Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/dfda2561-618f-370f-a5a3-b8d5ccc3d965.roa
File:                     dfda2561-618f-370f-a5a3-b8d5ccc3d965.roa (raw, json)
Hash identifier:          ysdlA1vlNMOhaUu3Xk4UWDfEeT4uqymrvF2xtbxoCoo=
Subject key identifier:   2D:92:F2:15:D4:DD:5F:75:64:7F:19:9B:46:E1:57:E7:3E:91:66:29
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328583E5641765DAF7F10FC0E74E840
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/dfda2561-618f-370f-a5a3-b8d5ccc3d965.roa
Signing time:             Wed 22 Jun 2022 12:00:00 +0000
ROA not before:           Wed 22 Jun 2022 12:00:00 +0000
ROA not after:            Wed 04 Apr 2029 04:00:00 +0000
asID:                     5645
IP address blocks:        173.246.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:56:41:76:5d:af:7f:10:fc:0e:74:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jun 22 12:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2029 GMT
        Subject: CN=edb55ca3-723d-4b0e-9f07-dd3ba97e34c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:0d:d9:57:c8:22:f7:c7:26:b3:23:d5:a5:
                    7c:70:a2:42:15:50:4d:45:56:0f:12:23:3d:08:e9:
                    d9:49:b8:3c:30:bf:3a:3c:40:38:e3:a8:74:aa:c3:
                    b5:81:b6:f6:f9:39:ba:1d:28:6f:66:4f:35:b6:eb:
                    ea:5b:24:b9:ba:b6:55:e0:70:a1:fc:06:4b:9e:e3:
                    f4:7e:31:4a:b3:21:ad:c0:0a:ba:05:2e:76:93:0e:
                    6c:41:e0:2d:23:8d:c5:84:7c:b6:b1:f6:84:37:cd:
                    68:77:a7:9a:f9:1a:47:fc:c6:77:fa:cc:9c:d3:bb:
                    19:32:11:b8:5a:44:03:a5:2c:eb:f3:4f:17:7d:c3:
                    37:c7:26:17:5c:9c:fc:98:e1:18:79:29:69:89:59:
                    c0:de:8a:3c:08:04:c5:25:44:cf:47:c6:e9:7d:c9:
                    45:94:b1:16:f6:db:f7:15:1b:45:f8:b2:19:a4:34:
                    21:b4:ac:73:3c:cd:c8:53:ca:91:29:e4:ee:d4:bd:
                    b8:c2:45:90:c8:ac:38:7d:b5:31:a9:20:42:c9:c1:
                    1d:19:9a:c5:48:11:ff:37:81:90:a3:ec:7d:8c:06:
                    df:89:f0:9c:1f:7c:61:49:6d:f8:6a:17:16:56:16:
                    46:6f:fb:08:32:d5:ba:f6:28:fd:f4:12:c6:1b:cd:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:92:F2:15:D4:DD:5F:75:64:7F:19:9B:46:E1:57:E7:3E:91:66:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/dfda2561-618f-370f-a5a3-b8d5ccc3d965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:43:a8:63:74:90:46:da:7a:dd:5b:91:1f:de:48:ad:bc:
         8d:73:e2:b0:98:c0:19:a5:b6:79:6d:1f:65:52:91:9f:5f:98:
         8e:08:3d:3f:96:68:8c:26:f6:ea:5a:fe:94:95:6d:90:c6:f8:
         30:32:31:04:59:0b:55:e3:40:15:33:57:34:0f:72:94:b5:f9:
         5f:cb:ca:bb:db:c6:28:7f:c6:79:b6:1c:f2:99:ac:6d:28:15:
         b2:19:c1:88:bb:55:1e:d4:09:f4:80:98:6c:dc:4a:ba:85:12:
         44:61:24:0d:87:b1:a6:0c:71:52:4c:81:0d:ce:12:39:32:fc:
         ce:55:1b:ca:95:13:4e:37:93:75:08:67:9e:6c:82:2f:a1:0a:
         80:53:b6:f7:b6:16:70:79:de:6a:52:1e:5d:9e:7f:dd:79:43:
         16:0b:66:62:a1:bc:82:e4:b6:a7:ac:42:a6:a6:74:0b:1c:22:
         fb:ed:76:d5:65:34:fb:51:30:7d:d3:53:71:e9:ba:8c:b6:5a:
         dd:ad:2b:88:2f:19:4d:10:5f:fc:8f:75:7d:12:f6:e0:f3:73:
         d0:b7:b9:55:4b:9f:ee:19:ca:f5:fe:f7:6b:74:c0:51:99:bc:
         46:d5:02:cf:40:3d:71:f4:4d:09:c5:e2:32:76:6e:b1:25:46:
         03:8f:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----