Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa
File:                     a5867d60-e434-30f1-998a-c9c427b13083.roa (raw, json)
Hash identifier:          NlJXqLwk+sfAAdmPXvuDnWQJBj58klOlMGMc1aDyA54=
Subject key identifier:   8F:1A:37:09:FF:D5:64:D7:44:37:83:49:67:FA:71:19:63:42:8B:25
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E851902BAA3C30AFA4700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        152.45.8.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:85:19:02:ba:a3:c3:0a:fa:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=19f9c930-4ec0-48e1-99ba-b432f59a0c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:9d:04:43:37:23:d2:a4:e2:57:ed:a9:d7:
                    ab:a5:93:53:3b:03:42:51:1e:a5:0c:40:42:97:fc:
                    66:36:d6:44:fd:93:5e:f5:8d:1b:7b:52:ab:37:40:
                    dd:3f:28:93:f1:a9:8c:76:85:35:9f:ec:45:c9:3a:
                    c9:6e:9f:a5:13:4d:65:f2:ac:3c:54:ae:9c:45:18:
                    c1:e8:6a:b1:d9:0f:f4:72:ff:d5:3c:fa:40:47:a5:
                    f4:9a:64:15:f2:6e:ca:60:a0:3c:7d:38:f9:af:40:
                    10:d9:cb:3d:01:de:dd:ab:c1:ff:47:77:8e:a1:ee:
                    d9:44:b4:b2:4b:41:3c:29:7d:7b:84:cc:2b:91:40:
                    0f:f4:ec:7d:45:1d:e5:d2:12:03:4e:e6:cf:7a:4c:
                    97:37:67:11:d3:5e:f1:27:ba:17:50:bf:65:29:43:
                    ce:d9:42:39:58:51:5f:e7:90:6f:f9:1f:c6:13:e0:
                    98:71:7c:c5:74:fc:bc:39:2f:f6:dd:8a:e6:2a:4f:
                    81:39:e2:ec:38:42:b8:28:d3:dd:b3:03:90:d2:53:
                    f3:0e:6b:49:b6:30:91:ef:b0:79:95:61:d6:81:2e:
                    22:48:59:8b:62:f8:f5:2c:e2:25:e3:45:f7:ba:c0:
                    39:50:43:78:1d:74:13:76:54:6c:fe:90:87:6b:ee:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:37:09:FF:D5:64:D7:44:37:83:49:67:FA:71:19:63:42:8B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:90:82:da:25:ad:03:18:2e:5d:a6:3f:9f:cd:98:76:72:13:
         72:c2:6e:46:ea:fb:ab:d5:68:a1:bf:ea:10:1a:a3:34:4e:4d:
         ab:66:74:5b:f3:a7:27:e2:ea:e4:47:92:5a:35:34:08:46:0d:
         37:5d:58:0d:3d:1d:65:a5:3e:1c:72:b1:16:5d:e3:b3:e8:e0:
         40:c2:76:03:7e:e4:f0:80:2f:41:8f:29:4b:81:99:f0:3c:1a:
         82:ac:25:58:42:53:1b:a5:db:f7:9e:d4:9d:f6:38:75:3d:06:
         e1:53:54:0b:6e:cc:b9:6c:5b:cd:11:ca:ee:9d:1c:42:7b:2e:
         17:f7:24:6f:f9:3f:7e:3a:33:28:57:74:64:57:e1:64:fd:21:
         4c:08:f5:ed:d0:e3:c2:13:b4:51:01:9f:e7:1b:1c:7f:33:02:
         f4:5d:f9:52:d7:5b:02:cc:39:fa:40:be:e6:81:6b:27:a5:35:
         08:3b:0b:33:46:08:d3:20:6a:ec:58:0b:c4:e4:5f:70:db:21:
         eb:18:e5:c6:95:38:cd:f5:93:0c:e9:18:d8:6a:55:45:5e:6f:
         11:74:10:d5:f5:04:c5:5a:50:e7:b1:08:5d:d8:a6:a2:f3:ae:
         f5:b1:2d:0c:cb:49:25:54:da:4d:25:ba:39:e3:6e:af:2f:fa:
         19:95:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----