Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b81147c9-4123-3cc3-9730-9c9ac3702de3.roa
File:                     b81147c9-4123-3cc3-9730-9c9ac3702de3.roa (raw, json)
Hash identifier:          UH6LOBj/A6tie5NQgU8JUUUy6GEyAd5kdEi5KNesQvw=
Subject key identifier:   85:27:AC:C5:88:EB:C6:95:C3:C4:8E:1E:E9:6F:AE:00:5E:57:1C:9D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1ABDCBF3BE7915E2077220
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b81147c9-4123-3cc3-9730-9c9ac3702de3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1a:bd:cb:f3:be:79:15:e2:07:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6339580c-eaea-4444-a140-fd3ff4fbd0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:46:7e:d5:1c:15:83:b3:cd:9e:34:da:1c:
                    8a:3e:18:cf:9b:94:1f:ef:7c:0f:0f:bb:37:b9:dc:
                    ac:d3:a7:57:a6:5c:53:7d:69:01:bb:df:fd:6e:6c:
                    55:a2:d7:2d:4f:15:57:c8:de:09:50:7a:b5:fd:45:
                    43:03:a1:a6:24:ac:63:87:0a:b8:cc:2f:05:2a:ab:
                    c9:ff:f8:3c:68:2b:0a:5f:3b:85:f6:a2:b6:85:4d:
                    39:f2:40:99:78:0d:ba:e1:23:e5:07:29:a6:7b:b3:
                    67:92:29:fc:c4:ad:67:f3:43:12:65:c0:1f:48:db:
                    7e:94:03:c2:eb:34:6a:01:b0:09:9c:39:fb:f1:c5:
                    03:ec:ea:e3:d1:31:1c:a6:a4:d1:78:58:b4:0a:4f:
                    f1:d1:dc:9b:d0:fa:07:ac:8f:24:e3:a3:c6:d7:41:
                    8d:01:60:24:18:55:66:d0:bf:27:c4:6f:dc:49:83:
                    f0:f7:cc:e6:cb:73:a2:78:dc:03:41:2e:55:ba:68:
                    fd:99:7f:8a:37:fa:ec:42:de:50:9d:26:55:82:ff:
                    d2:d8:b9:8e:f9:52:38:e6:01:86:22:a9:78:1f:04:
                    09:99:2a:02:b5:e4:95:0e:ad:e5:f7:98:47:42:21:
                    00:c1:00:e0:3f:34:10:22:94:7c:22:28:99:a3:9e:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:AC:C5:88:EB:C6:95:C3:C4:8E:1E:E9:6F:AE:00:5E:57:1C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b81147c9-4123-3cc3-9730-9c9ac3702de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:55:4e:89:61:af:a9:df:10:c2:5a:07:2d:71:29:b2:3c:
         3c:14:50:a1:84:17:b2:a1:37:65:4a:6f:49:88:1f:76:f1:5c:
         d7:df:5b:64:52:5f:09:f2:e6:a1:00:a7:86:ed:9e:fa:d3:75:
         23:1a:1b:69:8f:89:e7:c2:6a:8e:6f:47:f3:e5:cb:81:6e:a6:
         e5:a0:76:56:22:20:d8:e0:2e:33:8e:ac:33:97:24:9d:32:38:
         fd:0a:55:60:69:6b:2d:e4:aa:bd:20:7f:d2:cc:7e:09:b7:b4:
         f0:a8:5e:98:b4:02:77:84:e7:c3:94:28:86:45:87:99:32:07:
         49:af:a4:9d:80:77:d0:6e:b5:16:46:5a:c8:b8:93:a9:87:ac:
         12:01:92:b7:20:32:85:c0:76:88:1b:d7:f3:bf:3e:37:27:5e:
         b7:cd:73:7b:e7:21:c2:8b:22:08:74:c6:10:10:93:97:ed:94:
         2d:3e:b4:f8:1e:1c:12:4b:32:15:da:a9:5f:7a:99:14:8d:37:
         cc:04:af:9a:58:94:64:99:95:b6:48:60:3b:a0:01:04:8c:15:
         be:c7:2e:5e:ff:98:af:38:02:79:2a:9f:ea:06:0d:25:95:be:
         ed:59:b5:06:61:3b:ca:ad:2a:6c:d5:15:5a:f6:4e:1e:fc:d2:
         bc:85:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:49 2024 by rpki-client on console-fra.rpki-client.org