Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46f1f675-a90d-34dd-ba61-268b5b17bd27.roa
File:                     46f1f675-a90d-34dd-ba61-268b5b17bd27.roa (raw, json)
Hash identifier:          EYx4qZu5T5ttt9mzRsPrNijTlbtglHIlOsRRq8dAV54=
Subject key identifier:   D6:59:75:48:85:81:BB:8B:36:84:2A:B3:C6:11:73:85:E9:4F:21:49
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285844A3A1087E33BF268B13EC0140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46f1f675-a90d-34dd-ba61-268b5b17bd27.roa
Signing time:             Sun 21 Jan 2024 12:00:00 +0000
ROA not before:           Sun 21 Jan 2024 12:00:00 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     36383
IP address blocks:        104.135.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a3:a1:08:7e:33:bf:26:8b:13:ec:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 21 12:00:00 2024 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=7f25d7d0-1c5d-4ab3-b5e5-5dc57cb53e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:77:bc:48:55:ca:1a:f7:0e:25:7e:66:10:
                    09:b6:54:c1:ba:1c:4a:bb:04:44:80:df:3f:2b:d4:
                    4b:ee:54:4d:fd:f6:f7:dd:fc:62:9f:d3:19:4a:70:
                    65:c9:c0:3e:42:bd:e4:8d:b2:14:79:65:d1:be:5a:
                    bf:9f:80:a7:29:9b:f5:3f:8a:56:45:55:8b:42:16:
                    12:de:e2:1e:0b:ea:41:9c:3d:26:46:54:af:d9:fb:
                    28:49:4f:95:b5:6c:24:ec:1a:82:e9:0e:8f:e9:e2:
                    c4:5e:ec:58:ae:fb:31:06:61:78:96:f1:14:bf:a8:
                    7a:2f:63:44:41:90:c0:ee:18:ec:85:16:1a:b1:f0:
                    d5:fc:ea:b9:50:7e:d0:07:b9:e5:b2:7c:09:85:3c:
                    f0:9b:31:6b:5a:b3:03:1f:49:be:f7:2e:17:87:8d:
                    09:4c:e4:39:a7:99:88:72:a2:43:e2:a1:ce:39:4b:
                    2e:2c:1a:31:1f:0c:d2:9e:54:d3:b6:cc:47:6e:2d:
                    49:6c:1b:eb:92:91:96:ee:ec:94:02:f0:85:c8:d8:
                    06:80:e9:6d:ed:6d:1c:33:57:cb:b9:dc:3c:7d:72:
                    71:4e:d1:70:ed:25:ad:f0:31:80:97:53:e1:f5:0a:
                    a8:ad:e4:5a:84:5a:7a:f1:2b:8e:8d:92:92:9b:5a:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:75:48:85:81:BB:8B:36:84:2A:B3:C6:11:73:85:E9:4F:21:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46f1f675-a90d-34dd-ba61-268b5b17bd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:85:1c:c4:86:c7:f9:82:c0:1c:f9:39:e2:01:df:cb:7b:a7:
         64:b8:96:e9:cc:e7:fa:95:7c:c8:f4:08:62:b0:e3:2a:8c:0c:
         e9:e9:38:b9:b3:f0:36:ac:83:a2:5e:75:4e:49:e6:27:a8:43:
         af:47:45:c7:1d:c0:9c:c6:78:99:dd:6a:c6:c2:73:77:86:4e:
         c5:95:31:52:58:41:c1:06:41:01:4a:b9:56:5b:2d:f3:0a:08:
         30:85:48:8c:6b:6e:88:b6:8d:13:60:82:88:7a:36:13:e9:ec:
         76:ff:e2:ab:9a:c3:68:ab:67:d3:e9:47:36:68:fb:2f:62:d6:
         98:83:a1:fe:f4:6e:26:d4:c2:b3:43:ae:12:41:b7:31:a1:20:
         4e:49:e3:0b:3b:c1:07:71:1b:4a:b2:bd:b6:e1:4e:5d:ad:02:
         47:57:08:01:71:c9:72:31:90:e1:32:fc:1e:fb:d5:91:06:e1:
         8f:46:00:40:02:3a:5e:bc:fa:00:9a:d2:eb:20:a7:8f:59:f4:
         7e:f8:01:b7:08:02:51:0b:3f:88:04:cd:2a:2d:95:fb:77:b3:
         13:72:f1:75:c1:fe:9f:cf:c4:68:9a:17:ac:e3:29:81:97:8e:
         5b:62:8b:a7:20:66:0f:66:05:07:25:dd:f4:4e:19:2f:99:2d:
         c3:64:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:01 2024 by rpki-client on console-ams.rpki-client.org