Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e5d72a5-3dd3-3c82-82db-9506a593e495.roa
File:                     6e5d72a5-3dd3-3c82-82db-9506a593e495.roa (raw, json)
Hash identifier:          c4xCO2ZjptN+f2bpTMEhBz0uDPW2PvADlrx8HgXeTjM=
Subject key identifier:   ED:1A:ED:FA:BF:17:10:EA:0B:EE:2C:8B:F4:C5:CC:51:2B:6F:93:AA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A1F62266F6599549434D800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e5d72a5-3dd3-3c82-82db-9506a593e495.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1f:62:26:6f:65:99:54:94:34:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4ea851be-201f-431d-93c6-64767778da73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:f2:70:96:67:24:6e:ac:d6:34:72:5b:77:
                    7c:8b:70:61:67:48:af:c0:fd:24:94:70:02:e5:a1:
                    83:d8:b0:6d:f0:6d:e2:9d:c4:5d:18:f6:50:3a:84:
                    16:4d:8d:0b:1b:2f:01:d7:42:59:a5:ff:32:c4:29:
                    d3:de:0e:e3:35:d0:11:07:97:80:21:65:0e:d0:59:
                    f2:a9:c2:ca:16:ec:7c:c2:70:fb:3e:4f:6b:fc:ec:
                    75:f8:18:a1:8a:81:17:71:f9:9c:d2:ce:38:cd:e8:
                    24:e6:24:e6:42:91:3a:96:78:de:65:8f:e4:05:45:
                    f4:f6:5e:b9:2b:47:3d:75:84:d7:6b:e5:a3:77:a9:
                    53:24:ec:33:f1:9e:11:27:80:57:ca:44:ea:c9:48:
                    bd:84:0b:4d:91:3f:eb:d7:06:4a:51:fb:37:d5:c7:
                    96:84:30:25:a6:2a:4d:a8:96:56:15:2d:fc:9d:7d:
                    46:42:fa:29:a9:14:32:63:33:a0:41:8b:94:b7:f5:
                    88:1a:e0:9d:f9:1d:a7:09:aa:4a:d9:e2:4e:b1:6a:
                    af:53:a7:3b:1d:40:90:42:2d:be:28:7c:22:de:d8:
                    35:e8:62:d4:15:75:6f:9a:60:70:24:be:35:41:ec:
                    32:e4:d0:6c:56:08:be:01:aa:73:d5:8f:f3:26:8a:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1A:ED:FA:BF:17:10:EA:0B:EE:2C:8B:F4:C5:CC:51:2B:6F:93:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e5d72a5-3dd3-3c82-82db-9506a593e495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:ae:93:4e:79:75:52:8e:da:18:b6:fa:97:ca:fc:2b:6d:
         32:af:f7:0e:94:77:42:02:f8:41:ef:2a:14:23:21:37:b2:61:
         d6:af:b4:34:b5:5c:55:9c:b4:f8:1a:bc:14:85:f7:f4:7d:31:
         69:70:9e:53:b6:5b:33:61:3b:a0:e3:5a:ac:20:01:66:87:6b:
         7e:9d:9d:d3:e4:23:39:fc:59:d0:cf:56:a7:7e:8e:1e:d2:d2:
         0b:39:e8:be:7a:f0:af:3f:24:d4:55:53:88:f8:cf:30:b1:c2:
         ce:23:47:64:91:47:a5:0d:aa:3d:a9:bb:b5:a4:9e:ae:20:41:
         a2:62:24:79:9e:ae:d8:1b:4b:31:2a:65:75:54:7f:f2:9a:ff:
         86:64:af:dc:ee:fc:d0:6d:7f:67:b7:1c:aa:1f:6d:1f:f3:fe:
         cf:dd:9f:a2:0a:7d:66:b9:a1:67:7d:cf:b7:ae:32:5c:05:00:
         41:a6:ba:dc:dd:4f:4d:ec:16:c3:38:08:c6:65:a5:d0:fd:5a:
         51:d0:77:ff:f8:c1:68:c1:51:90:21:98:65:f1:de:df:de:61:
         e0:99:7b:0f:fb:e3:6d:a0:2c:59:7c:bb:21:ab:56:ef:29:62:
         3c:43:2e:15:95:d0:01:78:ed:97:9b:0f:f8:0e:ad:1a:fe:7f:
         7c:a2:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org