Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a4660c-8b74-3763-b013-51ddbd2845f0.roa
File:                     92a4660c-8b74-3763-b013-51ddbd2845f0.roa (raw, json)
Hash identifier:          ADj5+aqypEjmqvduinpcjxFm6D93r1XfgsKeM+ukU0s=
Subject key identifier:   94:B6:0C:0F:5F:18:19:F8:E1:5C:40:42:C7:6C:A4:C4:F7:DE:DF:C2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F0430E65AD23110EB9CC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a4660c-8b74-3763-b013-51ddbd2845f0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:43:0e:65:ad:23:11:0e:b9:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=36cabdb4-0b51-4c24-9342-d48a0ce1cdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:43:32:07:92:b3:10:30:ec:48:61:bf:28:
                    a0:48:73:17:6b:09:c6:6e:92:b1:12:12:4b:b5:00:
                    3c:dd:56:f0:9d:03:9b:e9:36:b8:36:ce:e7:a1:49:
                    1f:b7:c2:62:ce:81:c1:eb:6f:98:7a:9b:a2:96:5c:
                    1d:d2:43:b6:58:46:95:82:8e:c6:40:86:e5:cc:58:
                    94:56:60:ad:27:0d:55:44:28:11:89:ff:91:cc:e4:
                    2c:75:bf:64:52:a8:72:32:2c:3c:20:af:a2:51:c1:
                    b3:72:9f:e8:0d:d2:92:82:65:6c:3c:9e:fc:93:56:
                    a6:34:5e:da:63:0e:e6:3b:ed:84:72:92:dd:7f:08:
                    56:6f:c9:0d:70:08:9e:e7:81:1c:86:12:6f:30:e6:
                    d5:28:d3:7b:e4:51:cd:9c:cf:b5:25:2d:9a:aa:76:
                    67:7e:77:4e:66:f5:04:99:e7:d9:b5:86:6d:f5:a3:
                    8d:13:5e:ed:fb:c1:d0:16:20:24:d2:62:6c:77:57:
                    8a:39:b1:7f:a9:3a:20:05:f7:20:21:0b:fd:ed:90:
                    ea:31:1b:4c:fd:86:81:75:32:03:5d:83:0a:d0:3a:
                    eb:fb:d2:30:f8:49:ca:8a:1b:57:76:b0:79:a8:2f:
                    dc:e7:12:65:63:66:b4:78:9b:45:a8:b6:9c:24:31:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B6:0C:0F:5F:18:19:F8:E1:5C:40:42:C7:6C:A4:C4:F7:DE:DF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a4660c-8b74-3763-b013-51ddbd2845f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:31:9b:22:e4:4e:14:1c:22:3f:11:ed:63:6c:cd:15:e9:be:
         44:eb:d9:da:ee:c1:77:3d:99:3b:8b:6e:ec:b1:c7:22:56:15:
         92:9d:f8:c4:41:ea:8c:d4:2e:39:3c:cc:99:24:de:ac:8a:c3:
         6d:97:e9:f1:5f:37:a6:94:a4:a8:a0:a9:e1:6d:fa:ac:b7:fb:
         4d:00:0c:0c:7e:db:fe:fe:e7:59:b3:d9:34:38:f5:1d:8f:ab:
         44:4b:ee:26:fd:01:1a:5b:b4:22:33:c7:35:dd:b1:be:3b:6f:
         e0:5a:6f:38:f9:30:d4:70:21:47:c3:bd:dd:9a:90:91:19:4c:
         48:0c:4f:7f:c3:cc:52:35:94:31:b3:6f:b2:20:09:20:b8:b7:
         a7:17:8f:f9:24:8d:01:71:50:f0:c4:0c:26:5b:82:bc:14:c8:
         58:8f:c4:cb:3e:cd:fc:66:f2:7b:34:7e:3e:f5:e9:a9:39:fc:
         f7:85:ae:5f:18:2f:a7:6b:90:94:4b:cd:05:9a:c5:f7:f9:5a:
         aa:c4:1f:29:98:ee:ce:da:c7:29:ee:5b:68:ff:bc:cc:33:5a:
         f6:9d:c4:5c:df:d2:20:ec:3c:62:8e:27:f6:4a:0c:d6:b9:16:
         f3:16:fb:07:4f:38:36:f1:80:40:87:b7:e6:e8:0e:a2:97:42:
         2e:46:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----