Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dc0f7fb2-e584-3db0-a632-a10f80bb497c.roa
File:                     dc0f7fb2-e584-3db0-a632-a10f80bb497c.roa (raw, json)
Hash identifier:          iKz/tUYjmNmw58fL0q5mQdPi8wDW3xHYsjUaxoDtGSc=
Subject key identifier:   69:7F:87:52:25:E2:AB:EE:14:AA:07:1A:92:AA:EF:54:0F:00:DC:39
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858430A0D0242BC694B899B4E3780
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dc0f7fb2-e584-3db0-a632-a10f80bb497c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:02:42:bc:69:4b:89:9b:4e:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0b4b0c13-6b3b-4724-be5f-a7e18ce35b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:58:dd:f8:bc:e7:e2:f3:22:ca:03:4e:bd:
                    9b:67:99:37:ad:77:98:c7:c4:65:7d:08:b0:b6:9d:
                    49:9d:0b:b0:83:25:30:0d:cf:30:1c:83:ee:df:51:
                    15:3f:61:0d:54:76:d1:b1:c2:9f:e3:7a:89:df:fd:
                    37:13:73:09:9d:ce:26:0e:b2:65:c3:89:e1:bb:67:
                    9b:c9:51:7f:0a:b2:63:8f:f1:c9:f7:d3:db:07:2c:
                    09:ab:e9:47:93:76:1c:bb:38:ec:65:74:18:75:20:
                    63:bb:9e:e4:bd:6a:14:96:5c:8f:90:b8:1d:c5:50:
                    d9:07:cc:94:90:02:0c:ec:7a:b8:b9:ae:29:2e:dd:
                    a2:1d:b7:36:35:5a:05:e0:4e:63:e7:6a:d3:df:c4:
                    26:f3:5d:9f:de:63:f9:1d:fe:6a:cc:aa:b3:46:29:
                    ee:ed:6c:64:65:fe:94:9c:d4:3d:cd:b5:bf:38:90:
                    e2:ae:21:e9:b8:c2:f2:ea:77:c6:29:3c:90:55:b0:
                    07:e9:fc:4b:c4:5e:32:58:02:78:5a:46:d8:c3:65:
                    6a:7f:98:63:da:0a:dc:bc:58:d6:91:71:fe:e1:5d:
                    ec:8b:0e:5f:d4:2e:08:92:83:74:c5:18:f5:87:9f:
                    7c:0a:05:fd:39:93:a2:e6:d8:49:62:0e:9a:a5:e8:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:87:52:25:E2:AB:EE:14:AA:07:1A:92:AA:EF:54:0F:00:DC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dc0f7fb2-e584-3db0-a632-a10f80bb497c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:da:79:3b:32:9d:e9:95:e0:11:85:0e:93:81:dc:0c:78:
         41:27:3f:c7:89:b5:65:51:33:17:c3:7d:bc:22:a4:a8:bd:b1:
         2b:64:d9:32:05:f1:66:94:09:05:1e:07:9f:cd:53:62:31:a0:
         b8:9a:e0:db:27:26:4a:e2:6e:b5:68:b1:84:00:87:fe:ef:29:
         37:19:89:b2:10:b3:bc:cc:4f:9f:4a:b3:94:6d:b8:9e:6f:5a:
         e7:4b:a8:1f:f9:0d:7a:7b:30:56:11:bb:b8:09:f7:f2:33:e3:
         82:81:19:2e:29:0a:c3:ce:36:7d:68:90:a1:b8:38:aa:93:38:
         36:fa:c3:0f:87:39:41:9e:ec:5c:6b:f8:2d:5d:5a:9d:a0:c6:
         8e:07:4b:fc:f8:dd:08:85:f1:24:d4:90:60:10:e1:4a:9b:1d:
         7c:3b:59:75:03:70:8b:8b:6c:1a:80:a3:5b:69:b6:3c:c2:c0:
         02:d8:e2:17:b1:a5:c7:44:68:40:73:80:bd:5b:40:81:80:26:
         e3:d5:cc:fc:a4:48:1d:2f:42:be:04:ca:93:70:cd:60:4d:a2:
         49:14:cf:c9:b4:b3:44:34:3f:93:5e:bb:58:3d:f0:50:a5:df:
         c3:e0:d4:40:03:5e:68:59:ee:25:0d:0d:20:e3:cc:e8:7d:aa:
         d9:73:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org