Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/e0108d7e-d53c-3aef-8665-67e41ea97d5f.roa
File:                     e0108d7e-d53c-3aef-8665-67e41ea97d5f.roa (raw, json)
Hash identifier:          7ED3RXSzSGdegwwvALhvkjRBRzGyPrnyhM9lSURuOlQ=
Subject key identifier:   0E:C9:FE:BD:A4:B2:F7:C8:3E:E8:D5:74:F2:6F:0B:D5:56:5B:F6:C1
Certificate issuer:       /CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
Certificate serial:       010D0C9F43285845D8C3BE5FAAB38BC54F6179E0
Authority key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/e0108d7e-d53c-3aef-8665-67e41ea97d5f.roa
Signing time:             Sun 12 May 2024 09:15:05 +0000
ROA not before:           Sun 12 May 2024 09:15:05 +0000
ROA not after:            Sat 10 Aug 2024 09:15:05 +0000
asID:                     26383
IP address blocks:        23.177.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 02:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d8:c3:be:5f:aa:b3:8b:c5:4f:61:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
        Validity
            Not Before: May 12 09:15:05 2024 GMT
            Not After : Aug 10 09:15:05 2024 GMT
        Subject: CN=7fd75ed5-3c50-4c57-8fff-5d8999df67cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:91:07:63:0f:a8:b6:b7:52:b2:c2:47:1d:
                    40:bd:3d:91:a1:e3:34:3f:88:75:9b:42:d5:bc:29:
                    27:30:2b:39:d5:bd:94:79:9a:01:08:65:d4:af:c0:
                    85:07:ba:78:c8:61:ef:1a:54:c0:ee:51:70:fa:79:
                    00:19:3e:d5:13:ac:17:93:01:82:24:c5:c4:fe:13:
                    8b:ed:26:cd:68:80:84:92:65:55:e6:cb:a4:1e:92:
                    78:ce:ca:1c:88:65:fb:7a:90:2c:54:6f:68:fd:30:
                    3c:9d:af:93:d3:bf:f5:1c:87:c3:80:79:bf:8e:a9:
                    6e:c2:d7:8f:ce:7d:c1:d4:6b:56:cd:54:0a:c5:ad:
                    a1:e0:8a:69:d5:5d:a3:f2:e1:d6:0f:15:ab:3c:ac:
                    5c:58:f9:16:1a:84:47:92:d5:a7:03:97:ae:6b:e7:
                    e3:3a:6d:29:89:57:27:e9:0c:14:6d:c3:b2:13:f9:
                    16:c5:47:9e:b8:b2:a6:50:a7:01:83:c9:8b:e3:57:
                    e7:3f:91:22:58:12:8e:16:6d:32:6b:c5:18:c3:43:
                    e6:b4:6f:fa:e5:d9:f5:9b:7b:84:a9:56:8d:5c:63:
                    6a:70:c9:81:c5:47:6d:41:f7:9a:8e:86:aa:cd:62:
                    63:00:f5:04:b4:73:4b:89:18:2d:f2:80:da:0f:4f:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:FE:BD:A4:B2:F7:C8:3E:E8:D5:74:F2:6F:0B:D5:56:5B:F6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/e0108d7e-d53c-3aef-8665-67e41ea97d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:cc:5f:7b:97:26:d9:4f:a1:14:81:32:08:87:48:e3:a3:
         ef:0a:c5:ce:0b:69:b7:28:f2:e0:e6:0e:11:62:ce:f3:f4:94:
         5f:6d:12:a6:f0:1a:6b:b3:d8:ec:e6:c6:af:a0:e3:38:7c:9b:
         cd:f7:08:19:26:66:6e:02:79:0b:f8:00:2f:07:79:47:da:f4:
         e2:1d:43:ed:f7:4f:f4:f3:94:7f:a3:fd:1b:48:ce:2b:9d:5a:
         a3:00:b7:e4:9c:af:54:8c:1e:2e:1a:4b:f0:8e:c6:ae:35:81:
         b9:5a:3b:3b:3f:db:98:f2:c7:b4:bb:54:a8:38:6d:21:97:51:
         ad:73:95:dc:72:21:55:44:4d:f4:ef:6f:29:d2:a1:03:5b:6b:
         85:d3:c4:75:81:8b:6c:cf:e6:71:d4:5d:4f:4b:15:75:1f:33:
         af:54:ed:64:76:56:9b:f8:97:6d:3b:e8:78:84:31:d0:50:00:
         da:63:c0:0c:b4:ef:47:75:b0:5d:3d:76:ab:1c:71:85:4b:a9:
         ce:4f:39:cd:70:8e:10:fe:6a:17:7a:69:40:64:34:22:92:e4:
         b8:67:b5:dc:ab:19:81:2c:92:93:85:97:40:de:69:dd:67:eb:
         2e:08:bc:a0:fb:83:82:74:c7:42:57:b6:1e:f8:0b:b9:f0:a8:
         3a:9e:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----