Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fd2cc23-bfe9-34b0-b4c5-b946e53a50c5.roa
File:                     7fd2cc23-bfe9-34b0-b4c5-b946e53a50c5.roa (raw, json)
Hash identifier:          kwYqUyiVSILGN7aAkSdUsRHhI5IPdAC+zRh2qSuuXZM=
Subject key identifier:   B0:18:B9:DA:BD:3C:F7:C0:FA:36:35:F8:3C:FF:CA:5C:08:08:0E:75
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F3B30371F7E038437BD900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fd2cc23-bfe9-34b0-b4c5-b946e53a50c5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        172.253.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:b3:03:71:f7:e0:38:43:7b:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4a520e18-f4bc-4c30-94c1-9877d9f5491a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:83:6c:38:ab:18:cd:20:fc:0e:6d:9b:da:
                    79:57:01:15:66:9c:14:91:a9:03:2c:44:1a:eb:b9:
                    20:32:e6:e4:5e:a8:fb:11:47:24:90:15:a9:b9:ca:
                    96:d6:67:43:be:e1:26:76:20:dc:6a:ad:4f:d7:6c:
                    b6:78:b6:34:8c:d8:8b:66:b6:2c:d9:08:b0:50:22:
                    0c:ee:0d:73:79:b9:29:fa:fc:6d:d9:1f:22:d2:34:
                    30:f1:0c:08:88:46:6f:41:80:2e:63:3f:77:62:aa:
                    4f:7f:78:b5:bc:18:e8:75:88:6f:07:49:3a:07:84:
                    5c:43:9f:16:fa:d5:94:7d:78:64:ee:24:f7:49:b2:
                    35:d5:66:5b:2b:37:0a:e5:83:34:93:4c:f9:23:53:
                    ec:fb:75:78:20:8c:e3:ef:35:bf:69:f5:ce:4c:39:
                    a3:6c:a4:b1:a6:8b:33:94:e9:b8:08:ba:4d:fc:e2:
                    ee:6d:fb:28:c7:9f:f6:e1:45:da:d6:f7:2d:96:18:
                    9b:11:4d:bd:bc:a3:33:16:21:5a:93:80:be:16:70:
                    e8:f2:1c:92:18:c3:14:9d:f0:f4:10:5c:61:5c:32:
                    0b:cc:a0:19:b6:f1:b8:38:5d:1a:d0:91:0c:78:30:
                    1a:6b:fe:af:dc:d7:d0:57:b0:6b:c5:9e:6b:2c:37:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:B9:DA:BD:3C:F7:C0:FA:36:35:F8:3C:FF:CA:5C:08:08:0E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fd2cc23-bfe9-34b0-b4c5-b946e53a50c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:ac:22:dc:5b:0d:9d:b8:0d:4e:bb:e7:29:4f:a1:36:19:
         ed:6c:38:77:f7:c2:3c:8e:d4:d8:a8:be:ba:86:28:fc:55:36:
         e6:53:89:72:49:42:1f:0b:a3:71:c7:e3:49:98:e4:8d:f3:8b:
         1e:03:66:5c:bd:28:d5:f6:d7:a5:33:13:de:fc:f0:b8:69:9e:
         e6:b7:7c:fc:7d:e0:24:a7:2f:4a:5d:ab:8a:e1:e2:be:6f:18:
         ca:cf:2b:23:a3:6a:a0:2a:91:ab:37:3a:12:d7:5f:15:00:bc:
         62:e3:20:5e:68:e2:4c:b6:3b:cd:de:a9:cf:d9:21:09:24:6a:
         f8:0a:c6:88:54:6a:c3:50:35:0f:e5:9f:df:e8:bd:db:17:05:
         07:67:60:1b:be:df:58:0d:92:81:4b:57:ff:72:b0:5a:2b:15:
         42:c6:3b:ea:09:c2:b0:3c:ba:6d:6b:e0:c8:b0:3a:c4:30:bc:
         ed:cc:aa:63:31:86:f3:35:06:92:88:7c:a8:5e:39:57:30:99:
         ce:d3:08:76:e5:88:16:65:01:f3:43:cf:9b:c8:d9:5d:e6:37:
         9a:40:d4:7b:0f:76:49:e8:e4:9f:99:85:04:43:8c:ec:13:21:
         8a:ec:f3:89:89:d1:cf:f3:ff:e1:8b:7f:eb:d4:bc:fe:24:f8:
         b8:04:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org