Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bf900b6-0a9f-38da-84f8-932b1cae31ad.roa
File:                     7bf900b6-0a9f-38da-84f8-932b1cae31ad.roa (raw, json)
Hash identifier:          jbrZevj1zHJudPSE3HgxEAR0kjyreSb3fJn0rvau3r4=
Subject key identifier:   FC:01:02:BD:7C:B3:93:FC:AF:14:C0:A5:A9:92:DE:72:39:60:8E:22
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0738EB236831EF05D99DF0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bf900b6-0a9f-38da-84f8-932b1cae31ad.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:38:eb:23:68:31:ef:05:d9:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=120acf01-a3f5-4e83-8079-1f27f0f13231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:06:25:db:4a:9f:b7:0e:4f:5d:45:c8:55:
                    da:e2:2e:d8:0a:f2:5f:57:32:39:e6:e3:cd:bb:60:
                    57:aa:44:1e:8d:33:74:77:f9:be:74:94:ad:b0:9c:
                    50:85:45:91:68:b0:45:0d:7f:26:5b:0f:7d:be:e1:
                    c9:b0:b0:b5:d3:13:36:5d:50:df:75:5b:a3:8e:f7:
                    05:3a:47:6b:3d:84:60:f3:aa:81:4d:ae:f1:29:8f:
                    3b:84:b6:ba:ae:c0:48:e8:dd:59:46:86:fb:aa:7e:
                    3c:6b:e9:49:dc:23:12:8d:3c:e3:91:83:47:be:7f:
                    d8:53:35:51:e4:b4:c0:31:59:b0:e8:5f:5f:a4:2f:
                    c1:b1:83:dc:07:28:6a:f0:ba:17:af:35:7f:e5:60:
                    7c:ab:17:49:40:70:2d:c7:9c:a6:f0:0f:99:10:97:
                    da:a7:c9:76:c1:bc:6b:bb:29:1d:9c:ec:45:3a:53:
                    20:a8:99:3b:b3:ce:1c:00:90:6f:84:0f:b6:76:aa:
                    ae:95:20:67:e5:82:1f:db:19:f3:40:16:15:9c:85:
                    52:7b:63:ce:f5:6e:2c:11:f7:bd:74:94:59:44:d1:
                    a6:aa:6a:44:85:72:c4:9f:6f:23:69:6c:6c:ae:28:
                    8a:9d:92:cb:aa:0b:ba:73:88:32:f7:45:b9:79:b5:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:02:BD:7C:B3:93:FC:AF:14:C0:A5:A9:92:DE:72:39:60:8E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bf900b6-0a9f-38da-84f8-932b1cae31ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:54:ee:e7:81:8c:08:f6:7b:41:1d:f9:fc:ea:3e:8d:7d:46:
         89:ac:22:33:c8:33:8d:99:c7:9d:de:7c:ed:0c:1c:e7:99:f9:
         1f:b3:2a:8c:53:14:ee:a4:1d:6c:5f:ae:8d:88:b9:6c:87:9e:
         15:3f:00:f8:2e:dd:72:c3:e8:88:b5:77:7a:6a:a3:81:62:3e:
         53:9c:c1:38:c3:3d:bd:2d:7d:6a:81:97:8d:28:cb:5b:0d:a1:
         91:54:92:c8:98:96:65:61:18:e2:c5:c3:49:13:ec:0f:24:48:
         1a:0b:dd:1e:68:e0:75:72:71:d5:e1:48:09:2b:19:44:fd:4b:
         cf:0f:97:78:db:e9:a6:2a:d5:d9:31:0d:aa:ff:45:ee:d6:4b:
         8b:33:6b:e1:de:a7:c5:8a:b3:7e:de:04:69:eb:5c:43:71:09:
         7a:85:85:e3:14:c3:eb:b2:04:fe:83:48:0c:22:0d:c7:b4:e4:
         0b:79:b5:87:84:3a:5a:05:c0:0d:7f:93:da:fd:ef:63:4e:40:
         e2:3a:cc:78:f3:56:f6:34:ce:d5:09:cd:a2:51:bc:7a:75:0d:
         58:5e:98:2d:a4:cc:2d:be:6e:50:6d:b3:62:99:6b:88:95:2f:
         8e:e4:9b:cb:08:9b:99:d0:96:31:e6:ca:f2:3a:a5:1f:43:d2:
         3a:a8:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org