Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/99cd7e16-fd2f-3372-a340-a8b4fc8c44d7.roa
File:                     99cd7e16-fd2f-3372-a340-a8b4fc8c44d7.roa (raw, json)
Hash identifier:          9LmvqDiXtuUQQCCVBc5s/Q7JghSNdSHA/0H4dnIGNNM=
Subject key identifier:   13:F3:07:92:6B:4D:4D:C9:EC:7E:88:32:B4:4B:02:CD:10:A9:DA:44
Certificate issuer:       /CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e
Certificate serial:       010D0C9F43285845D125174B449AD600F5BD83C0
Authority key identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/99cd7e16-fd2f-3372-a340-a8b4fc8c44d7.roa
Signing time:             Thu 09 May 2024 15:44:45 +0000
ROA not before:           Thu 09 May 2024 15:44:45 +0000
ROA not after:            Wed 07 Aug 2024 15:44:45 +0000
asID:                     7018
IP address blocks:        23.177.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 02:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:25:17:4b:44:9a:d6:00:f5:bd:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e
        Validity
            Not Before: May  9 15:44:45 2024 GMT
            Not After : Aug  7 15:44:45 2024 GMT
        Subject: CN=98dc30c7-7aed-401d-ae2a-ad5b6854e101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:ff:db:f1:c9:a4:92:6d:b9:21:e0:07:57:
                    20:95:ba:5a:c7:32:37:e5:9b:82:8f:31:8f:91:4c:
                    7e:4b:d8:c0:8d:5c:ab:68:0e:05:5e:d3:97:7d:6c:
                    c5:4f:54:ed:73:e3:d9:67:21:24:f4:3f:b7:42:eb:
                    a4:2d:81:a0:d8:f5:d9:71:ed:a3:01:50:ed:60:a1:
                    b2:13:81:c8:d7:55:4f:99:aa:ac:69:af:62:d8:7c:
                    8d:6c:7c:86:5e:f5:91:aa:12:8e:bd:20:b9:f9:9c:
                    b6:77:94:86:fe:37:2b:52:55:3d:52:16:49:32:80:
                    9d:78:87:e8:40:7b:18:62:1a:a8:25:1a:04:f7:58:
                    07:79:1a:73:dd:79:55:79:62:ce:2a:82:02:cd:a5:
                    ec:4f:94:dd:a6:c6:97:1f:8b:f9:ce:82:35:08:e4:
                    1d:ad:82:ec:80:9d:8a:20:a7:f2:72:4a:c3:69:6c:
                    2a:b3:e7:90:0d:80:84:b9:1b:2f:45:90:83:cd:5c:
                    9c:ed:60:e0:de:6c:dc:f8:91:b0:1c:32:ca:fd:9f:
                    ce:42:12:d6:a1:ad:c8:80:ca:4e:5d:18:b9:d6:70:
                    89:08:30:e2:22:7d:9d:46:2b:93:74:00:f0:1e:5b:
                    98:da:01:43:38:79:47:28:32:99:e0:78:f0:56:ec:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:07:92:6B:4D:4D:C9:EC:7E:88:32:B4:4B:02:CD:10:A9:DA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/99cd7e16-fd2f-3372-a340-a8b4fc8c44d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:c1:2c:01:35:57:8b:b9:fd:23:b4:68:6c:ef:9d:ff:f2:
         05:04:2c:dc:1f:dc:fb:18:0e:89:06:a8:d6:b3:15:33:81:e7:
         7d:a6:89:14:c5:f4:ff:1c:4e:e0:b8:ab:d3:9e:5a:8f:ed:8d:
         5b:a7:e1:0a:c4:c2:50:f8:5f:ab:c8:24:60:4f:b9:14:b9:10:
         71:8c:7f:f5:bd:a1:f3:14:d1:6e:c9:d9:28:77:2c:d0:b1:d3:
         9c:f0:e4:2e:1f:13:0f:0d:74:fd:b1:2d:af:bd:f5:26:18:74:
         02:4b:58:ea:f8:1e:cb:61:98:e0:b0:0d:05:b8:5f:b7:67:8d:
         23:b5:5d:b6:64:36:a1:54:0d:82:8e:e3:06:d1:3b:ee:28:90:
         55:1f:c9:ab:ee:71:85:63:12:ac:ee:6b:d7:7a:70:4c:0d:36:
         ec:36:2f:c7:ef:c6:36:33:86:e6:1d:e3:c8:f2:4f:a8:36:44:
         90:17:fd:bf:6e:20:ef:d6:eb:8a:ce:62:9a:b8:12:d4:37:d7:
         ae:50:6c:1d:bc:50:07:e3:9b:97:64:e9:27:48:2b:a4:16:67:
         f5:92:53:ff:61:70:8a:77:37:96:1b:16:bb:74:70:ce:34:31:
         e9:2a:75:bd:5c:22:33:89:46:92:65:13:50:82:db:51:1d:7f:
         76:1c:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 04:59:59 2024 by rpki-client on console-ams.rpki-client.org