Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/524eb729-72f2-36fe-9478-2c0e2c6dbc4f.roa
File:                     524eb729-72f2-36fe-9478-2c0e2c6dbc4f.roa (raw, json)
Hash identifier:          YP92HPM177kc6190wiW5iis2HNElNTOeo5qbPohMYlk=
Subject key identifier:   9C:EE:0E:49:7F:6E:EC:EF:71:9B:3D:EB:6F:49:95:B4:64:0A:CB:49
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584275C981AAB886899541EA5F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/524eb729-72f2-36fe-9478-2c0e2c6dbc4f.roa
Signing time:             Wed 05 Jul 2023 12:00:00 +0000
ROA not before:           Wed 05 Jul 2023 12:00:00 +0000
ROA not after:            Sat 16 Nov 2024 05:00:00 +0000
asID:                     36411
IP address blocks:        104.135.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:75:c9:81:aa:b8:86:89:95:41:ea:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  5 12:00:00 2023 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=892d6a1d-768d-44e4-afcd-5f6beade3572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:f8:46:6c:30:1d:2d:62:60:f6:db:78:92:
                    c2:e1:2f:73:8a:70:d7:7d:29:4c:fe:61:42:f0:24:
                    49:a8:c1:e1:71:1b:c7:13:38:bb:04:35:bd:58:3f:
                    ed:aa:f4:c4:4a:8c:60:04:6b:92:88:39:c9:31:11:
                    89:35:e9:00:5c:a9:44:b1:19:bd:87:9a:82:42:05:
                    6a:e4:12:ba:bc:11:8f:45:e0:26:7b:17:e8:3a:9f:
                    9a:ac:48:95:84:b0:03:5a:55:07:97:da:fd:f7:c1:
                    d1:df:84:4a:1c:91:27:4b:87:3e:e2:00:ed:ee:c5:
                    15:fe:7b:f9:e3:69:7e:2a:81:00:e4:7e:22:1d:f8:
                    3b:8b:14:91:27:ed:33:d8:4d:9c:75:31:24:c6:39:
                    78:2f:e1:aa:f8:d1:32:4b:ea:df:81:2b:a4:d9:aa:
                    71:5b:82:c8:8d:4c:eb:10:6e:12:19:63:3c:94:b7:
                    55:6f:f1:74:25:eb:ac:9d:2b:b8:84:18:00:21:33:
                    0d:fb:4e:b9:5c:7f:aa:b0:23:da:b1:10:b8:51:0c:
                    20:59:66:99:a6:97:92:4d:c2:00:1d:82:98:7d:7a:
                    31:53:a5:e7:bb:26:ee:5c:67:52:a1:73:5d:f9:7a:
                    3a:e1:2c:7d:4d:3e:62:9f:a9:e7:e9:cc:9c:c8:24:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:0E:49:7F:6E:EC:EF:71:9B:3D:EB:6F:49:95:B4:64:0A:CB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/524eb729-72f2-36fe-9478-2c0e2c6dbc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:76:18:5b:fe:80:4e:13:91:e1:b4:49:58:8e:fa:56:58:16:
         0f:d6:ae:ac:72:a3:d4:78:88:1b:dd:d1:15:b0:2c:ff:f0:82:
         34:55:87:35:a4:e6:e1:68:e7:9b:6f:b0:e1:20:7d:28:fa:b1:
         0d:52:2c:69:79:9a:57:47:07:ef:12:56:c4:a0:81:48:c5:5f:
         b2:48:bf:06:0a:c6:27:32:70:76:b7:2c:8c:a5:f7:3c:9c:04:
         59:c6:d3:a4:9f:cf:d6:f9:42:cb:c3:de:bf:f5:92:3c:d7:9b:
         9f:d3:66:58:be:61:f8:88:90:50:c3:d9:52:b9:2c:d0:44:18:
         f6:44:1d:f7:30:74:0f:3f:ea:12:b5:99:10:19:d3:df:ec:85:
         0c:64:5d:de:e1:e1:d9:b5:e5:76:8b:0a:24:dd:71:03:b0:4f:
         50:c0:9e:d6:35:6a:d9:dd:d9:f9:f8:dd:c6:83:2b:7f:08:12:
         98:b5:6d:1f:ec:3e:e9:41:72:86:87:0f:f0:87:e9:f3:40:46:
         8d:9a:1a:b5:b3:75:05:77:0c:1e:1b:44:52:1a:e3:60:2b:92:
         c5:d7:18:bc:db:39:9e:cc:97:73:3c:ed:13:e6:b5:2b:b5:54:
         0b:19:f8:86:42:6e:4a:3f:ac:4d:f4:5b:16:ac:4d:f3:66:a4:
         93:e2:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:26 2024 by rpki-client on console-fra.rpki-client.org