Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4fc336b8-a975-330a-9160-3879ecedf4ef.roa
File:                     4fc336b8-a975-330a-9160-3879ecedf4ef.roa (raw, json)
Hash identifier:          bVC5Py/wkiRsKFgt+SG7ymY6tPdWGCJQ3QLwZD8ubA4=
Subject key identifier:   63:08:0F:1A:21:A3:B7:C6:35:24:F6:F1:64:01:2C:14:09:0B:26:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A238FD0ACAB88A221384880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4fc336b8-a975-330a-9160-3879ecedf4ef.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:8f:d0:ac:ab:88:a2:21:38:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c2ddce6b-ca7b-4279-9cb1-24f25e78cfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:23:59:36:ce:b0:aa:c2:a7:ed:b3:e5:e6:
                    b2:81:fd:58:26:ba:fd:8d:33:45:8b:f6:1f:08:2a:
                    a2:5d:91:4d:b6:af:9f:79:5b:2f:2b:b9:f1:d0:f1:
                    be:05:22:ae:3a:6a:3b:65:68:86:7a:f3:72:5b:e5:
                    19:c6:81:94:a6:1c:b6:f5:d4:22:3e:88:00:51:98:
                    83:f9:d5:04:18:50:89:c4:06:78:ce:16:07:ff:ad:
                    58:9a:f8:33:13:f5:5e:b3:db:e1:66:4d:05:34:c1:
                    a7:e5:93:dd:a3:20:c9:59:01:77:3e:28:7a:95:07:
                    99:0c:d4:53:eb:b3:fb:e9:7d:ba:5c:59:89:02:6e:
                    6b:47:36:76:a6:28:59:28:f7:20:40:f0:14:36:66:
                    94:ec:d9:5d:f3:7a:08:6b:e2:d4:0d:5d:2e:b2:57:
                    a7:7f:ea:51:6a:c4:3c:7b:41:bd:c9:aa:05:64:89:
                    2f:d9:9f:9a:3c:e8:0a:60:9b:9b:5e:5b:b3:88:95:
                    85:a3:9e:b3:07:76:98:d7:e4:78:56:23:cb:84:4c:
                    e1:a9:e3:d9:b4:dd:b9:b5:23:a7:bf:b1:cb:86:78:
                    e1:50:6d:dd:ac:e6:3b:58:57:48:48:b4:08:dd:68:
                    db:3f:32:2f:88:8b:25:1f:0b:d6:16:08:6e:9f:b2:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:0F:1A:21:A3:B7:C6:35:24:F6:F1:64:01:2C:14:09:0B:26:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4fc336b8-a975-330a-9160-3879ecedf4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:fd:cb:ab:08:6d:25:e1:60:94:8e:cc:22:4a:76:b7:9f:
         ee:c9:69:81:18:6d:1c:6f:c5:e8:e4:7e:d5:92:ee:61:45:07:
         0e:dd:1c:bd:70:28:64:61:af:43:c0:9e:ae:67:9f:86:d2:b5:
         03:16:8b:e7:6a:e0:69:a3:55:55:21:d5:ce:fb:e6:01:e8:13:
         8d:b8:ce:ca:f1:55:ee:3b:94:c3:a7:c8:cc:b0:14:60:24:cc:
         56:09:15:3b:4b:15:44:89:4a:a9:fb:2e:4a:a6:a1:df:cc:30:
         8e:3f:e3:89:ba:50:9c:b2:48:12:e1:62:77:79:9b:29:7c:d0:
         4f:a2:19:6f:a7:5a:70:75:3d:6c:40:26:01:d6:7a:ac:22:85:
         9f:a9:6d:82:51:3e:9a:1c:0b:5b:17:ca:3c:cc:d2:46:78:45:
         07:a1:e9:a0:70:d8:a5:21:d2:a3:e4:91:af:18:ed:7d:48:b7:
         81:65:d0:4d:59:a1:49:b3:83:31:55:49:3d:f2:f7:40:1f:13:
         55:64:7e:bf:50:c5:08:96:c5:6f:41:b1:84:12:92:ed:c8:64:
         3b:b8:01:b1:e9:63:37:9d:39:be:c2:7f:2b:79:ac:aa:5e:86:
         72:ae:63:af:aa:f9:cb:4b:78:09:34:04:1b:f3:e1:91:a5:7a:
         a1:9d:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:26 2024 by rpki-client on console-fra.rpki-client.org