Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/ab0dd360-acd4-390b-b434-9ea71f21f708.roa
File:                     ab0dd360-acd4-390b-b434-9ea71f21f708.roa (raw, json)
Hash identifier:          cRhjOYvKHWbjy2g4h+ifxHnLVRG3Hb39K8criPd76e0=
Subject key identifier:   75:93:80:87:85:C0:86:8F:30:6B:89:3D:A0:B4:CA:91:8B:EA:1C:5C
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F43285845E7292D90970D92E05D1DE980
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/ab0dd360-acd4-390b-b434-9ea71f21f708.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     39335
IP address blocks:        23.142.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 16:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:2d:90:97:0d:92:e0:5d:1d:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=6e94a231-e145-4284-9ef4-0e88dff0e28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:d4:d9:55:a4:16:56:76:41:64:2e:1d:98:
                    d7:a2:fb:22:44:7f:0f:a4:13:a0:91:37:f1:92:c7:
                    fc:92:59:5b:18:0a:86:9b:96:b8:0f:78:e1:35:ca:
                    b9:ee:c4:e1:7d:79:cc:84:86:52:b2:20:66:00:33:
                    f5:d2:d6:c1:0e:be:4d:dc:53:cb:be:34:09:c5:2e:
                    f8:c0:52:4b:23:f3:b9:91:26:ef:2b:e1:0e:90:23:
                    31:6c:45:03:dd:ef:b2:6d:01:c0:ab:fa:cc:1f:c6:
                    a4:10:0c:b0:52:f3:bb:87:5e:b1:ad:d1:b0:b9:40:
                    ea:3f:12:5e:11:ab:3a:36:2b:60:e2:c4:e7:40:e5:
                    ff:68:c5:a8:30:18:6b:68:72:1f:f3:2b:ba:76:68:
                    1b:a2:8e:89:a7:4f:5c:98:f4:fd:a2:53:e6:aa:af:
                    f7:d5:3a:c3:8b:33:5e:1e:27:02:1b:39:a4:b1:8a:
                    b2:e5:42:38:62:94:42:22:83:57:ba:ca:b4:81:cc:
                    2e:68:df:cf:e3:9d:e0:b7:00:6a:a3:99:91:06:84:
                    42:77:1a:59:e6:b2:50:8b:e9:3c:56:f2:f8:f7:25:
                    9e:73:11:c1:4e:c5:df:03:39:62:35:af:05:2f:82:
                    26:c0:1d:04:f6:82:9e:1e:4d:d0:f2:d5:8c:0f:ae:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:80:87:85:C0:86:8F:30:6B:89:3D:A0:B4:CA:91:8B:EA:1C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/ab0dd360-acd4-390b-b434-9ea71f21f708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8b:25:a1:84:a9:04:53:2c:84:a2:8c:48:0c:21:83:52:8f:
         62:36:c4:07:83:10:97:d8:16:25:b0:4e:c3:f0:71:8a:d4:53:
         b7:e9:a2:7e:51:64:bf:46:41:c4:42:3f:a3:b5:2d:ad:88:07:
         b6:ca:0c:00:d2:ce:9f:a8:8a:7a:d2:04:9c:92:9a:4b:00:29:
         24:35:1f:48:4e:b3:9b:3c:dc:e9:0c:c4:40:cf:0c:f3:56:c6:
         50:34:92:fa:68:49:50:28:e7:18:ae:1c:97:a2:e3:63:7f:f3:
         f4:b9:16:56:b9:a4:5b:50:fa:36:fb:1f:7b:4e:ef:1b:cb:9a:
         40:52:a9:3e:c9:c7:36:24:84:07:0a:c7:0c:98:d6:6f:30:87:
         f7:08:bc:24:a8:78:d9:f2:f0:e1:87:1c:75:de:78:e2:4e:d3:
         ef:e8:32:45:64:ca:1b:eb:d3:9f:46:e9:62:c1:7e:41:dc:93:
         2f:53:00:b4:2a:9f:71:1d:3a:90:04:da:57:f0:bd:5e:4b:16:
         4b:5a:8f:24:37:84:1a:73:ed:fc:d1:df:78:76:7b:db:fc:89:
         3b:fc:f6:8a:bf:da:0d:9c:64:24:15:e7:27:6a:b2:03:f6:e1:
         1f:76:52:e1:d4:4e:8c:86:68:db:a6:e2:ef:34:a9:46:4b:2e:
         51:9b:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----