Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa
File:                     2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa (raw, json)
Hash identifier:          Y7Ba+Ef4FH9KkQcnwTPuLImGQz2TGmKntZIWiIGsAlk=
Subject key identifier:   9A:E9:7B:F7:50:BD:DB:39:B5:AB:22:AC:D4:9F:3D:BE:B6:8D:CB:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A06624F5DE4A1C8893FD380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:62:4f:5d:e4:a1:c8:89:3f:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a29165c0-58f1-4c6c-8161-51b46c8f13d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:34:8c:65:24:1d:e0:84:16:aa:bb:20:30:
                    23:a6:9e:82:85:fc:81:a8:d8:1c:e3:2a:a7:85:91:
                    d5:57:35:e5:5e:cd:28:c7:75:bb:93:c5:79:65:16:
                    c1:50:a3:19:8f:92:17:65:96:a8:56:51:83:69:5c:
                    28:80:ee:b6:63:bf:d2:08:57:4a:51:3d:13:3f:73:
                    0c:4e:cf:92:c6:8d:9d:9b:f9:6f:31:18:11:30:dd:
                    2a:8d:d9:6e:ea:c3:c9:8c:31:16:3e:21:8e:28:0c:
                    92:99:d2:c1:cd:7e:5b:dc:cc:b2:ae:c7:08:bd:e2:
                    82:48:97:d5:df:bf:ce:9d:d6:cd:6c:6e:b2:b2:01:
                    68:0b:f8:19:77:44:c9:63:93:78:c3:57:7d:ae:f6:
                    86:d5:2f:c0:6a:55:0f:9e:41:36:15:04:93:3b:ab:
                    0d:04:ea:ff:1b:44:09:c4:a2:c5:19:40:6f:cc:7c:
                    72:89:e8:e2:74:de:2e:08:eb:49:c6:83:a1:db:0d:
                    bc:a7:3e:b0:79:b1:89:ac:6a:ee:bd:67:f4:50:d8:
                    f2:71:46:c2:36:bf:bc:c6:b7:4d:2e:8d:d3:4c:4c:
                    eb:7f:4d:04:05:98:4a:e9:50:ce:c8:92:a9:de:87:
                    f8:40:3d:63:65:f4:89:be:ee:4c:50:a5:17:07:d3:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E9:7B:F7:50:BD:DB:39:B5:AB:22:AC:D4:9F:3D:BE:B6:8D:CB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:e4:ca:4e:83:d3:af:3c:7b:31:22:86:07:f9:1c:19:cc:
         95:87:25:ba:91:e9:e1:15:56:31:2d:00:12:fe:da:9e:53:79:
         28:20:11:61:87:e7:5c:c5:84:5b:ce:48:18:2b:53:15:01:51:
         1b:85:b2:a9:36:11:f2:77:b8:4f:5a:85:7c:f9:f4:95:8d:e3:
         84:24:70:2e:59:09:98:24:77:77:92:be:f1:f7:56:1f:39:2a:
         e6:f7:78:4f:99:94:b4:d7:d3:bd:5d:b9:89:d8:d2:e7:6b:6b:
         6d:b8:62:64:ae:b3:0b:4f:0c:69:aa:b3:fa:97:15:94:ce:3c:
         7d:27:2c:7f:f1:48:bc:85:fb:e4:f1:8b:d0:2c:52:17:e7:89:
         5a:e7:02:56:67:6d:83:31:d2:4a:e3:9a:ba:14:d1:fc:e5:67:
         92:6f:c3:bf:25:98:fb:9d:7b:1a:23:55:ac:1b:7e:50:1d:b2:
         53:e1:b0:83:d2:b0:b6:45:05:fe:3b:7f:ba:da:e8:fb:0a:1a:
         b8:7c:24:a2:87:28:60:5e:a0:f3:0c:b9:ba:2f:c3:f8:b7:e4:
         32:36:af:43:aa:86:29:0f:00:a6:43:a0:f1:ba:dd:ca:7b:6b:
         2a:50:43:43:1d:64:ee:18:08:32:d9:6f:96:52:c4:b3:55:5f:
         16:ec:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:26 2024 by rpki-client on console-ams.rpki-client.org