Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/735b0aa8-b557-310a-9f0c-133a9234c8ee.roa
File:                     735b0aa8-b557-310a-9f0c-133a9234c8ee.roa (raw, json)
Hash identifier:          brxM/SRox904h6sKZS6CAI1kUbWloNeHDS/pW3EFTIg=
Subject key identifier:   6B:F6:62:39:D5:15:67:3C:34:88:FB:13:51:E8:6A:8E:BE:62:89:09
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A15652BEBC6DAC995D27700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/735b0aa8-b557-310a-9f0c-133a9234c8ee.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:65:2b:eb:c6:da:c9:95:d2:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e191b18b-0db5-4002-8c0c-2d9246f572c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:e5:32:1c:84:5b:c2:a5:9e:ff:3b:5d:c9:
                    a3:10:cf:fd:48:f0:49:dd:7e:a8:4e:d4:7c:8c:ac:
                    38:89:9c:35:f6:f2:c1:03:6c:13:4e:4d:f0:d5:04:
                    ec:21:c9:ee:6b:5e:ad:23:47:55:6d:d6:c9:47:42:
                    1b:45:24:fe:0f:18:7c:c5:1b:5c:61:c5:b3:25:c4:
                    a6:3e:a7:6d:8f:38:b6:3d:15:27:49:82:d4:fb:db:
                    1c:1b:9f:de:70:39:34:dc:e0:d1:55:87:a0:aa:e8:
                    74:fb:0c:fd:43:e5:17:05:02:1c:61:2c:d3:0e:4e:
                    7f:ff:38:6a:6b:0f:1d:ef:22:ae:42:e1:be:25:d6:
                    86:67:f9:33:a1:c4:cf:5e:6c:8c:c0:bd:d2:e1:9f:
                    9a:28:72:6f:8c:42:80:6a:aa:b2:20:c7:23:76:00:
                    de:5b:33:f7:ed:9c:7b:a9:98:66:c2:54:f4:6b:0e:
                    3b:f7:8e:cc:62:e1:16:39:b9:ba:f4:a1:42:78:b8:
                    27:9e:11:37:88:e8:16:23:4c:e7:be:c1:f3:aa:19:
                    e6:45:dc:32:48:18:23:71:4c:75:dd:69:97:c9:c3:
                    73:f4:38:a9:41:48:80:97:fa:7b:d9:0b:0c:4d:51:
                    3a:6b:7d:8f:37:2a:c9:73:24:be:1a:52:61:49:7f:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:62:39:D5:15:67:3C:34:88:FB:13:51:E8:6A:8E:BE:62:89:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/735b0aa8-b557-310a-9f0c-133a9234c8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:00:97:79:52:2b:64:95:80:8f:18:af:e5:bf:c8:c5:c6:
         c0:60:ed:2e:b2:16:b5:5f:8f:60:ea:dd:00:25:e2:31:43:0d:
         52:ec:7f:dd:69:d0:e1:ab:b8:5a:30:0e:85:04:1d:79:17:70:
         d2:20:15:74:eb:2f:6e:14:9f:35:44:47:69:17:87:88:f1:e1:
         6a:ca:65:bc:a8:a3:70:98:98:d2:fb:22:12:6f:e4:e7:3a:1b:
         89:40:f2:45:22:4b:ac:ef:32:85:77:81:93:1a:56:93:ac:47:
         33:01:0f:5c:2a:d1:8a:1e:6d:fa:cc:57:3e:45:73:2d:1e:9b:
         69:e9:f9:a2:9b:38:e2:2d:c4:7d:74:e3:41:f3:44:8f:4e:ae:
         b9:13:5d:99:b0:16:b9:e0:73:3e:0b:d1:6d:38:2b:2c:92:26:
         f4:02:eb:c1:df:1c:63:20:b2:67:46:26:70:41:f9:09:12:88:
         34:11:64:16:32:16:36:cd:28:72:25:68:25:95:67:24:7a:a4:
         c0:fd:0c:0a:7f:41:29:33:60:5d:92:96:d0:1d:60:28:9d:50:
         10:3a:8e:74:d4:d9:c9:9f:62:a4:69:ea:d8:ee:10:48:f8:ba:
         bf:cb:32:a3:1b:50:87:8d:e0:2e:95:13:16:1f:66:2a:03:88:
         76:01:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org