Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20ae946d-6452-3bfc-b924-6195f62c5967.roa
File:                     20ae946d-6452-3bfc-b924-6195f62c5967.roa (raw, json)
Hash identifier:          ECgEjoTGWQ3a3sMJYImbfIkd+M+5KQNU2Lrc0fn3twg=
Subject key identifier:   64:E3:ED:54:59:7B:49:D5:46:78:47:22:C0:9E:57:DE:4A:79:DA:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FAA50D4CDAA5F226C5D480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20ae946d-6452-3bfc-b924-6195f62c5967.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:a5:0d:4c:da:a5:f2:26:c5:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7d26afe1-581b-4b15-bbde-db4e169b65a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a0:a9:8f:3f:80:43:7b:7c:d2:50:ce:3f:b7:
                    6e:aa:92:d6:6b:ed:07:71:80:cc:09:df:c0:e4:29:
                    0f:3b:f5:cd:8a:68:b5:fe:59:fa:7e:d2:36:c0:08:
                    98:a4:70:d2:35:0a:46:aa:af:34:ae:cc:82:33:c2:
                    28:85:53:3a:01:89:a0:af:46:5d:a6:7c:2b:2e:91:
                    4d:18:22:1b:26:bf:30:58:b1:e4:84:78:58:d7:2c:
                    65:a8:c9:6c:ae:b4:7b:56:72:83:7b:fa:b8:ac:45:
                    2c:bc:44:0e:f6:e1:e5:b0:6d:8b:84:0a:c0:be:6d:
                    c5:1a:38:2e:d8:35:27:5f:5e:92:61:d4:bc:60:a2:
                    55:33:2e:41:e6:19:e8:43:bb:d6:a3:cd:03:b3:1b:
                    14:9e:b1:1a:1b:af:de:ae:c7:f9:c0:24:8c:30:48:
                    0a:b9:eb:be:27:22:32:b3:e2:cd:8c:6a:be:c4:e2:
                    2c:e5:f7:1d:60:8e:34:94:97:2c:b3:10:93:48:52:
                    20:88:47:59:52:9c:c7:b1:1f:29:b1:41:e6:4e:7a:
                    4d:be:a3:bf:f3:11:25:ff:99:57:1b:f2:a9:4b:6c:
                    9b:96:7e:67:de:bd:aa:5e:f3:10:cc:99:8a:07:08:
                    6c:74:f0:91:48:44:70:80:1c:57:a2:df:27:a4:9b:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:ED:54:59:7B:49:D5:46:78:47:22:C0:9E:57:DE:4A:79:DA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20ae946d-6452-3bfc-b924-6195f62c5967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:05:d2:f8:0c:d5:df:4a:17:5a:75:cc:60:38:7a:02:59:87:
         de:74:8d:f7:f5:86:73:1d:1b:1c:0a:33:e0:07:dc:87:71:2c:
         fc:ab:5d:c0:37:9c:68:81:c6:b1:2e:6e:53:61:98:e0:79:e5:
         24:2c:84:af:9d:ac:4b:cc:a6:17:a5:23:8d:b5:ed:a3:73:21:
         da:57:30:c3:35:d0:c5:77:0b:f0:16:59:fa:05:b8:e3:6c:f4:
         3b:5e:99:c0:12:d0:cc:5b:d6:1c:4e:00:44:93:6b:25:22:a9:
         f4:44:bd:e4:ec:4e:49:6c:08:c4:e5:45:77:6e:f0:6b:82:3b:
         d4:f3:74:b9:fe:ad:80:06:62:63:0d:5c:93:d9:70:28:bf:3e:
         32:29:e0:03:c2:8b:a0:b6:14:bd:78:19:1a:20:87:2e:f6:8d:
         e3:2d:6a:0c:15:1f:6e:56:f8:05:aa:91:48:03:c4:ee:9c:2c:
         c7:8c:05:ab:5c:04:c4:54:e5:c1:eb:10:80:7e:10:eb:00:aa:
         8d:65:c3:e8:28:25:9d:cf:27:22:f3:57:97:0c:af:41:cc:5b:
         51:78:b4:f9:34:80:3f:17:e8:bb:12:2e:bd:a4:bf:1d:f5:74:
         fe:61:38:ac:d5:67:0e:18:de:08:5e:c6:fa:c1:f5:38:7a:6d:
         a8:9e:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:23 2024 by rpki-client on console-fra.rpki-client.org