Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/277772c9-992b-3aa2-8566-ba58898d1ccd.roa
File:                     277772c9-992b-3aa2-8566-ba58898d1ccd.roa (raw, json)
Hash identifier:          ksXG8m9hIl4MnFTJOxU4irqy3TftrMkLMRS6b/xrZII=
Subject key identifier:   61:95:28:3A:73:8F:7E:BF:D4:4C:29:F4:F8:FC:43:57:F5:98:CD:EE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A194007CC5C4D01E28B8540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/277772c9-992b-3aa2-8566-ba58898d1ccd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:40:07:cc:5c:4d:01:e2:8b:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=088c96e7-7634-4cfb-bd63-50eee6e854c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:78:9c:00:56:24:98:d7:fe:86:73:13:ab:
                    df:51:a2:ca:d4:aa:2d:42:32:dc:2a:1c:ff:03:4e:
                    b0:b2:f0:19:59:73:78:a3:9e:91:99:8b:9a:09:be:
                    98:93:8b:4a:04:9e:f2:b0:2c:5a:2c:50:39:23:8a:
                    7b:f4:07:a6:a0:6c:6b:11:6a:af:2e:6f:9b:ce:28:
                    ea:58:a0:ec:8b:1e:ac:1c:6d:8f:1e:ff:74:05:d3:
                    2c:18:25:b6:e5:de:1d:75:5e:60:d5:bc:6f:37:c5:
                    91:6f:0d:70:6d:73:7f:57:5f:0c:ab:38:41:2e:3e:
                    7b:5f:48:cc:65:65:24:ca:b2:ba:29:87:d2:1d:aa:
                    d9:c7:e5:82:7d:32:c6:fd:29:40:19:d5:05:84:5b:
                    32:ce:ca:2b:6b:63:96:ac:f0:36:eb:a5:76:ff:18:
                    06:45:50:7a:ce:49:26:b2:cb:65:61:7c:f5:c0:3b:
                    68:01:90:02:53:01:6b:bf:e3:6b:a3:a2:40:78:5a:
                    f3:d8:01:d2:54:5e:33:64:a7:26:2a:01:53:c8:9f:
                    1a:85:4a:4c:38:ce:3c:a2:78:a1:0a:c1:15:87:60:
                    4e:b2:98:64:9e:4f:68:22:7a:73:12:51:28:bd:a5:
                    38:44:ce:80:74:3d:1a:1c:e4:71:39:63:39:37:2a:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:28:3A:73:8F:7E:BF:D4:4C:29:F4:F8:FC:43:57:F5:98:CD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/277772c9-992b-3aa2-8566-ba58898d1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:8e:c6:01:4f:91:f1:af:05:63:3c:0d:6d:58:0c:92:1d:
         88:c2:39:e0:f3:e7:a1:ca:a8:b6:33:ae:12:94:5e:1e:f7:56:
         1c:d6:26:27:12:b6:90:e5:4d:89:2f:c0:0c:c9:a1:88:e0:5a:
         fb:9d:19:9c:34:0f:49:6d:dc:31:ee:d9:e5:b8:fd:50:d0:fa:
         ee:5d:16:30:66:3d:75:5c:6b:d7:dd:89:9b:cb:65:e1:3a:7d:
         8d:e2:e1:2d:24:b2:22:d0:f3:19:d0:42:0d:68:4c:c7:5d:e8:
         a2:12:c8:31:e8:75:36:90:a6:74:68:2f:9b:36:c6:81:24:8f:
         94:e5:e9:0c:e9:7a:be:93:6b:13:47:3d:c9:07:f2:41:20:8c:
         b1:7d:a9:3c:e2:0a:01:a6:3a:87:8c:91:92:b7:2c:b6:f5:35:
         71:00:c2:bb:f9:83:e8:07:53:be:ac:86:82:7f:66:3a:22:2c:
         71:9b:6e:87:fb:33:c4:6a:a0:e3:37:83:65:82:8e:1c:67:18:
         f1:ae:bc:c6:25:f8:30:e0:f9:76:11:a8:7e:e3:e2:15:ed:09:
         41:2c:75:6d:74:23:3e:fa:12:8d:91:06:74:fd:9f:46:03:a0:
         c5:bf:c3:59:9d:81:b0:c9:c8:e7:65:e3:65:96:6a:e8:d4:e5:
         2e:d2:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:37 2024 by rpki-client on console-ams.rpki-client.org