Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/13af0ff0-25e1-3ed1-b2ee-f97e5357010f.roa
File:                     13af0ff0-25e1-3ed1-b2ee-f97e5357010f.roa (raw, json)
Hash identifier:          ldhcnZaXRHSkA2WBiW5wHu4VCylXy0K4ks20o8ZJ86k=
Subject key identifier:   7E:27:8C:91:69:EE:C5:31:EE:28:D8:D7:CF:16:33:3B:15:26:AB:D7
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A00B92CA495384EF0AC9900
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/13af0ff0-25e1-3ed1-b2ee-f97e5357010f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:00:b9:2c:a4:95:38:4e:f0:ac:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c8d10af1-713f-4415-a324-3277a839a842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:cd:76:43:d5:46:c9:1a:eb:5e:1d:6d:b6:
                    16:a9:6b:f7:13:46:05:19:0a:86:ad:80:a7:74:d4:
                    67:4b:d0:0d:b2:4d:64:10:af:64:ac:53:43:81:ec:
                    b8:a0:88:ad:f6:ac:93:cb:96:1c:33:81:70:51:20:
                    13:45:9a:85:a8:b7:c8:d6:2e:2b:33:74:5c:f5:c8:
                    3b:9e:80:c1:77:e4:24:24:58:b3:6d:c0:90:68:45:
                    40:08:33:77:39:36:66:9b:96:15:fe:b0:fe:98:83:
                    a8:2c:ed:bd:77:6b:e3:ef:f9:75:ae:08:47:66:28:
                    76:df:fb:52:af:f2:b3:f8:4b:f6:6d:61:4c:1e:3f:
                    f2:53:8a:7d:f1:db:88:4e:e8:44:be:44:94:4b:7b:
                    09:69:21:b0:c7:79:7f:c1:cb:d5:8d:26:0c:25:5c:
                    37:ba:a4:90:37:7c:ad:4c:f5:c3:32:85:11:88:05:
                    d1:94:fe:10:bf:34:3a:ae:0f:51:0d:73:b5:15:76:
                    e3:cd:9c:51:77:17:fe:68:2d:21:a1:f7:82:39:62:
                    ce:7d:2b:85:eb:7c:ba:3d:47:ff:aa:39:46:bb:5b:
                    2b:5d:94:27:71:28:17:a7:6e:de:4a:3e:42:19:c5:
                    64:c9:83:6f:74:4a:ad:ec:bd:6b:b2:4b:f7:2d:9b:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:27:8C:91:69:EE:C5:31:EE:28:D8:D7:CF:16:33:3B:15:26:AB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/13af0ff0-25e1-3ed1-b2ee-f97e5357010f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:f2:01:a8:5d:33:6f:02:b4:ba:4b:db:1b:d1:58:77:31:
         5f:59:52:8c:69:18:7a:12:d9:5d:ca:21:4e:f7:94:bf:98:b0:
         ff:25:43:1d:23:e9:16:88:3c:15:e5:ac:a9:d6:5d:5a:9d:fa:
         9a:e9:39:35:5d:0c:eb:2b:a9:cf:e7:65:09:8c:20:a8:81:ff:
         9b:4e:cb:f1:29:26:77:9b:1a:58:16:4d:51:e7:b5:70:b1:9f:
         1a:dd:f2:e6:88:85:66:8e:5b:d6:c8:f2:3d:f5:26:39:3b:d7:
         7a:3c:a5:09:1b:b5:51:73:7c:13:63:8f:67:e0:60:2b:53:e8:
         14:ce:4a:57:bf:ab:0b:1e:1b:a6:b1:9d:93:a4:95:71:5f:f8:
         1d:f2:c6:0a:b2:07:79:bd:a4:bd:d9:1f:b0:cb:b6:c7:fd:d8:
         a6:1a:99:28:12:4a:80:ee:ad:ea:2e:af:25:29:63:f4:1f:6b:
         30:ce:05:13:7e:bc:4d:1d:df:b7:66:53:2c:01:12:cb:9b:f7:
         d4:ca:1f:a2:39:82:26:36:ae:14:9b:7a:47:dd:48:1a:89:2b:
         f6:8d:e0:86:3f:aa:0f:e6:e7:3f:5e:72:08:44:9f:cd:fa:4b:
         e7:aa:27:7b:0a:4e:ee:8e:c2:15:2f:b6:c4:bb:50:c7:ee:23:
         20:f2:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org