Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/158cd67e-ffaa-38d6-8d17-b2da4320ca59.roa
File:                     158cd67e-ffaa-38d6-8d17-b2da4320ca59.roa (raw, json)
Hash identifier:          +8jo+jaATupa9V9DUJj6sxywbA38WTve8o1jrOhDues=
Subject key identifier:   95:4B:A3:F3:B9:54:26:BE:43:69:96:7D:28:65:F9:74:49:48:2B:BA
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F432858458698C65E6832B01FAC8C44C0
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/158cd67e-ffaa-38d6-8d17-b2da4320ca59.roa
Signing time:             Fri 12 Apr 2024 22:52:13 +0000
ROA not before:           Fri 12 Apr 2024 22:52:13 +0000
ROA not after:            Thu 11 Jul 2024 22:52:13 +0000
asID:                     16509
IP address blocks:        209.178.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 04:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:98:c6:5e:68:32:b0:1f:ac:8c:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Apr 12 22:52:13 2024 GMT
            Not After : Jul 11 22:52:13 2024 GMT
        Subject: CN=06a3e9c6-d014-4c63-9a89-7796a3609a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:f3:88:e4:ff:94:0c:a2:06:66:8b:7c:43:
                    20:af:17:79:a6:44:48:c5:2f:97:11:89:86:c0:b7:
                    95:04:f2:f0:f4:b7:fd:2e:c2:a5:9c:41:ec:f9:2d:
                    6c:61:fe:38:5b:99:e0:16:20:47:a2:c0:c9:05:7d:
                    77:e1:56:77:6e:51:e1:9a:b8:07:7e:b1:19:d8:6a:
                    f7:17:f7:3a:e6:a9:31:dd:52:71:d1:71:c5:fd:dd:
                    ec:3f:f2:c5:38:dd:27:57:fa:42:5c:73:34:49:a0:
                    ee:73:58:3a:d8:f0:ba:ab:58:60:20:02:13:dc:17:
                    6a:41:b4:b5:59:34:ee:95:d5:b1:1b:63:9e:2d:ab:
                    f1:fe:ad:b2:af:c6:3f:dc:36:a9:71:57:4e:88:3f:
                    a1:c2:ba:98:fe:1f:9a:b3:3f:eb:00:92:65:42:18:
                    5d:0a:ad:e0:e0:19:ac:b5:26:aa:a7:6c:21:e8:5a:
                    da:b7:fd:b1:e4:a2:a5:e6:ba:59:40:dd:d8:dc:45:
                    12:e0:86:63:87:02:b7:0a:3d:30:78:61:61:ca:da:
                    ba:d2:ce:6e:37:5e:ec:5d:3f:9b:5b:9f:68:8b:46:
                    28:8c:e3:a9:a2:16:b6:2e:04:72:0c:d9:6f:b7:fb:
                    d9:89:e8:e2:e8:ea:9a:59:b8:23:b5:df:9d:10:1d:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4B:A3:F3:B9:54:26:BE:43:69:96:7D:28:65:F9:74:49:48:2B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/158cd67e-ffaa-38d6-8d17-b2da4320ca59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:14:db:5c:b4:b9:38:c5:4d:27:a3:55:00:4c:63:b4:5d:85:
         4b:aa:5f:ca:f8:ed:a5:d6:c4:ad:f2:5d:9f:12:fb:57:49:6b:
         b1:8e:42:cb:e6:9e:5b:d0:7d:8b:53:ca:8b:1d:91:80:28:b4:
         85:ae:51:65:22:de:2c:36:92:bc:4d:93:46:be:2f:9c:0f:83:
         7f:4e:4c:c0:c6:06:6b:a0:46:06:92:d2:fa:97:1f:fd:d5:6f:
         f5:d3:2c:ce:cd:b5:5e:94:59:10:95:11:67:82:af:40:6d:dd:
         d8:ff:57:7c:83:89:da:f2:51:13:37:3d:ea:4b:87:0a:9c:11:
         70:5a:41:57:4d:d1:d6:d5:f1:82:b7:e0:ce:00:90:b8:76:f3:
         ce:7e:5a:db:47:88:50:b2:00:11:0d:e0:75:50:70:e0:30:34:
         a3:74:81:67:8a:2e:ba:57:9c:8c:4b:15:ab:df:d3:fe:f9:3f:
         52:a1:c2:69:d3:77:62:36:c2:cf:90:86:c4:93:10:e4:8b:cc:
         0f:ec:c1:ee:51:9c:6f:bf:62:b1:93:9e:28:83:45:d0:49:ed:
         ab:f6:cc:cd:84:8a:c7:6b:4e:b7:86:0e:9f:67:f0:d3:25:a2:
         6e:d6:bb:ed:43:2e:5b:d8:28:e2:0d:83:8c:28:bb:4d:48:fb:
         54:e0:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----