Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/71d26dec-531f-3d69-a9db-f50ba0459ad2.roa
File:                     71d26dec-531f-3d69-a9db-f50ba0459ad2.roa (raw, json)
Hash identifier:          FOT+FLWVth+XgKej20Z3iZVVEWGBxj/saUhC8wDhyFY=
Subject key identifier:   E2:66:2C:18:56:C0:42:E8:26:B8:3D:5C:D4:7C:2A:6C:A6:AE:B6:A0
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584617C756CE7756C392C7D29E38
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/71d26dec-531f-3d69-a9db-f50ba0459ad2.roa
Signing time:             Mon 03 Jun 2024 22:58:15 +0000
ROA not before:           Mon 03 Jun 2024 22:58:15 +0000
ROA not after:            Sun 01 Sep 2024 22:58:15 +0000
asID:                     33387
IP address blocks:        23.133.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 18:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:17:c7:56:ce:77:56:c3:92:c7:d2:9e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jun  3 22:58:15 2024 GMT
            Not After : Sep  1 22:58:15 2024 GMT
        Subject: CN=d3a7829b-61f4-4518-8652-9178e98194ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:74:e3:c3:4a:5d:f0:94:ea:aa:90:65:0e:
                    8f:02:22:c2:0b:d9:79:cd:14:34:d4:5b:27:90:ff:
                    67:86:d3:d8:dd:85:fa:52:f9:26:da:15:46:0b:7f:
                    44:60:3e:67:c3:1f:ad:45:6b:1d:7f:ed:99:cf:76:
                    36:cd:f1:d4:bc:3b:0c:d1:85:39:47:a0:28:05:0d:
                    c9:13:84:66:2d:77:fa:36:c2:2b:f8:36:94:3e:ff:
                    e0:43:86:95:3c:10:cf:11:d6:ef:38:87:aa:a8:e6:
                    93:72:7d:fe:f6:74:e5:a3:37:a9:d2:83:f2:89:4e:
                    a9:59:85:7e:b5:b1:4e:cb:5d:4f:bd:b0:f7:b9:28:
                    62:ec:e4:7a:ea:2c:ab:b6:a1:08:7f:af:fb:6d:4c:
                    2b:89:2e:4b:93:a9:b3:41:e2:f4:94:57:3e:8e:ab:
                    e9:e3:35:55:02:66:97:75:bb:25:5d:c7:31:1e:ed:
                    82:ec:ab:3f:2a:f9:9d:63:26:36:df:64:5c:61:30:
                    29:ee:b8:54:64:c2:54:44:e1:41:29:c7:b0:c1:cd:
                    2b:b3:dd:44:94:ff:32:b2:ac:0a:06:42:2d:be:cd:
                    05:f3:bd:68:c0:ac:24:91:19:16:9d:e6:92:6a:3a:
                    f5:f9:52:70:0c:da:6c:9f:ac:4e:00:8d:54:c0:60:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:2C:18:56:C0:42:E8:26:B8:3D:5C:D4:7C:2A:6C:A6:AE:B6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/71d26dec-531f-3d69-a9db-f50ba0459ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:3b:f3:d0:dc:71:40:7f:da:50:2c:0d:19:27:60:c5:75:
         a3:09:19:05:4f:45:a4:4b:84:3d:b8:a6:9f:bc:7b:63:15:19:
         aa:f6:e3:e9:c2:95:d3:27:e8:49:83:cc:b2:80:13:e1:33:ec:
         79:8b:19:c6:f1:8c:3b:c9:84:e3:bb:52:74:f3:d7:e2:59:7c:
         71:0e:a8:c2:62:39:a4:55:0a:44:9f:f9:19:5b:47:c2:2d:aa:
         ba:4f:b6:1a:ac:88:5f:b1:26:ae:02:a3:84:d6:73:6f:78:a5:
         19:ce:19:69:92:2a:5e:94:da:ca:04:bc:db:02:5d:90:af:9a:
         7c:77:b5:09:1b:4c:f7:26:fd:7c:ad:b3:c6:02:f9:1c:de:8e:
         e4:7c:dd:45:a5:1d:d7:2c:b9:7a:96:96:bc:24:12:0a:e3:ae:
         53:ac:bb:67:9b:d5:fc:88:66:ec:67:69:70:eb:bd:d5:87:d0:
         e8:21:96:3f:99:f4:79:a1:94:63:cf:87:c0:d9:3c:0d:46:05:
         6d:06:10:a7:86:47:87:23:76:c5:ea:4e:42:da:27:a6:94:26:
         44:eb:f5:69:4c:66:a0:d5:5e:2f:d3:c2:82:07:08:ee:c4:10:
         de:d6:69:7f:bb:0e:cb:61:fe:70:b5:97:9f:d6:48:f1:c7:43:
         58:90:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org