Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/51477fc3-2587-30bc-adba-4b74c0abccb8.roa
File:                     51477fc3-2587-30bc-adba-4b74c0abccb8.roa (raw, json)
Hash identifier:          T9dwP8cZNevJrhWb/Qw7q/8uXbQSKkS9DGnRJJ4/tNk=
Subject key identifier:   F3:E1:67:95:3D:9E:CA:8E:93:6D:4A:9C:87:0D:54:48:39:22:8B:4B
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858479DF70865933664E2C831AA60
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/51477fc3-2587-30bc-adba-4b74c0abccb8.roa
Signing time:             Mon 21 Oct 2024 17:19:36 +0000
ROA not before:           Mon 21 Oct 2024 17:19:36 +0000
ROA not after:            Sun 19 Jan 2025 18:19:36 +0000
asID:                     395359
IP address blocks:        170.176.147.0/24 maxlen: 26
                          2620:12c:9005::/48 maxlen: 64

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 17:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:f7:08:65:93:36:64:e2:c8:31:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Oct 21 17:19:36 2024 GMT
            Not After : Jan 19 18:19:36 2025 GMT
        Subject: CN=b39527ee-315d-4c5c-bd9c-131bf2fdafe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:7d:c5:bb:ab:c0:df:c3:e7:0f:a7:2d:52:
                    97:52:70:7b:c6:c9:a5:6f:02:06:a8:e4:56:4b:cf:
                    d5:22:02:db:11:eb:29:0d:d0:2d:0e:2d:27:06:8a:
                    86:aa:d9:1c:d5:24:32:bf:7a:c1:90:a9:ee:1c:01:
                    4b:bd:33:a5:08:4e:65:46:1a:ee:12:a1:7c:58:fd:
                    ab:22:6c:83:23:69:21:47:ec:8d:e8:b0:82:e2:34:
                    1a:d2:48:3d:f3:2a:8b:19:10:53:9a:27:09:29:bb:
                    d6:dc:41:c1:21:6f:9f:d2:49:49:fb:10:65:0f:7d:
                    f9:3d:ed:d7:0e:83:85:c5:72:86:7f:58:47:0a:33:
                    9f:8a:43:ff:71:f0:1c:72:fc:b2:d5:d7:db:27:fb:
                    4f:94:82:89:59:0f:f6:1d:09:b0:89:04:ef:57:87:
                    23:1f:86:b7:ea:6d:ef:2c:e0:46:b9:4f:cb:ab:88:
                    33:c9:16:4c:c6:f6:72:74:10:9e:c1:04:0d:5b:63:
                    e0:9d:60:9b:93:e1:e6:79:83:60:1a:76:09:af:ff:
                    bb:55:db:24:dd:35:12:4a:87:94:c0:80:a1:45:38:
                    81:e5:56:28:5c:e5:b7:22:f2:6c:58:a2:01:db:88:
                    23:08:09:79:71:1e:36:eb:63:ff:03:ca:6d:9c:32:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:67:95:3D:9E:CA:8E:93:6D:4A:9C:87:0D:54:48:39:22:8B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/51477fc3-2587-30bc-adba-4b74c0abccb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.147.0/24
                IPv6:
                  2620:12c:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:31:f1:fe:dc:05:9d:94:9e:87:10:d2:81:58:00:a2:c8:29:
         36:ca:b5:b2:a6:bc:a7:ba:e2:00:74:0c:d5:68:61:41:a5:2b:
         24:35:51:65:ed:49:0b:8b:fb:d0:4d:8d:2f:e8:97:93:be:da:
         24:2a:a6:e8:c3:f0:f3:d0:98:0d:95:a0:06:de:19:09:01:df:
         c3:5d:dc:96:57:b3:df:f0:6a:38:f7:7e:dc:bb:dd:11:db:da:
         7c:42:f0:8a:91:ac:68:6d:a1:bd:0d:49:41:b9:50:7a:1c:d9:
         89:c2:9c:f6:5d:0b:bc:fa:d9:3f:28:e7:df:78:e5:74:f8:c1:
         d9:4e:8c:f0:e3:a7:0e:9f:16:3e:f5:9c:c1:d3:95:4c:78:8c:
         37:19:eb:eb:24:37:61:46:a3:e1:02:25:9c:c1:9f:d4:b7:bb:
         47:fd:a4:a8:98:8f:b8:7f:39:92:84:f5:9a:93:0b:cd:f0:71:
         a4:6c:c2:1b:01:c2:f5:f7:2e:f9:ed:17:b2:01:4f:cd:8c:f1:
         ab:25:18:b8:e1:f0:2f:dc:4f:92:3e:61:92:6e:4c:6e:0e:3e:
         e7:2f:cb:8a:a5:82:e3:c6:96:3a:55:69:7f:35:45:90:4f:5e:
         a1:e1:3f:cd:82:08:8a:8f:83:b3:db:40:f3:e3:89:28:88:92:
         77:0e:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----