Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/4032ffec-28f5-30e4-a6c0-a903d4519bba.roa
File:                     4032ffec-28f5-30e4-a6c0-a903d4519bba.roa (raw, json)
Hash identifier:          3roNwIf1nqv1bLU/rpe1jnK8pA2HJULyjQiMmldis28=
Subject key identifier:   83:87:ED:06:44:F8:45:28:1C:7B:9C:6F:A7:A0:E8:93:48:6B:4D:1C
Certificate issuer:       /CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
Certificate serial:       010D0C9F43285845E183C6819705A3749131C580
Authority key identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/4032ffec-28f5-30e4-a6c0-a903d4519bba.roa
Signing time:             Wed 15 May 2024 12:28:28 +0000
ROA not before:           Wed 15 May 2024 12:28:28 +0000
ROA not after:            Tue 13 Aug 2024 12:28:28 +0000
asID:                     26383
IP address blocks:        23.177.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 02:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:83:c6:81:97:05:a3:74:91:31:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
        Validity
            Not Before: May 15 12:28:28 2024 GMT
            Not After : Aug 13 12:28:28 2024 GMT
        Subject: CN=46ac8c68-cb0e-440a-a004-9f63f2fad067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:4d:65:1e:03:ff:6d:82:b7:c5:db:e0:f9:
                    77:33:57:62:a1:2d:c9:2d:bc:43:32:2f:21:10:53:
                    fc:3a:6c:67:ac:37:9f:c0:c6:c2:8f:eb:54:67:a8:
                    93:a8:c0:e3:ef:04:7b:bb:64:ca:6e:1f:a7:f7:2c:
                    c7:36:b2:3b:da:31:42:98:af:02:d7:85:97:f7:9d:
                    d6:f8:b1:38:6c:cc:0e:ba:c4:7a:69:16:25:20:03:
                    c2:94:c3:30:83:eb:03:4c:7c:50:ae:df:8a:dd:c0:
                    62:25:9b:91:ce:19:2d:57:ba:0e:36:c6:df:b0:ea:
                    1e:64:65:ea:75:f2:53:3f:40:31:41:ad:25:57:71:
                    e1:57:c3:be:99:43:b9:3e:11:f1:f7:01:0b:58:69:
                    d9:7b:35:71:c6:5a:85:02:91:cf:37:51:69:68:c9:
                    19:03:a4:1c:f8:10:3c:42:3c:1a:52:80:ba:0e:c5:
                    80:3d:35:5a:01:95:0f:97:4c:1b:94:58:60:30:95:
                    83:28:6d:7d:45:24:18:2e:24:f5:ae:ba:3d:28:37:
                    7c:36:1b:3d:b0:dc:15:aa:e9:6a:93:36:3a:99:d2:
                    78:f9:28:9e:27:23:a6:5e:4c:e1:ba:8f:cd:14:02:
                    af:6c:d2:00:94:a9:f0:1f:0b:3d:b7:76:7e:1a:cc:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:ED:06:44:F8:45:28:1C:7B:9C:6F:A7:A0:E8:93:48:6B:4D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/4032ffec-28f5-30e4-a6c0-a903d4519bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.crl

            X509v3 Authority Key Identifier:
                keyid:35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:66:18:aa:7a:7b:2f:b0:65:73:ea:bb:88:89:6a:b0:14:
         8f:15:35:9f:2f:53:c4:1b:6b:da:da:24:91:16:a8:68:d4:70:
         3f:5a:f3:c5:5f:b1:44:58:49:73:a0:fc:68:b4:80:8c:89:7f:
         90:d5:34:6e:c2:82:ba:0d:5b:b4:70:3d:27:45:1d:fe:8b:73:
         40:6e:7e:38:32:e5:fa:7b:01:94:91:72:c5:18:67:f9:7d:d7:
         13:e6:99:b4:1e:d7:21:0e:11:0b:62:43:36:36:4a:6f:17:05:
         d2:9b:9d:bb:78:cf:78:92:96:f3:cb:d7:b1:4c:56:ee:ff:13:
         54:f3:13:d8:8e:c9:e4:27:c9:e7:56:5c:14:b4:64:ae:76:77:
         61:c1:18:fe:4c:ee:c0:d9:fb:de:52:bb:2b:41:31:f9:2a:cc:
         ac:60:ff:a1:63:83:a9:7c:ab:ba:a8:a8:95:9b:11:5d:a8:7f:
         8e:23:90:e5:a1:35:c1:5b:23:59:8a:b0:65:d7:ba:d1:92:e4:
         6b:53:4b:3d:ad:52:10:d8:32:55:d9:ec:87:e5:a4:91:fc:c1:
         3e:66:f0:b6:dd:52:22:4f:83:92:33:0b:7e:46:d9:13:cb:22:
         dc:80:24:b4:e3:59:ac:4e:2a:f2:c0:4d:c3:14:e5:03:a9:74:
         d7:0a:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----