Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aaf04d04-3579-3ca1-9db7-7142fac82817.roa
File:                     aaf04d04-3579-3ca1-9db7-7142fac82817.roa (raw, json)
Hash identifier:          3KAVq/mQMPJayv4m1Vdw9gdXxMLKjheFRQ74+oXVuIk=
Subject key identifier:   83:40:3D:BA:4B:32:F1:D4:AA:4C:A3:83:B6:87:7A:B3:A6:56:9A:28
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0493A3B1783453A1A1F6F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aaf04d04-3579-3ca1-9db7-7142fac82817.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:93:a3:b1:78:34:53:a1:a1:f6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4e6f1a9d-b3bf-4f50-a985-4dc480bbaafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:25:88:7c:dd:6f:34:4d:c9:3e:9c:a4:cc:
                    74:36:80:b8:d5:53:55:d7:74:f4:5d:47:c9:1f:24:
                    5b:9b:15:23:dc:da:ba:e1:08:23:fd:ac:2a:37:56:
                    f9:65:08:a0:90:9a:eb:7e:db:4e:b8:05:a1:9b:52:
                    6d:59:1a:96:02:a1:ba:e6:49:fe:c9:7f:96:22:cf:
                    a8:90:65:a6:3b:e8:b8:3b:72:ca:ac:12:5e:6d:a8:
                    67:af:0f:d2:f3:50:14:cf:45:e5:01:dc:ed:9d:55:
                    c4:9e:86:e0:d7:fc:1a:f1:26:2d:f6:d1:ec:9b:a4:
                    ce:13:30:89:54:a6:51:c4:30:4f:89:a1:f9:dc:17:
                    d9:75:cb:ae:c3:14:5e:5a:49:7f:3c:6a:a7:f0:4a:
                    0c:ad:d9:d5:81:4c:63:e2:87:b0:f3:c1:27:37:17:
                    83:3c:81:29:a3:89:1c:af:9b:90:d3:1e:7b:01:5d:
                    ef:81:1d:d5:46:4d:8c:5d:25:36:a2:9c:f9:56:48:
                    7e:9e:bb:ea:c0:f8:68:c4:e2:33:2d:7b:0e:60:b9:
                    1f:3f:52:e7:65:69:f0:70:a8:84:1b:d5:8c:e2:e8:
                    8b:98:96:4e:c1:cf:fe:27:73:93:2a:23:08:1e:82:
                    90:3e:14:f5:04:ef:99:24:2d:d3:43:20:15:7c:ca:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:40:3D:BA:4B:32:F1:D4:AA:4C:A3:83:B6:87:7A:B3:A6:56:9A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aaf04d04-3579-3ca1-9db7-7142fac82817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:67:f5:ce:f2:7d:35:be:a2:8d:19:c1:22:56:55:27:52:e9:
         48:97:04:97:00:84:34:0a:31:82:3b:eb:14:b9:38:58:52:fa:
         eb:e7:ac:67:c3:79:be:fc:f6:b8:39:4b:4d:6a:6c:b4:eb:82:
         e5:6b:fb:ab:0e:ff:3b:70:77:33:e1:f4:89:cf:44:88:25:34:
         7e:6e:4c:6f:8b:47:07:55:6f:04:23:c7:f1:0f:46:9b:a3:e7:
         57:fd:78:e2:92:38:cd:1d:75:39:cb:83:f2:fa:5c:15:be:84:
         f5:ed:dc:72:83:af:cc:55:3c:99:1a:93:70:14:7c:20:4b:78:
         89:84:24:c9:c2:c6:76:38:ef:c6:f6:59:68:82:5f:32:98:b8:
         3f:4a:0b:49:d4:d3:5b:3e:3f:a1:c6:4d:b5:f9:19:91:17:da:
         be:d9:ad:6b:68:46:52:8a:02:48:0c:a9:71:b0:0b:5e:f3:80:
         bd:2d:88:7b:ba:e2:63:27:4d:cd:16:27:8f:d8:ee:9f:63:85:
         6b:33:2b:e2:dc:15:fa:59:bc:0f:c2:fd:ac:88:c9:d4:81:01:
         ab:2c:1e:1e:e2:ef:16:88:e0:50:bb:5d:15:a6:99:7a:a1:ba:
         a9:69:09:56:57:6f:f1:e4:3c:21:2f:d6:42:56:44:2a:59:6e:
         23:56:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----