Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa
File:                     52945e23-e552-3059-9ec1-86164977283f.roa (raw, json)
Hash identifier:          NHriA2IrnCM/BFBuLBYgNtpkgwsJxTIHa92CWblMznc=
Subject key identifier:   4A:1C:62:2F:EA:95:9E:D2:B0:0F:98:50:6F:3D:85:19:53:BE:08:2A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A14F5063EA3E9530F71A000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:14:f5:06:3e:a3:e9:53:0f:71:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2b97588c-6f25-4098-97ac-20ed86da263f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:21:28:76:0a:1c:be:38:ba:44:44:3d:8c:
                    44:90:11:06:db:42:0b:3b:04:ba:c5:7e:84:77:8d:
                    3f:60:9c:d1:fb:e9:5f:fa:15:ab:13:13:81:d9:c2:
                    df:c6:39:23:ff:41:c1:0d:aa:d1:7b:29:0a:7f:8b:
                    54:3d:82:79:27:25:bb:e8:4b:12:80:a8:78:5f:cb:
                    43:54:76:6b:92:16:a5:85:92:40:2c:e3:4b:9e:40:
                    39:57:74:f4:59:9f:d8:e8:39:0b:7c:63:e3:97:de:
                    1c:04:67:71:f7:0d:64:28:ad:d9:9c:d1:aa:fb:a2:
                    40:27:cb:a6:c9:cd:07:93:07:33:fc:06:6d:2e:d4:
                    07:c9:09:8d:07:4c:41:81:d7:d5:91:b2:a3:56:d5:
                    7f:20:33:2a:e5:3f:58:72:55:60:72:0e:ee:8c:32:
                    1c:3b:95:d6:e1:0b:ef:4b:b8:cf:ac:e7:77:65:fb:
                    c0:e2:19:ec:d1:7e:f8:83:08:b4:b1:5b:34:be:a8:
                    17:49:87:41:7b:e0:11:1a:4f:a8:7f:04:b4:6d:a1:
                    7b:c5:85:48:87:f9:f4:1d:a6:3e:cc:af:01:ae:5f:
                    a9:f1:e8:18:77:7d:6c:ae:0b:5f:6b:5c:f9:4a:99:
                    6d:8e:0c:f3:ec:c8:2f:69:01:c9:93:77:6b:8f:4a:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:62:2F:EA:95:9E:D2:B0:0F:98:50:6F:3D:85:19:53:BE:08:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:30:eb:13:ed:09:c3:25:c7:69:c3:1a:4c:1d:a4:dd:b1:51:
         b1:07:b6:1c:82:3f:fa:06:05:b2:6c:58:2b:9f:80:80:69:10:
         e6:ea:37:5f:63:58:8b:7e:c6:9b:62:5c:33:2d:bb:84:26:5c:
         29:8a:d2:a5:55:54:de:3b:9a:df:59:85:48:77:6c:35:3d:d9:
         28:8a:9d:12:ec:58:3d:3d:2f:42:61:9a:8f:ae:f8:62:20:61:
         6a:e1:64:d9:29:f4:e4:2f:6c:1d:6e:d2:e9:c4:cc:b8:b6:d9:
         16:56:64:9c:e6:a1:5e:40:6c:b7:a8:4a:7b:57:de:88:0f:fa:
         76:5b:d7:f6:8d:74:a6:5e:3b:5b:8b:68:b8:db:37:62:ce:16:
         97:32:33:3f:c6:e6:e9:34:6b:b5:bd:ff:23:69:fa:2b:a5:f7:
         86:f9:84:c5:74:8b:57:62:92:f9:37:ca:4a:c2:af:9b:06:dd:
         ca:55:d2:b6:1d:1a:80:b8:8f:ec:8e:04:9c:56:22:8b:56:56:
         cb:b7:f4:48:b0:8a:6a:4f:f4:44:a3:75:26:72:15:2d:38:32:
         d2:7f:17:bd:40:0c:2b:55:03:fe:93:9f:e3:02:80:93:9b:b8:
         b8:4c:5d:27:d0:6f:ff:53:b6:a3:3f:9c:9f:b2:87:08:fd:52:
         95:77:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:27 2024 by rpki-client on console-ams.rpki-client.org