Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9ba8874a-6fc6-356e-a5e1-9cb04dea0673.roa
File:                     9ba8874a-6fc6-356e-a5e1-9cb04dea0673.roa (raw, json)
Hash identifier:          RpDKbh4i4AhA9y9ay5YIMsW2RxUC+Qrv8xMqfjUJl1E=
Subject key identifier:   1B:F5:6A:53:67:1B:59:B0:DC:C8:2C:DF:12:86:1A:8B:28:86:AE:14
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EE658C3A6540B2662E5F40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9ba8874a-6fc6-356e-a5e1-9cb04dea0673.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:65:8c:3a:65:40:b2:66:2e:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7dd5d554-48da-4a85-9219-bf1c1f3b7aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:af:8a:19:ff:d8:c9:78:5f:94:6b:c5:4d:
                    96:ee:54:b7:f8:bc:94:c4:d6:b0:21:b4:24:6b:4c:
                    e9:25:9e:4c:3b:34:ce:f0:b4:c9:fa:df:4a:0b:1c:
                    6e:78:55:1b:8b:f6:ff:1f:68:d7:7c:23:26:a8:46:
                    da:cf:59:7e:6d:ce:08:75:54:dd:b1:27:e3:7b:61:
                    e2:f6:42:1c:8d:bf:c8:cd:f8:d6:c0:be:0d:51:03:
                    d2:d2:5a:d6:ec:ae:f6:36:0e:8c:9d:4a:f9:74:34:
                    33:fe:2a:a4:10:2b:82:90:6a:36:e9:22:78:d0:d7:
                    a0:d5:62:c8:e6:9a:fd:00:2d:8b:30:0c:a4:2c:4f:
                    61:98:ba:1f:a2:98:ef:23:e8:e0:0f:c1:73:94:26:
                    56:86:05:f5:3a:28:92:b0:e9:2c:2b:1e:c9:6d:9e:
                    8d:eb:be:92:40:c5:3d:cc:f2:6e:18:40:c2:2b:2f:
                    84:0b:f1:ab:e3:a2:3d:8d:27:87:48:b3:6f:77:3f:
                    92:48:79:b2:3e:de:fc:3b:d1:cc:83:5a:7b:67:ac:
                    89:70:13:89:c9:b1:4f:44:d6:0b:f3:67:28:b5:cc:
                    89:41:f9:46:bb:36:b1:0b:bc:14:2c:41:a1:3f:d2:
                    9b:ef:0b:16:fa:67:fa:0f:8b:33:8e:70:9a:6d:99:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:6A:53:67:1B:59:B0:DC:C8:2C:DF:12:86:1A:8B:28:86:AE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9ba8874a-6fc6-356e-a5e1-9cb04dea0673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:31:c6:0e:39:87:1e:cc:30:4e:11:a5:f6:15:5c:fe:b6:2e:
         db:54:da:82:7b:41:4b:18:6a:fe:95:95:4f:1e:51:3a:1b:92:
         f5:47:dc:d9:4c:d6:b0:b5:41:17:9c:fb:32:a8:db:60:60:3c:
         07:23:8b:d7:3f:96:c4:e0:b1:08:ea:81:ea:3b:db:e5:bb:dc:
         6e:5b:55:5d:b1:fa:70:52:44:05:bd:f4:a3:5d:9d:54:4c:82:
         d1:03:3a:38:fd:45:d7:82:be:1c:0e:9c:e4:8b:89:f4:81:97:
         39:60:a2:9b:ac:c0:92:01:46:71:5b:2c:70:d6:5f:96:75:f1:
         a1:13:96:cf:a0:71:f9:6c:f5:20:08:44:a4:37:de:ca:7e:8c:
         5c:5c:a8:73:d8:92:e0:12:77:54:36:76:ea:45:52:34:40:b9:
         06:68:79:fc:2d:3f:b8:5b:8b:5e:2b:79:64:89:18:0b:ad:c6:
         51:40:cf:a0:3a:19:2c:db:8b:57:77:87:0e:2e:98:67:82:c6:
         ac:90:6c:28:64:13:3b:a7:37:b1:49:7f:2b:04:b3:25:f0:20:
         a0:f7:85:31:3b:29:16:d6:30:cc:82:b1:e2:15:62:10:61:6b:
         da:48:a6:4b:fb:2f:14:9b:de:e3:9e:31:16:5e:0a:0f:5c:57:
         14:37:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org