Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdd0feb7-9417-39ab-af57-0ad740f21af7.roa
File:                     fdd0feb7-9417-39ab-af57-0ad740f21af7.roa (raw, json)
Hash identifier:          gLBNp2/7Zn2vVTVrp3LPok/RAKKaC7MFErPIzBNaDOU=
Subject key identifier:   1F:2A:BC:17:B8:9B:C7:8E:AA:D1:14:CA:7F:77:D3:50:D1:EA:35:3A
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F4328584563F3008C9E11CE24FBA33958
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdd0feb7-9417-39ab-af57-0ad740f21af7.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     26968
IP address blocks:        199.58.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 01:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:00:8c:9e:11:ce:24:fb:a3:39:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=9ec6392a-b3ad-4525-8743-2ed8ed952635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:27:18:05:69:4d:c5:e9:b4:38:d5:b2:b4:
                    0a:4d:9a:1f:b9:a2:93:1a:6a:eb:cc:f0:92:54:c2:
                    87:ba:4d:59:24:22:fd:78:d8:78:87:6a:2d:16:96:
                    84:60:d7:4a:0c:77:cc:9e:1c:65:dd:72:87:9b:08:
                    e5:4c:06:10:b7:6e:73:f5:85:51:e3:38:2e:dc:c5:
                    f7:72:06:c6:93:2c:72:53:2b:c2:f8:0f:3e:22:0c:
                    db:e2:d8:67:f0:05:69:bf:fa:4e:89:5d:df:e9:2b:
                    71:0c:87:72:92:60:bb:9b:d9:c8:18:c8:7c:9a:a3:
                    c6:03:a7:04:71:94:c4:3a:7b:ae:e7:9c:01:45:6a:
                    98:1f:9b:2a:43:63:96:d7:e4:58:98:b8:9f:49:b8:
                    d2:85:54:80:ca:97:f3:fc:ba:4e:87:ea:82:38:79:
                    f6:0b:60:44:d2:f6:ef:aa:a2:4a:f8:36:2f:2d:f7:
                    ef:ff:a3:11:01:e7:5f:78:f4:20:e1:2a:f1:14:79:
                    33:d9:6c:a6:bd:3a:a1:63:3f:b7:48:ab:c3:a9:d3:
                    63:c3:82:f8:93:f4:ed:5d:70:cd:64:38:a1:ab:00:
                    66:5c:97:92:82:e6:11:3a:f3:7c:8c:3a:01:87:7b:
                    61:4c:a8:9b:a1:30:c4:2c:14:26:39:12:cd:dc:c4:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:BC:17:B8:9B:C7:8E:AA:D1:14:CA:7F:77:D3:50:D1:EA:35:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdd0feb7-9417-39ab-af57-0ad740f21af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:43:4e:6d:9b:92:85:f0:97:08:b9:ec:41:ce:9d:81:8d:
         10:a1:42:43:65:11:5f:3e:bf:c3:11:72:ee:c5:27:13:e9:f8:
         aa:82:8c:c2:ac:d0:d9:15:19:ba:e7:a5:cd:48:00:6a:dd:d1:
         fa:42:c5:8f:78:c1:c2:66:8d:dc:6b:b7:03:88:f9:0e:f8:17:
         43:5b:c4:86:b5:d9:ab:cd:ba:09:c5:ce:1d:48:c2:fb:51:8e:
         85:0c:71:98:25:8a:d3:18:8c:cd:21:d1:ad:a1:b4:34:8c:89:
         56:e3:a0:8f:ea:81:20:75:c9:e5:10:5e:d9:85:ea:04:a8:72:
         7a:76:06:31:09:20:f6:25:29:0d:8f:e5:f0:f6:35:c8:8f:d4:
         98:98:d8:0f:76:90:5d:46:67:1f:a3:8a:b2:85:27:26:1a:b0:
         5c:8e:d4:fa:ab:54:bd:8e:f6:98:02:b3:a5:78:15:fa:c7:b7:
         bb:8e:02:f4:00:09:43:6e:fc:5b:5d:56:03:62:8e:ab:35:b3:
         cf:94:fc:2a:ff:4a:b0:5f:ca:a0:b3:a2:a5:bb:2a:2f:d9:2c:
         f1:27:77:99:2b:57:40:64:3b:5d:a1:50:91:07:28:13:ee:60:
         19:ea:7e:dd:11:bf:df:24:49:84:a2:c4:6a:30:88:cd:32:30:
         65:04:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----