Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d97c1ee0-ceb4-3764-85ec-c40dd9fcfba3.roa
File:                     d97c1ee0-ceb4-3764-85ec-c40dd9fcfba3.roa (raw, json)
Hash identifier:          Wmlb7HBbzXteEIcP//LBi4vEgGoeM66cVsO7ZX1E7G0=
Subject key identifier:   A5:68:76:13:28:EB:DE:A4:36:89:BE:D6:A0:C7:3C:B8:AE:98:17:2F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0849ED8FA7B638AFF2B000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d97c1ee0-ceb4-3764-85ec-c40dd9fcfba3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:08:49:ed:8f:a7:b6:38:af:f2:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=809e5fbc-5cd4-4108-89c9-2ca3c2c7ae4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:43:e1:6d:0d:2c:fe:9e:a5:61:3e:82:38:
                    08:eb:5e:ae:44:a9:4c:7d:7e:8b:ac:f7:40:5a:fc:
                    65:20:65:a1:d6:32:d6:ae:a9:77:37:d8:95:8e:85:
                    b5:23:97:74:11:cd:04:56:f9:83:1e:f2:ec:dc:43:
                    7a:fd:fb:00:fa:b3:1f:7b:b8:c4:dc:6c:c3:d5:92:
                    e7:cf:50:7a:df:52:ce:15:c3:f5:6a:83:57:c3:43:
                    5a:41:3c:61:11:7e:a2:4d:70:71:26:67:0f:dc:18:
                    2c:da:b3:e4:3b:ba:14:df:1e:d0:9d:f9:7a:03:34:
                    3d:26:49:04:65:48:4d:23:f9:9a:07:a9:e8:a9:49:
                    ba:5f:a7:72:c0:4d:3a:e8:dd:65:ac:33:18:c8:b3:
                    5c:c1:05:73:03:8b:b3:f7:df:d1:96:90:33:13:69:
                    af:d3:f7:1b:32:03:6e:82:39:ed:4a:70:61:be:14:
                    61:43:1e:02:ec:77:7e:e1:60:09:b4:70:1f:6a:a4:
                    a6:b9:80:0f:a4:23:39:74:32:23:82:2a:6a:e5:e5:
                    5e:6d:bc:6f:b2:55:cd:5b:97:2c:f5:fd:92:06:08:
                    39:f2:02:b7:aa:60:4a:08:aa:f9:07:40:2b:09:80:
                    38:41:36:71:32:65:82:b4:b2:69:71:18:01:d4:dd:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:76:13:28:EB:DE:A4:36:89:BE:D6:A0:C7:3C:B8:AE:98:17:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d97c1ee0-ceb4-3764-85ec-c40dd9fcfba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:50:ef:4b:c9:eb:da:56:dd:2b:8a:62:82:ae:b7:0e:41:
         69:25:76:a1:ea:20:a9:cf:5c:b2:2e:00:76:5a:46:56:86:db:
         81:26:46:e6:f1:63:fe:bd:2e:8c:60:81:2c:02:11:de:7f:86:
         0f:77:a9:ef:9f:eb:2b:98:57:41:73:a6:e1:1c:03:93:f9:96:
         b0:29:6f:1b:e7:b5:45:a3:8e:20:79:33:24:49:29:12:5b:56:
         7e:06:1d:17:fa:c4:0f:c8:d1:92:8f:1f:54:f1:90:e2:7d:1c:
         dd:a9:eb:76:63:1f:44:a6:df:94:f3:64:fa:fe:13:f8:5d:4e:
         1d:af:dc:ca:f7:79:b9:bd:82:f0:64:ca:d8:98:8d:71:04:89:
         9d:a8:6b:76:f1:22:32:82:01:b2:05:8e:49:e9:fc:a7:32:98:
         38:c0:58:92:c1:be:94:38:fa:e9:f0:ce:51:14:07:15:a1:73:
         9e:a9:55:ea:d3:0c:b6:9f:15:51:c6:af:3e:0e:04:69:fd:0a:
         8c:06:98:4f:ca:d6:f3:ad:8a:47:8f:9d:d9:40:35:81:5c:f7:
         f9:d2:ef:f3:f9:65:34:21:9e:90:47:d4:0e:3d:05:46:5a:a8:
         cd:12:78:94:f3:96:2f:14:61:5f:a0:cb:d6:59:af:3f:95:e4:
         7b:9e:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:33 2024 by rpki-client on console-fra.rpki-client.org