Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2e7d6488-8ca4-3213-a6b2-185fd037a9fb.roa
File:                     2e7d6488-8ca4-3213-a6b2-185fd037a9fb.roa (raw, json)
Hash identifier:          V/w6FM9KjhvlMi03uLT6EYSiHqVmGsI1wzjFnpQpnPY=
Subject key identifier:   91:92:B7:A5:A6:BF:5F:24:20:99:8D:FC:EC:1E:62:20:AD:29:1B:A4
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285846B2F51AEA3DDD63965A041000
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2e7d6488-8ca4-3213-a6b2-185fd037a9fb.roa
Signing time:             Mon 29 Jul 2024 13:00:38 +0000
ROA not before:           Mon 29 Jul 2024 13:00:38 +0000
ROA not after:            Sun 27 Oct 2024 13:00:38 +0000
asID:                     54203
IP address blocks:        173.245.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 00:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b2:f5:1a:ea:3d:dd:63:96:5a:04:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Jul 29 13:00:38 2024 GMT
            Not After : Oct 27 13:00:38 2024 GMT
        Subject: CN=7f3a7b75-0474-4efc-bfcd-85d68e07630a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:12:81:99:e1:aa:b4:3b:cf:83:c1:c1:18:
                    c9:cc:0f:36:6f:f9:a0:a0:02:68:b6:df:e0:57:33:
                    b9:9d:14:7c:16:c7:02:94:a7:cb:92:bc:6f:67:27:
                    78:00:d5:29:a8:6d:14:77:d3:e7:40:78:c3:06:1f:
                    e4:a1:2e:16:b1:ea:97:39:dd:02:8a:34:16:32:f6:
                    44:2c:05:9b:59:d2:7b:6d:6b:01:ea:3c:c7:42:06:
                    19:fc:ca:d5:f8:5c:89:4d:03:da:bd:93:b9:78:c5:
                    ec:78:e3:ab:28:7d:37:fe:81:ae:8f:7e:3a:cd:50:
                    ff:4e:c9:ee:8d:e9:c0:4a:30:ff:7f:51:0e:2d:1d:
                    a4:cd:10:a6:ee:93:23:bb:58:b0:bd:f7:69:4b:97:
                    cb:fb:4a:9e:bb:ed:86:35:6f:3f:cd:de:1a:35:2b:
                    07:8a:69:6a:2b:79:c3:0c:e8:65:ca:80:8b:7c:68:
                    8a:53:e1:43:d5:c2:2e:57:51:f3:83:df:10:d6:90:
                    18:08:21:c0:a4:38:a3:26:5e:09:4f:a6:58:1c:1c:
                    9f:31:03:e4:3b:ce:5a:6e:8b:ec:d8:f2:7d:ca:d9:
                    64:ec:2f:6c:94:d2:5b:b6:19:ec:9c:3e:d1:86:96:
                    70:91:05:6b:dd:16:53:f1:fb:e9:df:07:77:38:1f:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:B7:A5:A6:BF:5F:24:20:99:8D:FC:EC:1E:62:20:AD:29:1B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2e7d6488-8ca4-3213-a6b2-185fd037a9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:7d:fb:cf:53:c9:bc:76:04:dd:1f:51:86:36:1f:ce:67:
         84:36:d3:12:57:08:f7:9a:4e:e1:af:a0:b9:4b:29:84:ad:4c:
         2b:7d:bf:ac:82:2a:51:4a:b9:31:47:49:08:a8:7a:7a:f1:c8:
         cb:b5:78:7d:39:55:7a:15:06:20:6f:cb:bd:5f:fe:68:0f:7b:
         06:cc:8a:f3:da:b5:2b:f4:7a:f2:df:ba:28:87:74:a2:89:31:
         53:bc:9a:84:8e:44:ec:d4:03:cd:f0:34:5b:e7:0a:d4:33:2e:
         49:49:b9:09:22:44:05:a6:9e:93:20:2f:fb:d0:f1:05:2e:5f:
         0a:10:7e:ab:56:51:2c:88:75:35:da:b6:69:09:10:65:e8:86:
         ef:fb:63:88:61:3d:3c:dd:0a:8d:61:06:df:7c:a2:52:a4:03:
         19:be:ad:c5:93:2c:32:db:58:17:c1:b0:89:fc:d9:f9:bb:72:
         9f:d1:6b:b9:09:77:a1:0f:f0:9a:d8:fe:c1:ba:16:86:2d:53:
         78:a0:ba:6e:b9:6b:10:5e:f8:57:4f:0b:2f:54:a9:43:1c:e4:
         e4:18:fb:58:1b:42:33:1c:c7:73:27:a4:1f:8d:b2:1f:63:42:
         51:8b:e7:f6:60:bc:e7:53:9c:06:68:05:b8:a0:4d:eb:92:e0:
         8a:dd:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----