Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99748015-3b15-3d6a-974d-73a72b5f8967.roa
File:                     99748015-3b15-3d6a-974d-73a72b5f8967.roa (raw, json)
Hash identifier:          aJMPB1If8yBTIBBQJEW8UOo2L2+BLOHugQytd5iU3iU=
Subject key identifier:   75:3B:09:50:7F:4B:58:8B:49:6E:65:51:29:F6:4A:9F:FF:AC:E3:30
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A042587856C26C255EBD910
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99748015-3b15-3d6a-974d-73a72b5f8967.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:25:87:85:6c:26:c2:55:eb:d9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ac9d0cc3-c510-4974-811c-41d3b3a58244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:e8:2a:8d:5f:2e:d0:8b:21:7d:f0:18:4c:
                    e7:11:e0:34:ac:f4:74:57:13:99:cd:d7:9b:b0:d4:
                    a8:71:40:27:56:02:b5:d6:1d:a1:9e:0e:0b:99:ee:
                    3e:0b:d7:0a:83:dc:d0:69:8a:ce:22:c6:4d:3f:ab:
                    73:d9:7f:4f:5d:b4:7c:0c:53:1e:b8:4b:73:8b:b5:
                    a1:80:dd:84:1b:93:1b:a6:ec:e7:7d:35:a3:83:69:
                    fd:31:f6:e1:e1:19:df:27:2a:71:51:87:c0:c4:b8:
                    44:1a:50:72:f4:27:30:9a:0e:b2:db:87:c3:9c:2a:
                    37:84:6c:1a:e2:d8:a6:a1:62:b4:41:f3:10:11:5b:
                    1b:ed:34:ee:70:d3:47:48:3c:e9:e8:b8:c7:86:d5:
                    da:f3:58:89:a4:ed:4b:d3:e6:b5:49:bf:53:aa:46:
                    32:5f:26:fa:b8:19:04:74:7f:03:c4:f2:07:c7:c6:
                    6c:fe:af:0b:99:bc:e3:77:87:0f:b7:9d:ca:37:5f:
                    53:4a:4d:59:21:a2:a0:be:6c:02:4e:23:e5:46:d2:
                    04:93:9c:04:e4:05:ac:ee:84:e9:af:ed:33:8c:ab:
                    23:55:87:a7:dc:cc:8f:49:c8:7f:45:b0:d3:20:9d:
                    5a:31:7c:d5:96:61:a7:a6:e0:99:30:e1:0b:9e:81:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:09:50:7F:4B:58:8B:49:6E:65:51:29:F6:4A:9F:FF:AC:E3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99748015-3b15-3d6a-974d-73a72b5f8967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:ad:86:fe:56:54:55:06:71:b8:6a:26:ad:31:5c:be:f5:
         55:6d:5c:ca:a8:a5:9c:4e:ca:09:1a:2f:19:9e:af:b8:e7:bc:
         39:f6:34:54:23:a8:44:3d:d2:53:fa:3f:65:09:d9:5a:12:dd:
         d3:68:21:23:ef:02:e8:7c:22:77:8b:5c:89:5d:31:69:a0:ef:
         90:5f:45:fd:73:07:f4:ab:9d:c8:00:45:a9:a0:2a:14:1b:5d:
         2c:de:98:bd:d8:b7:82:7b:10:f9:3e:0c:08:df:9a:79:31:69:
         95:94:5d:fc:73:18:d3:b7:c5:04:b9:44:74:98:fd:42:8a:2d:
         fb:1e:87:4a:e8:2f:83:95:e8:a7:33:a6:7f:a2:1a:0b:3e:ca:
         6f:46:27:25:e1:1a:87:54:3a:01:86:e3:94:b5:8a:e0:59:d5:
         7f:15:22:b5:a2:1b:55:5a:20:d6:1f:3d:09:89:08:5f:6b:1a:
         80:98:99:ab:f5:64:e9:27:40:7a:c9:94:5d:8b:5a:21:fd:f5:
         68:22:68:56:29:90:e6:03:c7:7a:1b:89:74:fd:aa:7a:3e:a4:
         20:60:d8:d9:2f:bc:4a:99:1e:2c:89:53:27:be:3e:c8:eb:0c:
         2b:03:e6:83:e7:bc:98:17:54:fb:51:10:e1:f1:48:d6:8e:b8:
         1a:c5:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:41 2024 by rpki-client on console-ams.rpki-client.org