f3:57:c3:2c:dc:cb:31:df:49:18:ef:ac:cc:0f:08:93:f3:b1:
         f7:d7:53:c6:31:01:07:15:e0:a1:eb:63:82:c6:53:1b:6b:d6:
         66:ae:db:e5:e6:ba:2f:01:ef:6b:13:f2:c2:64:cb:a4:95:40:
         a6:f0:85:5c:cd:ea:dd:1e:0f:e6:3d:de:fe:e6:b9:ec:64:d4:
         8b:45:f5:c8:35:e5:3e:97:4b:c8:61:0f:ad:0d:eb:36:8f:7c:
         ea:76:a6:ae:c9:bb:c0:17:d9:ce:84:0e:c6:52:1e:da:16:f2:
         99:8c:af:5b:fa:c6:1f:74:8e:47:4e:bf:1c:81:8d:1a:6f:b3:
         22:bc:99:dc:ed:3b:53:8a:5e:2c:f5:5c:fa:e4:bc:dd:ef:dc:
         ee:6a:32:ac:97:97:c0:d6:e2:e0:39:25:b6:e1:0b:2a:8a:1d:
         b8:91:fe:6e:2f:88:9d:2d:79:1b:da:60:2e:3e:80:69:61:b6:
         fb:eb:30:d6:fa:fd:a1:94:a6:b2:df:10:36:7f:63:e3:0b:4d:
         27:79:b0:99:3a:c9:83:64:01:de:5f:70:b4:fb:ef:9d:a8:fe:
         f0:98:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----