Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1c31a819-a2ff-35bc-b596-edb373af1f47.roa
File:                     1c31a819-a2ff-35bc-b596-edb373af1f47.roa (raw, json)
Hash identifier:          l7IAZYfvi80rUGaq2gj1TMLegFYj3z7FHQjyo6XT/Hg=
Subject key identifier:   05:73:32:9F:C0:31:D0:06:ED:E5:63:63:E5:81:B6:5A:90:28:53:F1
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A12189F5D4CB104932E6C00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1c31a819-a2ff-35bc-b596-edb373af1f47.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:12:18:9f:5d:4c:b1:04:93:2e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cdcb4ecd-3732-461b-a627-0b212f4cf790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:af:a6:03:8e:74:1a:3f:20:31:58:3a:0f:
                    13:cf:84:6d:4c:5b:7b:db:aa:e1:b2:f1:d5:d8:21:
                    2f:8a:0a:28:54:0b:83:0b:2f:19:5d:33:52:f4:03:
                    0d:97:b1:44:57:11:ca:42:0f:73:84:d3:e8:21:b2:
                    2e:f5:c4:57:e5:63:c0:70:81:c0:a7:83:dc:3a:2d:
                    a5:de:9d:e3:87:47:36:f9:da:a0:75:ee:40:d7:81:
                    2b:b2:64:2d:ea:79:4f:97:9d:77:5e:36:af:6c:10:
                    31:fe:a4:d7:7e:4c:fa:61:04:28:6d:f1:0f:40:5c:
                    80:83:c2:a0:2d:06:97:4d:67:d8:9b:23:ef:ac:d4:
                    04:75:78:6a:a7:e8:fc:fa:c5:6d:54:68:1a:34:ec:
                    7b:e8:ad:6b:15:6f:5b:66:82:c0:fb:09:e1:1c:cb:
                    8d:84:2e:35:6c:02:12:aa:d7:87:f3:aa:ee:2b:96:
                    9f:a5:c1:6f:55:34:7d:dd:be:c4:80:f3:82:97:17:
                    10:60:a3:e6:07:4d:76:a2:11:fe:6c:a8:d2:16:b7:
                    b5:23:f2:4f:ff:59:36:1e:7c:b8:bb:a5:b8:44:69:
                    08:2c:1f:92:ad:47:cc:5d:bb:7f:b7:72:01:d2:51:
                    0d:7f:1e:55:1e:98:de:61:a5:e3:82:92:64:ce:d3:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:32:9F:C0:31:D0:06:ED:E5:63:63:E5:81:B6:5A:90:28:53:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1c31a819-a2ff-35bc-b596-edb373af1f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:52:44:aa:64:6a:67:5d:6d:b4:2a:6c:06:dd:76:8e:28:
         58:00:60:5e:f8:f5:88:28:5b:ac:38:3d:a2:11:a2:99:2d:76:
         49:e9:bb:36:05:7d:77:8f:36:ac:bd:86:b4:44:91:54:94:3a:
         e3:ab:87:8c:77:55:45:0a:ee:59:af:a6:de:80:6b:92:f4:1a:
         a6:5d:94:55:de:2c:1c:e4:0c:5c:3c:af:58:ef:b1:41:8e:cd:
         30:ad:e2:c0:75:28:ae:e5:80:6c:e7:85:a7:f2:03:7a:e4:f1:
         9c:39:03:99:38:6c:68:ee:0b:ca:df:2f:c4:65:ae:e5:eb:46:
         6d:bc:85:0c:74:fb:63:4f:a7:60:bd:29:b4:94:99:81:05:56:
         b6:77:2a:1a:75:44:17:c1:99:cd:07:e0:f8:42:74:fe:a9:e8:
         46:c3:04:9c:db:ef:a0:4d:a7:e5:42:45:81:cc:5c:cc:c6:16:
         32:2a:9f:46:5f:90:1d:c7:93:9d:e4:59:4f:34:98:c6:01:69:
         76:ff:5e:38:5f:eb:8a:79:a8:60:39:cd:df:e9:98:a0:f1:b8:
         3e:54:93:d6:c4:b9:f7:40:d8:f7:20:3a:4f:c4:28:8f:81:93:
         68:9f:7b:10:4a:51:2c:46:e9:98:df:68:dc:1c:c3:ae:13:b9:
         40:90:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org