Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d99c33f0-679c-341b-9758-093fa934102e.roa
File:                     d99c33f0-679c-341b-9758-093fa934102e.roa (raw, json)
Hash identifier:          KOEh/9Os/BFu2Ge3NE2jubfgSb/+QFeD3XoIcq84K/M=
Subject key identifier:   9F:E2:18:D0:C3:2A:34:F1:00:8C:1F:A8:E5:96:11:47:DC:01:05:67
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A1AA25233452FF88E360E40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d99c33f0-679c-341b-9758-093fa934102e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:a2:52:33:45:2f:f8:8e:36:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a42e51a7-00cc-4906-92d1-4540dbb9dc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:19:e1:7f:7f:70:91:69:f1:89:87:16:5d:
                    14:60:aa:72:4f:c3:14:39:06:b1:9e:25:c0:0e:c3:
                    88:1e:51:0b:14:c6:21:81:43:3c:35:e6:4c:4e:a2:
                    e6:34:9f:ea:6e:5a:a2:ad:16:43:d5:c6:1a:fc:b5:
                    f8:10:7c:7e:7c:77:61:d6:71:34:05:fa:da:e2:59:
                    e9:e4:e3:9e:fa:e5:bb:6b:42:38:15:4d:60:c8:52:
                    17:1f:6e:42:88:ed:8e:9b:c1:c4:9b:cb:c3:28:da:
                    c3:e0:34:73:50:3d:02:2a:a9:20:b3:44:32:bd:90:
                    ce:da:50:61:44:b7:f3:7f:22:62:f0:37:59:e1:55:
                    89:ac:3f:70:ca:6c:08:42:13:73:2a:3d:7e:f5:e0:
                    7b:9b:0d:12:a3:26:84:a0:d7:24:3f:eb:96:48:d1:
                    f5:9c:b2:97:32:9f:db:d3:84:b6:64:6f:48:f7:dd:
                    bf:15:85:93:a5:89:8b:59:4a:f3:e9:c8:ae:d3:ca:
                    15:a3:ca:2a:22:0b:e6:67:21:24:6c:2a:1c:6d:d6:
                    40:8e:19:61:26:b9:1e:a6:9c:32:1d:73:a2:34:ec:
                    2a:ff:d5:12:c3:0b:42:7b:2f:ce:0a:b2:86:7c:7f:
                    e0:e7:7a:dc:20:7c:51:8c:47:25:d2:64:4b:39:f1:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:18:D0:C3:2A:34:F1:00:8C:1F:A8:E5:96:11:47:DC:01:05:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d99c33f0-679c-341b-9758-093fa934102e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:2e:5a:23:b1:30:72:bb:4a:57:bb:04:3b:cb:72:32:17:
         ca:34:ab:b5:d1:3b:47:93:72:24:51:d0:ff:bf:c1:f5:8a:88:
         41:8b:c0:48:66:5b:be:e3:5a:20:f2:bc:49:66:1d:23:f8:49:
         ea:f4:78:a4:8a:e0:8c:09:df:bc:c6:b8:8d:d3:56:eb:e0:b0:
         75:9f:c1:16:b9:59:65:95:9d:7a:24:c6:dd:df:7d:14:e6:f3:
         77:75:3a:93:ae:b1:48:af:b4:d8:f1:c0:0b:13:c2:e4:28:24:
         40:6c:b6:29:ab:e3:5a:43:80:d8:18:6e:f0:6d:84:8a:56:2a:
         30:6c:90:fe:d2:83:9a:df:71:43:6f:17:1a:fa:de:88:cd:f9:
         f9:26:1a:99:ee:2e:da:bc:b7:69:24:02:69:d5:04:60:3b:dd:
         ed:29:dd:e9:ff:81:73:a6:94:43:52:6a:a8:89:5a:fc:8f:2e:
         74:37:d9:f8:dc:1c:68:b6:96:ce:50:0d:ac:5d:89:52:3d:d2:
         40:a5:0f:4d:34:31:f4:4b:d3:ba:e9:6d:3f:e2:2d:0e:4a:05:
         71:57:d2:09:75:e9:24:7d:ba:a5:78:c4:a6:84:29:71:8e:08:
         4a:08:d4:cd:94:ea:19:81:55:78:59:3f:bc:5c:bb:37:39:18:
         77:9d:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----