Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a412219a-51ed-39a8-8755-e44bb0e6e8e9.roa
File:                     a412219a-51ed-39a8-8755-e44bb0e6e8e9.roa (raw, json)
Hash identifier:          j2rOJ6cEkTqzQsIcKu/RRtzLHX4VTcjhehmpYGdJKqM=
Subject key identifier:   83:45:FD:8F:53:8D:38:7A:90:0F:59:FA:F7:05:F8:EF:7D:AE:B3:E7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A240CF650029373929FF180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a412219a-51ed-39a8-8755-e44bb0e6e8e9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:0c:f6:50:02:93:73:92:9f:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5e22d1f0-7385-46b2-b56f-d1364fd231b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:f3:8a:cb:c9:2e:62:6b:0d:d2:cf:cf:c5:
                    47:de:7f:c2:58:c4:f2:f4:99:83:7b:20:93:ab:52:
                    98:60:b0:20:4a:5c:4c:ab:bd:c7:29:3e:4b:f2:20:
                    9a:85:39:8c:1a:d6:48:f3:4d:c6:cd:6b:4a:82:81:
                    a7:de:9a:9d:c4:88:26:77:4f:9e:22:cc:1e:36:0c:
                    d2:44:cf:2d:8c:43:c0:2a:e7:09:f6:2b:a4:03:75:
                    ff:d3:f4:94:ce:a4:65:be:b9:3c:58:02:7b:a3:02:
                    b2:3e:6f:44:3e:a4:7a:8d:01:8d:1d:a2:a0:52:e7:
                    ab:59:0f:8d:32:ed:4e:c6:19:eb:58:c9:da:b0:89:
                    aa:ff:02:ba:f5:e1:2f:77:76:3e:e6:3f:5a:b6:97:
                    d7:cc:17:4d:fa:7b:7d:1d:1c:c1:84:a3:f2:c5:6d:
                    1d:ce:a0:4d:40:94:71:a6:7c:a2:f4:2d:eb:4a:58:
                    60:71:4f:60:26:97:7d:b6:0d:19:db:1a:b1:95:d4:
                    a6:7c:d9:df:6d:30:0a:98:48:f2:bb:7b:f9:29:05:
                    89:d2:75:8c:38:37:a8:90:4e:36:a1:5a:37:d6:ad:
                    bf:7a:42:76:20:39:c8:7c:ba:a1:da:f5:5e:70:9b:
                    75:22:b6:4c:eb:21:ed:48:68:29:c4:dd:b2:09:2b:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:45:FD:8F:53:8D:38:7A:90:0F:59:FA:F7:05:F8:EF:7D:AE:B3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a412219a-51ed-39a8-8755-e44bb0e6e8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:17:24:59:db:98:9e:ea:d5:2a:7a:5b:a0:f0:00:61:7a:5e:
         dc:1e:d8:38:7b:7e:31:94:4a:f9:75:66:6e:be:31:2a:a4:11:
         bb:83:dd:f0:71:f9:1a:9b:19:17:a6:e8:58:08:d0:f7:ff:b1:
         dd:1f:71:3d:22:63:65:24:4a:05:04:38:50:8f:60:a0:0a:52:
         72:bd:3e:7e:7b:7f:8b:c0:f3:1f:23:9c:4a:90:ff:4d:2c:14:
         2c:41:60:2c:8b:a4:17:ae:80:1c:a0:be:4c:34:1f:1b:d0:3b:
         3b:e5:cd:c4:31:86:56:76:06:6b:5c:99:0f:0d:0d:46:5d:0c:
         45:62:a1:86:e0:af:3d:72:54:b0:fd:f3:05:e3:ca:95:34:af:
         62:85:71:ae:81:5f:d7:5c:4f:84:34:6d:68:ce:18:cd:79:59:
         28:37:69:ab:33:6e:84:f0:a3:2f:fb:3e:58:53:b4:fc:92:4e:
         cf:df:2c:a2:5a:68:7d:64:ff:8a:fd:cc:6f:76:30:af:44:cf:
         45:57:58:3a:ef:01:65:5e:b6:e9:4e:76:c1:82:a4:0e:80:d0:
         f6:99:17:78:ec:e2:94:14:bc:ef:8f:63:db:af:bc:6f:f1:d0:
         e7:b0:95:88:f6:84:2c:6d:4f:1c:dd:fe:e4:af:7f:c1:e7:88:
         4c:b0:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:31 2024 by rpki-client on console-ams.rpki-client.org