Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa
File:                     1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa (raw, json)
Hash identifier:          Y7T+UWNzehwVxySXAZSRW5810qxbd8tm9b10Rl1h2sQ=
Subject key identifier:   40:7B:24:62:6E:5B:E0:26:59:74:F3:3A:76:42:02:46:AE:B1:E5:30
Certificate issuer:       /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial:       010D0C9F432858437ED0DB2254EB5A7E10A72000
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa
Signing time:             Mon 09 Oct 2023 18:24:52 +0000
ROA not before:           Mon 09 Oct 2023 18:24:52 +0000
ROA not after:            Sun 07 Jan 2024 19:24:52 +0000
asID:                     1239
IP address blocks:        104.171.22.0/24 maxlen: 24
                          104.171.23.0/24 maxlen: 24
                          104.171.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:d0:db:22:54:eb:5a:7e:10:a7:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
        Validity
            Not Before: Oct  9 18:24:52 2023 GMT
            Not After : Jan  7 19:24:52 2024 GMT
        Subject: CN=c70449f4-5f8f-410a-93f5-ee0c74ea8cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:58:d4:6c:16:b5:01:38:65:56:32:db:cd:
                    ca:81:6b:b2:01:12:f9:95:5f:ff:40:a8:66:27:5b:
                    e5:22:c5:3f:56:76:fa:15:32:4b:80:17:07:29:a8:
                    bf:2b:03:55:ef:44:46:3c:e8:2d:d7:2c:f7:16:a3:
                    5e:98:0d:67:a2:6a:9e:ea:7b:b7:09:4f:03:a4:11:
                    be:9a:95:90:28:df:ff:eb:cb:26:0e:aa:74:ef:c2:
                    e0:58:23:30:80:3d:56:c9:8f:9b:81:72:5b:d1:53:
                    c4:bf:6c:56:cc:5c:40:05:34:9d:a4:c9:99:76:0c:
                    04:3d:57:69:97:f2:25:45:e2:96:e3:6a:76:d0:e9:
                    ca:4e:45:06:45:2f:ae:8e:8c:09:e8:5a:92:84:91:
                    3c:cb:ef:ef:95:a0:de:bd:9b:6f:99:50:d9:44:b9:
                    cf:2e:4e:bb:30:b6:7a:82:ce:1a:05:6c:ef:8c:a5:
                    2d:f2:80:22:43:25:94:d8:5b:28:36:da:70:6e:78:
                    0d:da:9a:33:c6:fe:cc:6a:92:c6:80:85:af:a3:79:
                    63:3f:13:dc:dc:4d:5d:5b:af:2e:ac:88:29:65:25:
                    ac:46:3f:65:5a:98:f5:45:ea:50:96:a7:28:48:a3:
                    30:40:1c:f3:03:89:54:01:6c:73:39:38:e5:0f:02:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7B:24:62:6E:5B:E0:26:59:74:F3:3A:76:42:02:46:AE:B1:E5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1e45ef88-50c4-30ea-ab97-b6f7b8567ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl

            X509v3 Authority Key Identifier:
                keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.22.0-104.171.24.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:71:64:bd:28:65:cd:45:35:7d:0d:de:64:0d:83:1b:71:
         d5:77:be:18:5f:5b:3f:c6:90:2a:5e:0b:f2:48:3b:ec:bc:bd:
         41:af:3d:2f:a4:bb:27:1d:80:84:2d:58:f3:5b:0a:eb:8c:8f:
         e8:8e:a5:d5:58:85:2d:e6:2c:9d:fb:5c:4d:c8:40:f1:cc:f5:
         3b:62:a3:8d:0e:98:29:22:33:df:d6:8e:fc:9d:13:81:c1:23:
         3a:5a:72:3a:af:1c:13:d0:f8:36:58:89:7f:f8:85:47:fc:a3:
         61:39:d8:10:dc:fd:05:d9:f8:42:e6:87:30:3d:47:ae:fa:31:
         dd:77:ad:79:66:5d:1b:29:c0:dd:83:64:d9:c0:95:ff:99:1f:
         40:8b:53:41:36:5c:87:f2:c7:3b:a9:09:54:27:98:cc:d3:0f:
         de:41:58:01:96:58:db:5c:9b:24:1d:10:d0:0a:01:0e:e9:c3:
         3b:b5:43:1a:ca:09:5d:01:b9:5d:e4:31:6d:0f:ba:f3:4a:87:
         86:99:3c:f8:bf:89:fd:bd:a5:bc:a8:3b:d4:ea:bb:21:f6:75:
         0f:99:f0:6a:cc:69:52:dd:71:4f:05:da:da:2a:2c:a1:8e:c2:
         7e:04:d7:c8:91:a6:d5:61:ea:4a:32:bc:48:82:f6:a4:cc:0e:
         ea:89:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 16:01:33 2023 by rpki-client on console-ams.rpki-client.org