Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4c8b1866-7874-3661-b51f-11e513b12a61.roa
File:                     4c8b1866-7874-3661-b51f-11e513b12a61.roa (raw, json)
Hash identifier:          8fNag0flJEbeWGdmd8T9VKz/zFJbK5gopt/3uJ1lCnY=
Subject key identifier:   32:47:B8:2C:AE:AC:5A:4B:34:6F:F8:54:BC:D5:7D:4B:2B:F6:84:FD
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328583E53B65B3CC2B8D356A4D330C0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4c8b1866-7874-3661-b51f-11e513b12a61.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Wed 04 Apr 2029 04:00:00 +0000
asID:                     5645
IP address blocks:        104.195.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:b6:5b:3c:c2:b8:d3:56:a4:d3:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2029 GMT
        Subject: CN=40a17540-d9ba-4e79-852a-5b4e839e164b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6b:df:86:30:04:6a:65:14:16:91:27:b5:0c:
                    f2:50:b1:61:97:44:1d:fe:51:26:9f:36:4e:f0:6b:
                    66:12:64:92:fb:ed:0c:cd:29:e4:6e:13:b1:69:80:
                    73:35:1f:b5:ef:e0:97:e4:f9:04:7a:3e:b3:96:17:
                    46:dd:de:8b:a3:59:58:a9:0d:c3:d0:a2:4b:81:2a:
                    dd:90:38:63:72:72:c3:65:12:8a:9a:f7:07:ab:d7:
                    bc:42:6e:c4:20:f4:78:2a:76:6d:0b:d4:6b:8f:a7:
                    bf:10:16:d4:bd:0c:04:42:32:2f:7e:d0:a5:d3:f8:
                    ab:59:02:00:5b:27:ad:e1:9e:98:cc:5d:23:5e:41:
                    c7:f7:4a:3c:b8:22:65:c3:75:22:42:5e:ab:4a:66:
                    da:cd:c6:42:ab:6c:12:1c:b2:b2:d2:45:ba:49:f4:
                    83:0a:73:94:96:df:d2:3e:9e:e5:0a:fa:d1:04:f6:
                    df:74:a5:a6:41:fe:25:3b:42:4c:fa:e6:94:54:06:
                    28:ad:4c:d1:12:57:66:6c:c6:62:08:47:6a:c2:66:
                    3b:3c:4c:d8:18:dc:c9:fa:9c:71:2a:db:3e:4c:e6:
                    b3:9f:be:f2:47:72:34:6b:3e:2f:72:26:93:cf:0d:
                    01:9b:de:62:38:c2:f1:67:cd:dd:26:46:1e:18:e0:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:B8:2C:AE:AC:5A:4B:34:6F:F8:54:BC:D5:7D:4B:2B:F6:84:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4c8b1866-7874-3661-b51f-11e513b12a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.195.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:54:78:90:65:7c:af:ec:cd:fb:19:c4:22:ad:d0:07:89:6a:
         f5:d3:b8:3a:b9:0c:8d:06:1f:3e:37:fa:94:e6:3a:3b:b5:69:
         4f:22:18:8c:67:83:1e:3b:da:83:c7:dd:0f:e2:d8:60:f7:4f:
         a3:1f:68:ab:aa:1a:b4:f0:e9:9a:c2:bd:d3:14:a8:7a:75:c2:
         b0:0d:6b:af:88:61:32:27:7b:ea:a2:19:fb:46:8e:30:34:35:
         55:53:13:43:3b:f3:73:b1:68:d2:ab:84:4c:9a:ca:07:f3:13:
         97:df:7a:77:13:03:bd:62:b0:9f:60:f6:f9:1e:99:8c:51:0f:
         e3:92:b2:d6:30:38:37:8f:3b:21:fb:30:d4:d2:85:a3:cc:3f:
         57:e3:87:5f:3f:bc:e3:9b:d6:29:4f:00:e2:d8:f5:04:ed:6a:
         d6:c3:e3:00:5e:00:63:7c:81:ec:71:a0:86:12:bf:8a:6e:a3:
         99:84:50:1d:6c:60:64:4d:56:e6:73:bf:56:e1:3c:85:b7:34:
         06:ca:f9:ef:ec:5a:be:1a:ef:19:eb:68:3d:19:77:d5:77:a4:
         15:4c:d2:95:2a:75:e8:2d:e7:ad:7d:51:9a:2c:e3:1d:96:0f:
         5e:e7:76:ac:5e:f6:67:12:95:cd:eb:a6:bd:48:55:d3:d4:89:
         3e:75:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----