Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c56e2c13-5f97-39a2-9688-d0fda93a0479.roa
File:                     c56e2c13-5f97-39a2-9688-d0fda93a0479.roa (raw, json)
Hash identifier:          DPDPM4F3CEYcR7Q9EVcT1mhhcm2G7Mx+uuCH3m0Ezzc=
Subject key identifier:   D7:C6:99:B8:B8:CE:C4:D6:6B:5C:18:F9:CD:74:E7:90:16:B8:E9:A2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EB9C7E04B9EDB558792780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c56e2c13-5f97-39a2-9688-d0fda93a0479.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:9c:7e:04:b9:ed:b5:58:79:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=360eebff-c8ca-4b20-b0f6-0545fd82cd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:77:6c:31:11:01:46:de:88:3f:3f:46:09:
                    c9:2a:25:0b:a8:a5:6d:eb:f5:c4:33:ee:f8:5b:74:
                    7b:3d:68:67:d5:ba:fc:11:4d:32:56:18:52:a3:d0:
                    82:5f:f8:a5:ec:8e:c5:17:5e:ed:91:a5:c0:81:c1:
                    07:82:53:77:0f:9c:2b:f3:ff:4d:62:a3:62:c0:6f:
                    78:d3:99:e1:bb:1b:df:e1:93:2a:77:87:9a:b8:1b:
                    54:00:01:3f:2f:a7:ef:ac:85:ea:ee:41:dd:36:a0:
                    f8:1e:c2:4b:d1:10:39:57:f3:88:35:fa:2a:51:9c:
                    3b:41:15:e0:38:e3:f2:c6:38:28:d2:f3:c3:8e:01:
                    e0:6b:93:59:24:e8:c7:19:2f:4b:3e:4b:a1:1a:9a:
                    cb:d9:57:ab:7c:fd:a1:dd:15:50:bf:f6:c0:92:8a:
                    94:e6:13:ae:75:24:35:6b:d6:de:9b:ae:40:b8:66:
                    29:43:98:10:95:a6:e4:ec:b2:f0:82:3a:ae:7b:36:
                    83:c7:c1:34:22:43:e0:40:cf:19:41:15:c8:f5:e0:
                    ce:85:ad:cb:b9:b3:0b:cd:0f:80:14:09:03:b3:c6:
                    79:ba:0b:63:69:35:5c:a5:ff:1a:f0:b0:04:2d:12:
                    5a:22:ae:d4:7d:af:41:ab:82:60:89:87:44:26:10:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:99:B8:B8:CE:C4:D6:6B:5C:18:F9:CD:74:E7:90:16:B8:E9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c56e2c13-5f97-39a2-9688-d0fda93a0479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:4f:b0:e2:2d:58:64:2c:29:cc:ba:22:5a:22:7b:19:3a:
         f9:bc:a9:35:04:6c:64:e8:26:ac:ce:20:b9:25:bc:48:f9:86:
         69:39:2e:14:96:2b:a4:b6:3c:1e:64:bd:33:f3:da:50:3f:19:
         d0:fa:c0:4f:30:f4:6f:93:a4:5b:f2:13:40:fd:42:b5:5f:50:
         89:13:6e:10:2f:f3:54:63:f0:95:4c:c3:be:bc:2f:c2:ee:46:
         3a:26:6d:0b:98:8d:ae:b6:8e:58:79:d5:a5:43:57:77:42:bc:
         75:1a:bb:c0:7f:af:cd:89:55:1b:cf:af:4d:34:a4:80:77:3a:
         35:c7:97:c5:ed:39:dc:fe:b9:a8:b0:bf:af:2a:b0:be:82:60:
         7d:0e:5b:fd:87:f7:55:75:8a:c3:22:42:d8:77:da:65:69:7f:
         d0:4d:05:e0:56:ba:32:cc:77:09:d3:f9:56:84:84:92:d1:56:
         b3:15:3a:c7:a1:43:cd:0b:ab:17:37:d0:a5:aa:cc:09:b4:3e:
         f2:c1:9b:aa:8a:47:c0:0f:86:1e:ec:56:d1:7a:64:83:73:5c:
         2f:a1:33:ae:6e:ff:6f:62:ce:09:0d:b9:cf:d5:df:ff:6f:32:
         65:0c:5b:29:13:eb:96:d4:bd:4e:bb:5a:92:61:b8:69:5e:9d:
         41:be:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org