Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/069c77cd-fade-384f-8a27-cd55ac9e2e7c.roa
File:                     069c77cd-fade-384f-8a27-cd55ac9e2e7c.roa (raw, json)
Hash identifier:          cvoCmq7sSJPets2zLFN3G3Ummy04GISPoxcCmm08uns=
Subject key identifier:   9F:32:AC:53:76:75:06:ED:6E:22:18:1B:BF:9E:4D:89:02:F5:A9:37
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0FD6DEA45F6D1F363C70B8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/069c77cd-fade-384f-8a27-cd55ac9e2e7c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:d6:de:a4:5f:6d:1f:36:3c:70:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=beb0a403-e349-4b9a-99ca-3f407a814b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:98:04:7b:d7:b5:61:cd:7d:04:06:13:76:
                    d7:c7:e7:39:62:7d:7f:09:81:19:00:ae:d2:81:42:
                    17:45:f6:a2:2b:a2:b0:67:40:fa:3a:aa:fa:2e:1c:
                    5f:11:46:b0:94:8f:44:a3:78:08:13:b1:d0:a9:5d:
                    bf:be:ff:8b:60:8b:34:4f:1c:89:d0:25:d5:23:5e:
                    da:9c:27:14:30:1f:f1:0e:f5:ee:f0:b5:0e:16:3a:
                    d5:f7:5b:77:37:54:f7:e5:33:b4:89:02:67:04:bc:
                    8b:7d:3a:44:f6:f5:2a:01:1a:0c:a0:46:3f:3b:f6:
                    f4:ca:fa:3a:04:5e:62:a9:26:7a:bf:fd:d9:ec:79:
                    0f:64:d6:7f:da:10:5c:06:26:f3:e5:ac:27:ff:2e:
                    9c:d5:a8:53:9b:26:68:93:9d:3d:2c:68:c8:f1:a8:
                    c1:6c:33:19:c7:c4:42:e7:3a:cd:78:87:d2:b6:3c:
                    56:9e:a2:ce:ae:73:d0:24:41:9e:1b:9d:da:33:2b:
                    8f:63:80:09:85:93:ca:73:17:f8:88:13:76:2f:e9:
                    73:13:1a:fd:37:e9:e5:6c:01:91:ab:26:05:0e:4c:
                    6f:9b:fb:1c:06:02:ca:fe:e9:56:3f:df:f3:61:62:
                    fd:b9:ce:af:59:13:d0:96:e8:f8:53:67:1a:66:30:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:AC:53:76:75:06:ED:6E:22:18:1B:BF:9E:4D:89:02:F5:A9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/069c77cd-fade-384f-8a27-cd55ac9e2e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:63:6e:1f:78:ee:1c:6b:87:dc:54:dc:b0:52:cc:cb:2e:
         55:3f:be:0a:fa:b1:e0:60:9f:13:9d:db:2d:db:3d:18:d5:28:
         8d:fc:e3:65:9d:99:cf:ab:26:4a:e4:46:00:9c:16:07:8b:07:
         0d:7e:8d:c4:11:98:0e:b1:47:56:7c:fd:f0:f3:b2:3e:c5:4a:
         57:0b:b8:b0:41:08:66:40:fe:14:3c:56:2a:11:32:79:c4:3e:
         a4:7e:e9:95:68:ef:57:76:97:d1:f1:d7:c5:f5:32:6e:74:e9:
         12:37:dd:0f:4f:05:7d:a1:ae:a0:ef:03:ea:56:52:84:ce:f0:
         3e:75:4e:22:2d:f3:3d:d0:dc:28:f4:a5:70:07:d0:28:b7:60:
         05:2c:16:43:19:8d:a8:98:87:99:04:29:19:2e:fb:d0:30:41:
         cb:f6:3d:66:13:81:86:82:e9:72:86:df:e8:30:09:80:a8:09:
         37:ec:6d:64:db:15:e3:d8:8b:ea:63:7b:97:be:5c:45:08:d0:
         8c:e1:9b:5b:a2:d7:05:3c:9f:85:f8:f7:11:44:f2:fc:7c:fa:
         06:75:cc:7c:c2:14:19:ba:66:53:77:c5:84:18:66:bc:31:e9:
         5f:4c:07:17:4d:70:c1:5c:d3:94:de:5f:4e:8b:6f:b0:22:33:
         a6:91:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:22 2024 by rpki-client on console-fra.rpki-client.org