Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8406319-c908-38de-94ad-340ca93b3009.roa
File:                     f8406319-c908-38de-94ad-340ca93b3009.roa (raw, json)
Hash identifier:          p6gSUAjiZwlcbBmxoWGIIXo1z4uvev0bWAaILxoy1z4=
Subject key identifier:   0B:28:C4:F5:0F:B6:6C:F5:2F:38:CD:38:3F:9B:A8:DE:51:0D:54:09
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A189D2C74F049B676B1A380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8406319-c908-38de-94ad-340ca93b3009.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:9d:2c:74:f0:49:b6:76:b1:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=22aba6c5-a9ec-4840-a1c6-ea44b56c34d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:e4:a3:f9:17:5a:75:6c:3e:91:f3:8f:e5:
                    92:bd:89:1c:98:bb:9b:c7:42:fe:e0:4d:51:04:3b:
                    60:5e:04:65:e6:ae:c7:fd:6a:3b:50:79:18:c1:db:
                    45:4a:2c:6f:56:ff:33:16:89:22:cc:70:12:03:d7:
                    80:ad:94:e5:ea:b2:c7:72:35:fb:3d:21:22:80:bf:
                    98:c2:7a:15:7c:6a:17:26:7d:be:3c:78:8f:b0:e1:
                    f5:59:e2:e1:45:17:af:35:84:9f:80:d2:36:a1:97:
                    96:0a:b6:61:ed:59:27:f4:23:a3:0e:9f:c9:72:10:
                    76:2a:eb:8c:8f:1e:44:bd:5a:43:dc:ae:a8:c0:9b:
                    cb:d6:d4:4e:5f:62:d0:d8:81:58:fd:a4:23:35:6c:
                    02:c3:89:04:c9:68:72:0f:d5:50:81:3e:01:f9:89:
                    8a:a3:28:ba:28:bd:0e:27:ed:84:2e:bf:6b:0f:81:
                    5d:0f:bf:d4:23:41:85:de:71:42:55:8b:aa:ed:d2:
                    c4:64:2f:51:ee:d3:8d:3a:9e:98:e3:9f:b4:1a:03:
                    fc:3c:eb:ce:c2:0f:0b:0c:99:df:03:1c:1a:8a:61:
                    d9:4d:2d:b4:1b:1c:14:7e:a0:98:49:85:bb:0c:ec:
                    78:e6:17:cb:34:ae:00:d7:63:bd:3d:bc:32:17:d0:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:28:C4:F5:0F:B6:6C:F5:2F:38:CD:38:3F:9B:A8:DE:51:0D:54:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8406319-c908-38de-94ad-340ca93b3009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:09:fa:40:63:19:37:be:3a:41:c6:eb:fb:9f:aa:35:f5:
         23:a1:f1:20:c9:7a:af:b7:3c:d8:71:e8:60:55:fe:23:66:6b:
         56:1f:0d:a5:9e:73:2b:d6:04:c9:ea:2f:d0:bd:25:0f:b3:9a:
         79:ba:92:93:af:65:ac:fd:5e:e7:4d:f4:6c:39:d7:9e:d5:5d:
         e3:bc:18:b7:22:d1:24:21:db:1d:56:3f:13:97:14:17:34:25:
         bb:e6:df:4f:70:dc:98:cb:24:74:5b:76:20:49:e8:a1:b9:fc:
         e0:32:b3:fa:bd:71:48:11:17:65:ad:3a:f9:69:ed:b6:0d:e0:
         3d:38:bd:3d:63:b0:02:dd:1e:05:48:c1:59:47:08:9b:2b:41:
         eb:e2:46:dc:81:0f:ac:de:c0:89:cc:94:47:e4:27:29:b7:d2:
         b0:ab:e0:1a:92:13:b9:f2:34:40:a1:7d:7c:fd:89:ef:2c:9a:
         a1:83:84:06:d4:48:bb:88:e0:c2:19:71:81:50:1e:1b:77:46:
         d3:8e:55:65:96:af:f3:c4:23:78:e2:36:21:8c:e9:6c:b3:9c:
         77:97:db:e7:30:34:b1:5e:0a:40:58:43:17:ec:c2:7c:e7:4c:
         e6:cd:ac:49:33:1c:cc:69:80:b5:9a:eb:9e:fb:14:fb:81:6a:
         66:3c:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----