Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51344ca7-b56c-3ade-8d67-5a8f3932cacc.roa
File:                     51344ca7-b56c-3ade-8d67-5a8f3932cacc.roa (raw, json)
Hash identifier:          gGlQSweaopm7vIGA/GayWsWOvh/k4So4q/JDxJSzgeg=
Subject key identifier:   D1:36:0E:9D:2E:E9:96:20:57:C4:C7:4A:88:20:BA:36:97:E2:E5:7E
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584531B29CF294EEC3C72DCC8500
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51344ca7-b56c-3ade-8d67-5a8f3932cacc.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     400402
IP address blocks:        98.159.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 11:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9c:f2:94:ee:c3:c7:2d:cc:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=e392eeb6-8f7e-45a8-ba0c-9fbc12973d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:9d:56:f6:25:21:a5:d8:8a:8d:9d:9f:55:
                    3c:81:c0:12:c7:43:11:c5:0e:aa:c5:fa:a5:ae:a6:
                    7a:1f:fc:bc:97:a9:70:8a:1c:83:38:09:8e:fa:99:
                    ac:7f:aa:e1:59:c4:e2:dd:21:eb:8e:3e:2a:16:f5:
                    e9:75:c0:8b:8c:51:c7:cc:65:d4:c1:69:d0:fa:fc:
                    64:87:cf:d9:ff:e8:c2:78:b3:41:f5:6f:ed:d5:85:
                    a2:76:7c:57:13:e4:4f:c6:bf:47:55:8b:1c:28:2d:
                    3b:7b:6a:bb:7c:5a:31:1c:ee:5d:65:bd:74:b2:02:
                    b6:93:7f:f4:9b:0c:72:e0:82:e1:62:1a:11:dd:4e:
                    7f:69:da:4b:7f:0d:60:03:e0:26:f7:10:4d:70:73:
                    06:9a:2a:33:e4:c4:c9:44:f1:46:f0:22:25:5a:70:
                    44:e2:2b:67:58:a1:51:c5:70:15:8f:00:fe:9a:7a:
                    d5:1e:d2:01:61:bc:53:b9:0a:8a:ee:ef:8d:5f:fa:
                    1a:70:92:6d:bc:87:cd:63:a2:57:7f:b5:3c:ec:27:
                    d5:4c:da:21:24:05:b4:5c:41:b2:e5:cd:c5:a8:ba:
                    0b:5d:14:d3:c8:bd:2b:b1:e1:a7:c3:89:ba:c7:a5:
                    a4:34:76:fd:50:87:fa:ac:fe:c3:12:8b:22:6b:d0:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:0E:9D:2E:E9:96:20:57:C4:C7:4A:88:20:BA:36:97:E2:E5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51344ca7-b56c-3ade-8d67-5a8f3932cacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:41:08:3c:9d:2d:2a:7f:25:9d:18:4b:03:f5:a6:19:62:24:
         10:4f:1e:33:d2:f3:c9:a6:d5:f7:79:f6:18:35:e4:aa:18:70:
         e8:dc:75:6a:41:3c:c9:93:78:98:74:72:07:a4:fb:be:8e:9a:
         cf:76:e3:d9:d6:ec:21:95:63:b1:7d:a5:a3:ff:a7:e1:82:ed:
         36:1a:89:72:d5:e3:b6:f5:70:f7:6c:9e:f5:4c:51:5c:37:84:
         d0:d3:14:b0:0c:ab:d5:2c:bd:b1:99:ae:f5:21:27:49:c9:a4:
         9f:88:48:36:b2:02:a0:13:ec:bd:b5:a6:45:27:8c:78:23:46:
         ef:cd:fd:24:82:0e:9b:52:32:c7:22:71:85:42:bd:1a:09:56:
         62:57:02:8d:4b:ad:50:50:8f:57:99:54:da:dd:6f:81:a1:c6:
         3a:4c:5c:e1:11:8d:c3:a1:e8:e2:ee:ea:18:83:8b:b9:90:84:
         d8:c7:e3:40:11:51:9e:2a:4b:b1:02:8d:77:0a:18:49:6c:52:
         40:0e:0e:ff:d2:10:22:97:fa:30:cd:c2:5f:95:49:64:ee:41:
         eb:58:97:5a:d5:0a:5a:df:85:5a:3d:de:77:cf:4a:81:f5:38:
         71:c3:22:96:5a:2e:3b:e3:1a:f2:ef:56:bd:b9:59:b5:46:0a:
         0b:2a:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----