Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520/6c451e46-cf0e-376a-b12d-082ac2c1c388.roa
File:                     6c451e46-cf0e-376a-b12d-082ac2c1c388.roa (raw, json)
Hash identifier:          95uVSOKTMbXtP8hvUSM6NgJSPxxTE12dd8fU3OUJ5gU=
Subject key identifier:   D4:83:33:6B:10:F6:64:48:7A:11:03:D8:7E:A4:37:B4:C7:A7:7E:BD
Certificate issuer:       /CN=5da226da-3838-457d-b595-28117a5ac520
Certificate serial:       010D0C9F432858475A8916D3E450C6C638AD62C0
Authority key identifier: 05:7B:25:25:4C:9B:0E:7F:D5:E5:4E:5B:1C:12:1D:1A:06:3D:2D:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520/6c451e46-cf0e-376a-b12d-082ac2c1c388.roa
Signing time:             Fri 27 Sep 2024 13:38:55 +0000
ROA not before:           Fri 27 Sep 2024 13:38:55 +0000
ROA not after:            Thu 26 Dec 2024 14:38:55 +0000
asID:                     25674
IP address blocks:        68.71.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 00:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:89:16:d3:e4:50:c6:c6:38:ad:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da226da-3838-457d-b595-28117a5ac520
        Validity
            Not Before: Sep 27 13:38:55 2024 GMT
            Not After : Dec 26 14:38:55 2024 GMT
        Subject: CN=2e775bf4-20fe-4d3d-be5c-16d143bf901a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:96:fb:19:5f:c9:2d:c8:78:23:68:20:ae:
                    a3:aa:b0:0c:49:c8:d2:1d:2e:f0:c1:d3:eb:b3:ba:
                    99:a9:4e:34:35:fc:62:0b:fe:fa:14:c0:6a:86:aa:
                    0a:30:01:52:fa:99:00:46:ee:ee:02:8e:4d:b8:78:
                    ba:89:c3:36:f5:fb:6e:98:59:da:7b:95:1c:2a:ca:
                    27:e1:6c:bb:fb:f9:d2:3c:1e:da:d4:a1:d8:f4:c8:
                    36:48:06:89:9e:f9:5c:ff:0d:84:75:8e:fe:4b:de:
                    0c:08:23:6e:7e:65:2c:38:81:fe:96:26:5b:6c:36:
                    ba:9e:f1:8d:19:ff:73:14:10:3e:43:78:58:88:7b:
                    7c:5e:51:10:40:d6:65:df:97:57:c7:22:08:3f:bf:
                    a0:64:dc:a4:64:d0:ba:f8:63:f7:4b:33:77:6f:63:
                    34:fb:aa:55:1d:a5:a2:a3:25:72:10:28:e9:e8:7d:
                    61:15:9f:dc:0d:d7:7c:48:f9:89:2a:15:75:34:3d:
                    c1:14:dd:ac:92:2f:d6:f6:d4:9c:8f:ba:9a:ec:0a:
                    43:77:77:16:6e:cf:26:e1:e2:92:54:14:07:40:3e:
                    ea:1d:61:28:ff:c7:ad:cc:25:5e:e4:e3:df:65:4a:
                    ab:bf:51:07:88:0c:59:f5:97:4e:e8:7e:61:f9:f6:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:33:6B:10:F6:64:48:7A:11:03:D8:7E:A4:37:B4:C7:A7:7E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520/6c451e46-cf0e-376a-b12d-082ac2c1c388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520/5da226da-3838-457d-b595-28117a5ac520.crl

            X509v3 Authority Key Identifier:
                keyid:05:7B:25:25:4C:9B:0E:7F:D5:E5:4E:5B:1C:12:1D:1A:06:3D:2D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5da226da-3838-457d-b595-28117a5ac520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f9:af:80:93:4e:42:7a:a3:fb:6f:cb:35:2d:59:14:fe:ab:
         f7:ff:2c:29:20:2e:04:12:1c:e2:a9:d9:db:30:14:23:e5:17:
         a7:bd:b1:06:1d:b9:b8:de:d9:6a:58:2e:c1:7e:96:39:d8:66:
         be:35:3b:58:8f:31:24:b0:72:4c:81:11:7c:ba:a3:a2:d4:bf:
         f5:88:40:a4:7a:9d:ab:51:db:00:95:62:17:b9:df:ca:55:1e:
         04:5f:27:03:2f:1a:d4:2f:5e:87:17:f9:03:92:2f:d7:33:85:
         e4:e0:6c:b1:65:5f:80:b7:e6:08:30:1b:8e:0f:4d:2f:fe:8b:
         ad:50:3c:13:06:2e:a3:5e:64:95:1e:45:27:2b:d2:ee:57:8a:
         92:db:64:83:9e:9a:1c:c4:c6:a9:e8:c6:d8:c6:1b:a8:da:c7:
         8f:ba:32:25:38:e6:36:a0:a9:1d:7b:5d:c2:7e:b1:5f:80:13:
         3f:dd:12:9c:34:44:3c:d1:e3:6a:05:d7:5e:79:47:a6:6d:62:
         d2:9e:68:7c:e5:b7:70:18:07:41:6c:b0:22:57:12:8a:81:c3:
         81:72:ef:1b:f9:80:f6:24:d1:3b:da:12:11:4f:84:80:12:6d:
         7f:62:a3:a1:00:fe:af:fc:0b:63:77:a8:e1:e1:46:38:84:fe:
         70:14:03:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----