Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6619f711-beb1-3233-af0d-a240d3bf50c5.roa
File:                     6619f711-beb1-3233-af0d-a240d3bf50c5.roa (raw, json)
Hash identifier:          mm+KqSbxUD5uEsTJpWBNmxYYC0oZGTm6aLt5yOH7Xc8=
Subject key identifier:   AD:9A:59:51:42:19:66:03:A7:C2:14:6D:2F:2D:B4:41:09:D5:F0:5C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A166C453F7AC642441B9F80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6619f711-beb1-3233-af0d-a240d3bf50c5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:6c:45:3f:7a:c6:42:44:1b:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fd3e5dd4-8be3-401d-a12b-4a62fb8f7c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:a1:b0:b5:2c:f7:83:49:aa:3b:df:fa:b3:
                    dc:6a:bc:bf:c4:02:0c:37:77:26:64:6d:30:a7:f1:
                    34:90:3d:6d:4f:36:11:e1:82:cf:a1:10:de:1f:c8:
                    b2:ed:de:9d:f1:12:ca:98:d3:5e:5e:a4:bc:8e:63:
                    33:a7:ab:c9:9a:97:59:a9:dc:f1:92:a2:99:84:5c:
                    1f:f9:2a:22:c6:47:af:d5:52:c3:71:0c:35:9c:b8:
                    b0:d2:b4:b4:cb:f8:4c:a6:0d:82:24:ff:da:39:68:
                    b3:4c:bf:ed:cf:2e:3a:5c:3b:26:a1:22:bb:89:b0:
                    86:69:f1:b6:f5:06:20:69:25:3b:28:77:2e:4e:6c:
                    59:03:5f:2f:78:14:9d:01:e3:01:b8:f4:4f:ba:4a:
                    dd:b6:5d:dd:2e:81:56:0b:32:d9:6a:c5:33:8a:79:
                    1a:0b:7a:d6:ff:7b:b0:c9:a9:3d:8b:64:6d:c9:f6:
                    39:bb:0c:52:f5:99:dc:30:a1:ec:8e:b4:31:73:eb:
                    86:e1:84:af:8a:33:e1:d4:aa:ce:0f:7e:cd:25:ee:
                    ab:61:19:fc:9a:ac:f9:7e:ba:33:9e:c0:a9:81:76:
                    79:a7:49:e2:0f:a1:f1:c7:47:ab:19:0b:cd:c7:b0:
                    6b:0e:4a:5f:18:8f:5d:8c:69:0f:a4:5b:70:ba:1f:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:59:51:42:19:66:03:A7:C2:14:6D:2F:2D:B4:41:09:D5:F0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6619f711-beb1-3233-af0d-a240d3bf50c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:df:e1:8b:b3:ae:24:85:81:64:08:cc:41:5e:b5:dd:04:
         ee:32:a2:25:ef:ad:69:ee:53:12:f4:8c:8c:d0:6f:ef:f7:16:
         f2:29:7f:ff:1c:db:30:cd:4c:4d:a5:36:60:77:11:fe:99:d1:
         02:13:a0:72:b7:25:6a:ff:d1:30:e0:e7:7c:d5:0e:7d:e7:3c:
         e7:4a:8b:65:23:19:6b:1d:7c:eb:f8:7e:06:18:aa:3f:71:3f:
         d4:f1:97:33:07:3b:df:6e:76:88:17:39:ec:06:42:32:69:f1:
         44:f7:35:ba:98:34:dd:0c:96:51:fa:a7:6d:e9:ba:c5:40:93:
         64:c8:20:84:ff:58:86:81:bd:c3:2c:4b:8b:e5:ea:32:8d:ce:
         b3:d9:c1:5f:6a:64:1e:5b:aa:c5:83:f4:d6:2f:cc:32:42:df:
         2b:d9:06:77:4b:bf:e4:3b:06:89:4a:b3:a8:cc:ab:d0:64:3a:
         bb:1b:d9:a8:2f:f0:4a:86:46:40:5e:37:9e:92:89:4b:00:4f:
         fe:d2:22:6b:0c:ba:48:16:3e:d4:e6:de:e4:c2:63:87:95:df:
         0e:02:5a:8e:cb:b6:95:31:64:45:52:89:33:e9:97:99:cf:ce:
         54:bf:b2:ea:d4:98:51:48:6e:32:5c:5f:45:0c:81:44:7d:bf:
         10:78:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----