Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/39116513-c14b-303a-939b-32926373a21a.roa
File:                     39116513-c14b-303a-939b-32926373a21a.roa (raw, json)
Hash identifier:          YV6CKt+cJA/+0Z5eDpkgkNR6u0g9QLNSZoGu0ghGnQc=
Subject key identifier:   CD:4B:E1:88:E7:E4:76:3E:F4:40:97:64:AE:BF:20:FF:5B:AA:8C:ED
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A25776CAB7CE7ED9CDDBD00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/39116513-c14b-303a-939b-32926373a21a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:77:6c:ab:7c:e7:ed:9c:dd:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8b6d6955-3244-4a08-88ba-d0c5d959909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:59:f6:29:b8:18:e8:41:e6:5c:77:24:38:
                    1e:57:36:ee:1c:0d:d1:0f:48:bf:dc:aa:14:17:12:
                    63:f9:b4:14:f9:3d:be:2b:27:1e:35:5f:c7:f0:72:
                    c7:96:20:70:be:a1:cb:d0:82:25:25:a8:10:6d:f0:
                    45:c4:8c:8e:50:ea:e3:b0:fc:3e:91:86:8a:38:ea:
                    18:61:69:11:36:2d:29:4f:4a:fb:30:9e:76:90:2a:
                    a8:38:83:8b:f6:67:4e:ba:16:0a:c8:3a:42:94:a5:
                    0d:b6:9c:11:bd:d0:ff:c7:69:32:51:ea:79:92:30:
                    cb:96:b4:cf:c5:f0:89:18:ee:0b:0c:b6:04:4f:9c:
                    2d:9c:95:5e:c0:cd:4d:a5:8c:84:ba:4b:35:05:44:
                    3f:ee:b3:7d:f9:1d:cb:33:73:b3:8c:6b:ba:72:ca:
                    6a:d4:d2:60:89:23:55:a6:c5:5e:65:f7:0e:5b:95:
                    b2:10:4a:d2:46:ea:a8:28:00:4b:95:ba:c0:a5:50:
                    85:7c:21:a7:2b:33:d7:60:45:9a:2d:07:f7:f4:a1:
                    51:b4:fc:56:d9:4d:f1:04:26:fa:a9:3f:27:bd:7c:
                    82:33:f4:3b:d6:f5:e5:35:a9:9d:1f:ee:c5:f5:4e:
                    57:31:53:51:01:15:1c:44:e9:91:1a:ea:c0:12:4d:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4B:E1:88:E7:E4:76:3E:F4:40:97:64:AE:BF:20:FF:5B:AA:8C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/39116513-c14b-303a-939b-32926373a21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:db:00:50:d6:5b:66:d7:9a:11:b9:53:b1:9e:da:9f:09:
         71:5b:e5:36:2c:d3:3d:79:40:95:6d:ce:3b:3c:dc:7e:22:bd:
         0a:e7:77:a1:74:3b:a5:85:40:b9:e8:18:d1:28:3c:cf:5b:e2:
         cd:50:47:ff:24:95:f4:24:24:82:83:9b:05:83:1a:a3:69:9d:
         49:74:b9:5e:ea:a4:73:56:b7:c4:58:56:46:b1:6d:a3:fe:fd:
         d2:99:75:60:48:79:e8:36:43:59:cd:f7:14:76:0e:6d:01:57:
         e6:d1:a2:0a:a7:7b:77:5a:fd:67:a1:6f:47:b5:a0:23:62:12:
         81:7f:99:a3:a8:40:41:df:ef:39:83:0c:85:cd:f0:e4:be:b2:
         e3:f4:a3:09:77:83:38:e9:48:93:27:d2:87:e7:3a:38:c4:14:
         2d:e7:cb:16:28:c0:50:55:7a:80:42:37:a7:d0:09:2a:a0:eb:
         24:48:97:be:63:41:53:c4:7c:78:19:d7:5e:5f:6b:ff:1a:78:
         21:90:78:3e:33:bc:45:e1:82:e4:88:b5:49:6b:ea:f4:17:d2:
         11:06:cf:53:b7:0c:ed:1c:d1:83:02:df:3d:e4:5f:a9:f4:7e:
         0c:52:00:df:66:ee:1c:b4:5d:dc:bc:37:2a:16:b0:33:84:02:
         88:f1:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org