Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87070351-bfdd-3832-bd8f-fa2f8fe5d876.roa
File:                     87070351-bfdd-3832-bd8f-fa2f8fe5d876.roa (raw, json)
Hash identifier:          8LlgJc3mVlUaiG43zybQNHnKMLEJnlzBjL/8T0SPdq0=
Subject key identifier:   E7:46:F4:25:64:B3:8B:9E:20:84:61:C8:D9:90:4C:9C:1F:7F:C1:B3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A218333FD697E171D5603C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87070351-bfdd-3832-bd8f-fa2f8fe5d876.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.253.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:83:33:fd:69:7e:17:1d:56:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fbf57675-ad62-474b-b498-eed5afcee5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:78:2d:dc:42:75:51:01:e3:50:3b:11:bc:
                    d0:8b:89:f9:fe:46:80:51:3a:14:6e:23:05:7c:61:
                    87:d2:8c:8c:45:18:05:12:31:c1:61:f1:c8:04:36:
                    eb:67:ff:9d:04:7d:a2:42:f0:9d:73:7b:e4:eb:ad:
                    52:18:b2:f8:72:1f:72:46:4e:54:53:b1:3f:12:95:
                    13:8c:7c:ec:a6:fe:77:37:a8:95:5a:ce:89:37:c6:
                    9b:9d:fc:79:80:1c:88:b7:bc:cf:a5:d4:d0:c4:30:
                    c2:e0:e4:1a:5a:43:80:ad:91:e3:5b:c2:b0:8e:bc:
                    d7:65:78:9a:40:c0:f4:b8:2d:3f:19:43:61:87:7b:
                    6c:a1:ce:43:8f:47:db:93:3d:71:f5:90:a0:79:d9:
                    3d:e1:c5:d3:09:60:30:4a:7a:a9:98:cd:af:f8:92:
                    e9:a1:0c:80:6f:6b:18:d6:aa:c9:2f:51:36:59:df:
                    bb:85:6f:42:26:e4:a0:04:21:5e:77:bd:3a:21:38:
                    e7:bc:a4:ba:e6:9e:98:b8:8a:59:77:4e:28:37:bb:
                    03:83:17:bc:b9:90:9e:77:0d:cb:e5:81:4e:30:ad:
                    45:7a:62:8e:eb:64:0b:22:5b:03:64:2d:01:d5:25:
                    93:4e:7f:6f:0e:c3:4f:3a:77:2d:22:64:fd:13:87:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:F4:25:64:B3:8B:9E:20:84:61:C8:D9:90:4C:9C:1F:7F:C1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87070351-bfdd-3832-bd8f-fa2f8fe5d876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:36:18:58:ef:26:b1:ce:95:85:f4:5a:74:01:61:a8:8d:
         81:0c:f4:df:83:8e:7a:bc:5f:d0:53:b1:f1:33:36:c8:ed:8f:
         3e:ee:f8:5e:52:aa:14:8d:47:8a:67:14:17:c4:f5:ed:0b:67:
         ae:0b:0c:90:44:61:59:09:3d:53:a4:52:06:57:5d:23:51:5e:
         c6:11:c2:43:d0:db:22:66:c6:25:ee:64:a2:6c:43:67:de:b4:
         b5:12:d3:a5:2e:5c:11:ba:34:e1:f8:53:e5:23:0b:e8:63:27:
         05:f5:8f:b5:25:a4:d1:70:24:65:7e:9c:d9:d8:13:5d:e8:5f:
         ad:27:ca:0c:f6:0f:63:31:96:a9:79:84:26:5b:98:39:c4:bd:
         cd:22:5a:b5:01:26:d4:69:53:c7:39:fa:f7:0a:84:65:28:10:
         c4:dd:d8:cf:65:ee:98:c0:19:68:e0:a1:4c:33:88:02:7b:90:
         a9:5f:60:40:94:00:2c:12:f1:76:67:87:a2:1f:8d:91:87:44:
         1e:32:d5:0e:b8:ef:b1:3c:78:54:6d:56:8a:78:41:64:30:c2:
         bb:fe:e6:09:78:2e:4f:65:a8:a5:e5:40:22:24:d2:1e:ce:15:
         a6:11:d9:e0:33:e1:83:ae:17:09:fa:2a:b5:cc:4f:47:c2:bc:
         79:48:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----