Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00e9c7c5-e168-3ddb-bb05-d2693fb61fc3.roa
File:                     00e9c7c5-e168-3ddb-bb05-d2693fb61fc3.roa (raw, json)
Hash identifier:          tuZvcVfYG3ZRNxYkFb6C0TRcUzMyy4OO9BWkS9ra5Ro=
Subject key identifier:   49:51:A8:00:DA:62:02:75:0C:C0:52:42:63:46:47:30:81:FF:BF:05
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584275C96D9BF1F3691A1522DD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00e9c7c5-e168-3ddb-bb05-d2693fb61fc3.roa
Signing time:             Wed 05 Jul 2023 12:00:00 +0000
ROA not before:           Wed 05 Jul 2023 12:00:00 +0000
ROA not after:            Sat 16 Nov 2024 05:00:00 +0000
asID:                     36411
IP address blocks:        104.134.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:75:c9:6d:9b:f1:f3:69:1a:15:22:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  5 12:00:00 2023 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=5e55f1e2-382f-4be8-b852-ded21f46bb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:99:6e:ee:dc:c5:4d:2c:41:77:bb:11:07:
                    8b:51:2d:eb:38:8b:fa:0a:78:9d:6c:cd:6a:07:ac:
                    7e:25:6d:d0:5f:8a:4a:11:c6:ff:aa:78:c5:e6:ee:
                    c2:58:04:66:b0:5c:dc:83:62:27:00:45:de:23:09:
                    a9:c5:41:0b:69:23:8a:94:59:ec:61:89:e7:dc:95:
                    78:7c:df:b2:60:70:3d:89:c9:a2:65:f9:e7:b6:f0:
                    c3:13:fe:19:ec:cc:72:03:bd:6d:b1:11:01:3d:c8:
                    32:de:b1:2d:d1:5f:5c:50:da:e0:8f:d1:9d:b3:ac:
                    ae:5e:b0:c3:d2:21:1b:08:77:26:b6:8e:62:81:9f:
                    80:d1:00:1a:a3:90:63:6b:19:64:f1:e6:0f:01:c6:
                    a1:1e:ee:65:2d:c9:63:9b:53:8a:83:53:37:b6:4e:
                    93:c2:ba:16:27:5e:70:3f:76:e7:3b:a4:c2:1c:86:
                    a8:ac:8c:67:7d:47:1f:c4:4d:db:c6:af:00:94:d1:
                    5f:a0:21:1a:4b:06:23:b6:3a:99:4b:b0:7a:40:f9:
                    29:6e:d9:4e:8f:6e:99:89:ba:ad:fa:cd:60:c7:e2:
                    f5:d0:e1:fd:21:26:69:ab:77:56:69:66:c8:05:df:
                    e5:94:b8:f3:1f:00:de:8a:02:1b:3b:9b:ef:12:44:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:A8:00:DA:62:02:75:0C:C0:52:42:63:46:47:30:81:FF:BF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00e9c7c5-e168-3ddb-bb05-d2693fb61fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:db:83:22:d4:07:58:9f:33:12:d8:a5:44:4a:2a:20:cf:18:
         15:1d:e1:ce:b1:e2:f1:22:56:44:2e:15:a6:e3:b3:6b:9d:13:
         00:43:02:12:84:ba:62:6c:bb:ff:ef:01:19:c0:69:0a:1b:b1:
         ce:85:67:b5:c9:cd:ad:90:92:c9:1a:96:41:96:6b:25:53:4c:
         81:15:7e:1c:ef:2f:32:a4:f3:aa:a4:3a:e6:b6:c0:f4:00:ab:
         02:17:cc:24:13:bd:d3:77:aa:52:ac:61:83:18:f6:20:ea:34:
         7e:9f:88:1a:b9:c4:ed:35:98:0e:c8:ea:c2:08:46:ec:2c:e4:
         7d:a7:19:03:5c:1a:d4:8a:ed:72:59:0e:d4:71:38:f1:b1:b4:
         47:cf:66:50:ff:26:95:d8:09:5c:01:20:66:3d:51:04:48:50:
         68:e8:78:b8:1b:b8:51:cf:c8:d3:d3:02:3b:27:fc:13:b8:80:
         f9:08:ee:8a:33:a4:69:27:32:25:9b:22:69:51:fb:83:31:37:
         dd:bf:fd:36:2d:1c:5f:a8:1e:0e:82:c7:7b:26:bf:04:3a:f1:
         66:4a:6b:98:65:a4:e8:b3:f5:fd:f8:f6:b1:fc:9f:0d:39:70:
         0d:64:7f:2f:bc:24:5e:ff:eb:3c:9e:4a:b4:8a:3c:41:d7:17:
         3c:c7:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:23 2024 by rpki-client on console-ams.rpki-client.org