Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/247e06c1-35d9-3b43-aa1b-8ae223689d64.roa
File:                     247e06c1-35d9-3b43-aa1b-8ae223689d64.roa (raw, json)
Hash identifier:          HnITkUwmFOId3iFwBil0gXY+eZU8XZTlQLnYrWh3mKE=
Subject key identifier:   A6:A2:5B:96:D8:49:E4:0B:5E:B9:9A:CB:40:CA:F7:B0:BC:08:00:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A135B2E5EF472BD5CC0DC80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/247e06c1-35d9-3b43-aa1b-8ae223689d64.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:5b:2e:5e:f4:72:bd:5c:c0:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=88f207b5-a065-4297-b047-b6a2b40e5c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:04:8d:49:6b:40:49:c4:e1:c1:34:89:df:
                    42:54:4a:57:4a:f6:d8:a5:fa:25:cc:04:72:45:9c:
                    cc:a1:f2:f2:be:36:e9:1a:3a:90:35:ea:22:76:8e:
                    2b:c6:92:02:0a:dd:6c:fe:bf:ba:ee:50:b1:65:30:
                    65:64:6e:4f:19:46:28:b2:60:51:59:8d:c5:40:b8:
                    7c:8b:31:8d:4c:1c:f6:16:38:73:d7:b3:4a:79:ff:
                    3e:88:14:f0:c0:82:70:da:78:c2:51:d9:49:87:46:
                    79:ee:9f:0d:07:7d:a0:d8:1f:43:54:d0:e1:66:77:
                    c9:f0:93:8e:78:3e:b5:78:c5:c8:10:aa:c1:39:21:
                    02:cd:76:15:9c:e0:8b:a2:cb:38:d9:51:e3:fd:05:
                    54:c7:b9:8a:8f:be:8c:db:37:70:3f:39:e4:a6:1f:
                    3d:94:be:3e:c1:5c:a3:a6:bb:d7:eb:37:73:92:b9:
                    80:79:b1:c2:cc:bd:31:a0:f1:a9:74:48:a4:89:48:
                    c1:fc:a5:b9:64:b0:e4:c2:03:82:64:a7:fc:00:5e:
                    d9:8f:28:53:f8:ea:0a:91:dc:cf:6d:5f:22:8c:0c:
                    2b:a4:87:72:fe:a0:6f:84:91:95:54:91:72:ac:5a:
                    ef:ac:2e:7a:f3:ec:c1:c6:6e:ef:af:05:fc:f7:06:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:5B:96:D8:49:E4:0B:5E:B9:9A:CB:40:CA:F7:B0:BC:08:00:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/247e06c1-35d9-3b43-aa1b-8ae223689d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:0e:33:33:a3:74:a3:4f:32:9d:3c:3f:a6:3d:fe:99:d9:
         e6:6f:57:06:b5:d3:43:a1:8f:9b:4f:85:2e:08:ac:15:68:9c:
         d6:a5:3b:56:6c:fa:d3:9e:bc:3a:29:78:54:be:0f:20:18:c7:
         53:fa:bf:d9:ac:be:77:84:ac:22:5d:fb:be:f2:88:ce:7a:82:
         44:81:dd:6e:9c:1e:1e:78:de:07:72:0f:d2:f1:76:f3:8e:da:
         23:fa:16:55:5f:6a:1b:48:7f:df:43:ea:9a:81:ba:b8:c3:67:
         50:51:d0:91:7c:93:9c:67:74:2e:91:c6:9c:26:e8:ff:88:09:
         3c:ed:75:b0:04:23:fe:2e:68:7d:8e:05:2e:69:5c:4a:94:bd:
         52:4e:d6:b9:34:1b:3a:c8:7f:1b:82:f6:41:e8:0c:32:f4:f8:
         cc:0f:97:b2:a3:77:98:12:ff:7b:a3:a2:1e:58:d0:85:24:e7:
         11:c2:83:9a:87:d9:63:a1:be:cd:98:e0:e6:d3:e3:ad:7d:64:
         2a:2a:ff:4f:cf:18:95:f3:5b:12:1b:00:e2:71:4d:16:7a:43:
         b0:08:b8:d4:e9:b8:75:8a:4e:96:29:15:47:d8:b5:1e:c7:c3:
         27:d5:22:e4:83:d3:8e:17:eb:08:98:51:fa:d2:f9:8b:12:f5:
         52:cd:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:25 2024 by rpki-client on console-ams.rpki-client.org