Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/14610aa1-bf0d-3bf1-9116-bce318ecb9dd.roa
File:                     14610aa1-bf0d-3bf1-9116-bce318ecb9dd.roa (raw, json)
Hash identifier:          YNv8TXUqpRUiQm8hKS88J+1O7JptE33dRlRxb2Kvnn0=
Subject key identifier:   6D:FF:F4:71:5E:18:60:CD:4F:57:19:AE:FC:5F:1D:2E:9F:92:42:C5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F5FB89FD5E97712E50734AF30
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/14610aa1-bf0d-3bf1-9116-bce318ecb9dd.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Sat 28 Dec 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        142.251.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5f:b8:9f:d5:e9:77:12:e5:07:34:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2024 GMT
        Subject: CN=798eb784-016d-4e70-80f3-ba8e87deebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:fc:26:d9:14:71:80:81:60:85:98:64:5c:
                    b9:fe:bf:d6:86:67:25:55:25:d8:df:69:1f:d9:7d:
                    fc:1e:cf:1a:33:05:ec:d7:3f:43:2e:55:19:a6:32:
                    cb:58:1b:b8:c6:2c:39:f8:96:fc:cb:b0:8b:27:3a:
                    ec:44:f3:38:0a:59:3e:40:fa:e5:6b:23:cb:7e:c6:
                    d2:7f:36:12:06:47:1b:0c:68:28:84:b5:ca:ee:cb:
                    70:b0:a9:e3:d9:0d:6b:1e:9e:fe:e9:3a:b7:7a:be:
                    62:e7:8e:fd:ae:6b:d5:eb:63:75:4f:ee:59:c1:10:
                    a1:c6:12:50:48:a6:f4:25:f4:7a:26:4e:15:5e:2a:
                    cb:b5:8c:ba:3b:ee:a8:65:ff:42:5a:16:50:40:75:
                    e2:8e:23:61:59:83:10:11:f9:4b:10:54:8e:67:78:
                    41:b3:1d:e0:ec:2b:43:62:00:d7:29:57:fb:de:02:
                    17:ac:ec:17:dc:81:52:68:3d:ab:91:32:49:35:99:
                    2e:37:96:fb:ef:cf:cb:82:4b:45:c0:44:36:89:7b:
                    d9:93:4a:42:8c:cd:08:7a:98:c1:3b:a3:24:70:b9:
                    b2:19:59:22:be:eb:15:3f:07:8b:06:3d:e1:97:c6:
                    83:bb:5e:a2:16:4a:b4:98:28:50:59:d0:a6:d0:76:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:F4:71:5E:18:60:CD:4F:57:19:AE:FC:5F:1D:2E:9F:92:42:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/14610aa1-bf0d-3bf1-9116-bce318ecb9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:c2:c3:b0:d1:34:da:55:ea:04:36:ca:85:bc:9f:2e:79:
         7c:5c:86:87:82:10:fe:19:84:55:c5:58:a9:82:37:e1:ee:84:
         16:19:19:c4:57:a6:3c:06:c5:d6:0c:b7:42:d7:42:82:97:9a:
         4f:2b:9d:dd:01:9a:d9:40:3a:e1:2a:d7:49:50:a8:ad:9c:42:
         63:17:8f:cf:24:14:c0:c4:d2:89:28:07:3f:9b:a6:6c:dc:1f:
         9d:f9:63:a0:1e:77:30:83:00:a6:83:f7:06:d1:80:35:1e:77:
         91:7f:39:3c:ea:cf:b1:d5:ec:11:36:f1:c9:cb:8a:63:b0:e7:
         18:0d:5e:f7:e0:5a:c2:d6:a8:87:9e:b1:94:cc:f6:c8:0a:35:
         3a:c6:59:ad:e6:20:ea:85:4b:ee:7f:1f:8d:fa:06:83:66:f5:
         b4:67:d8:af:38:25:fe:78:48:d2:71:b1:01:a6:0c:f0:37:c5:
         b9:0c:89:d3:e8:f1:43:19:fe:a8:1b:73:a8:42:cf:53:52:1a:
         c7:bc:f7:69:67:b8:cc:0f:dc:c4:a5:5b:8e:92:5e:a3:7e:9a:
         eb:1b:9a:04:03:d6:62:61:80:6b:a4:bd:f3:98:46:e2:02:d7:
         3d:c8:6e:3a:d2:0f:87:13:10:f8:36:05:5d:f1:c0:69:97:44:
         34:8e:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org