Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07755061-5295-32b4-bff5-cd7123060d23.roa
File:                     07755061-5295-32b4-bff5-cd7123060d23.roa (raw, json)
Hash identifier:          hZJVQLYrmJTNKS2NLjvncWebM97H5/p8OXMSCiBx8zY=
Subject key identifier:   00:50:9B:3B:20:87:D3:AC:78:6F:AC:E5:D4:58:8A:9F:7A:AB:7A:2C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0E4039E88B64109F929000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07755061-5295-32b4-bff5-cd7123060d23.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        66.102.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:40:39:e8:8b:64:10:9f:92:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8df6ac83-8fd1-4e8b-a2fc-613ddefc3d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:60:c6:4c:c0:e5:d4:35:dc:13:a3:a0:2f:
                    58:d4:d2:30:a5:3e:ff:38:1d:3d:74:7d:62:46:3a:
                    9d:fc:ef:7c:fe:52:f4:c2:65:0f:11:37:86:06:d3:
                    cc:42:5d:de:1e:c3:67:6e:01:94:71:5e:85:12:82:
                    d1:b0:27:a7:c3:7a:45:d4:32:fa:bb:35:5b:ef:fe:
                    1b:17:12:20:5d:9f:97:37:fa:46:01:24:8b:5d:b8:
                    3b:2f:66:fa:3d:06:f4:ff:af:0f:54:9e:19:9a:fe:
                    57:8e:89:8e:27:95:cd:0f:9b:99:9f:26:f3:df:a3:
                    80:f9:87:2e:b2:11:2b:d0:fb:80:08:78:b0:a6:05:
                    0a:4c:73:ac:ee:70:f4:b1:f0:d7:2c:c4:91:a9:54:
                    c6:45:16:4d:84:f2:01:e0:72:fc:91:61:8a:5a:9b:
                    21:4d:5d:3c:c2:84:b2:65:22:1f:39:a8:4d:3d:3e:
                    37:ed:83:f1:a8:c3:5d:97:68:93:69:af:73:46:20:
                    93:90:4e:13:fa:bc:3f:fd:4f:5a:47:19:4d:96:a5:
                    9b:ee:e1:06:97:24:ff:d2:9e:78:9d:fe:2a:1c:b5:
                    8e:79:e5:54:6f:7c:cf:70:ed:f0:f4:70:38:a2:86:
                    6b:74:ae:19:64:fc:29:c6:95:ad:aa:88:79:71:dc:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:9B:3B:20:87:D3:AC:78:6F:AC:E5:D4:58:8A:9F:7A:AB:7A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07755061-5295-32b4-bff5-cd7123060d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:36:8a:3b:27:66:b7:bf:f0:33:81:4f:a1:31:22:b3:4a:
         60:ff:f8:bd:a2:e9:6c:df:02:9d:33:29:d9:3d:90:85:03:a4:
         ae:a3:8c:ee:f3:0d:15:dc:ec:e9:b3:64:e9:0a:d4:ca:bd:99:
         9e:27:43:65:1b:5a:1a:ff:45:ca:b2:da:68:14:6e:d4:f6:a1:
         16:bc:a0:39:10:50:5d:00:f5:d9:7a:c8:d7:79:e4:21:67:b7:
         a2:f5:f8:8b:d2:77:19:45:18:20:5e:8b:c0:d3:bc:65:1d:78:
         5b:d8:02:de:27:69:67:ba:42:32:ca:89:cf:ae:55:ab:15:e0:
         3b:5c:57:ca:47:1b:7d:be:80:61:e9:32:0d:2a:0d:ae:8d:ec:
         2f:c6:4a:5e:dd:9d:cf:ef:2c:b0:7c:a3:46:86:9f:2e:e2:f4:
         c4:66:be:11:7e:33:7c:ab:17:df:10:bc:13:bf:aa:7d:a7:f0:
         c6:50:b6:97:07:71:c4:2f:94:9f:14:1a:db:55:1c:3b:ef:a6:
         16:c0:4c:6b:a8:bb:9e:0f:de:d1:31:17:2c:04:fd:a6:44:10:
         98:64:2e:19:8b:1a:03:7d:3d:db:c5:c5:bb:0c:d2:82:2b:1c:
         0b:31:ec:5a:2a:6b:32:ad:ba:6f:93:92:18:fc:1f:33:e5:a2:
         c8:42:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----