Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/daedff7c-ce58-3a9d-a874-60ef1af5b3e1.roa
File:                     daedff7c-ce58-3a9d-a874-60ef1af5b3e1.roa (raw, json)
Hash identifier:          dBi1mgabLPWLaxn3OLdtbcrIaZ6VoZsg25ho/qRahL0=
Subject key identifier:   9D:FE:55:DA:E2:64:3C:E2:E7:03:06:39:A8:8D:46:6F:4E:0B:26:69
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584275C97B40B74AE13B521C5940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/daedff7c-ce58-3a9d-a874-60ef1af5b3e1.roa
Signing time:             Wed 05 Jul 2023 12:00:00 +0000
ROA not before:           Wed 05 Jul 2023 12:00:00 +0000
ROA not after:            Sat 16 Nov 2024 05:00:00 +0000
asID:                     36411
IP address blocks:        104.135.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:75:c9:7b:40:b7:4a:e1:3b:52:1c:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  5 12:00:00 2023 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=8922c47f-7ab6-47d5-9694-3268553a695d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:da:59:69:f8:e5:17:d7:4b:50:4c:f9:54:
                    71:e9:ee:3b:fc:e0:42:b2:c8:00:9a:72:d8:7d:f2:
                    ff:73:39:e3:4c:af:5f:cc:d7:a2:a9:43:6d:c6:84:
                    b6:27:1c:ce:f8:54:f6:8a:4a:00:eb:84:9a:d3:c8:
                    dd:be:0e:b5:18:41:a1:40:36:4e:1a:f6:8c:d3:e5:
                    62:cd:36:bf:41:52:09:0b:e2:b5:81:ca:83:cf:15:
                    d7:bc:b3:84:22:07:aa:7f:32:84:1e:dd:3f:8e:f7:
                    38:79:2c:79:26:19:cf:68:5f:31:9c:22:e9:24:32:
                    74:2a:4a:bf:ca:dd:a9:ea:7c:be:9b:53:90:42:c2:
                    74:b0:0a:b1:9a:2f:b0:f4:c0:13:69:ce:a1:85:e8:
                    1f:75:22:ee:5a:8d:56:b6:36:a5:a3:2c:31:23:74:
                    d2:1e:27:92:72:e7:16:ad:12:b9:14:ab:eb:df:02:
                    31:b7:26:51:33:0b:7d:bb:73:56:e9:f9:46:fe:b5:
                    64:4c:eb:f6:81:f8:31:55:47:27:54:ed:b7:d5:bf:
                    ca:6a:da:0d:60:b4:d6:e6:9c:6c:85:40:ca:ba:14:
                    11:e1:d6:9a:06:cc:75:20:63:0e:ad:d9:e0:43:b2:
                    cf:6c:e5:78:96:bd:1f:a9:2d:79:ee:fe:da:7e:ff:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:55:DA:E2:64:3C:E2:E7:03:06:39:A8:8D:46:6F:4E:0B:26:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/daedff7c-ce58-3a9d-a874-60ef1af5b3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:2a:a0:2a:be:a8:26:dc:d7:d0:77:4a:22:36:52:3e:9b:
         4f:71:22:17:a0:a7:b3:00:71:a2:89:bd:3b:e7:f7:48:2b:00:
         0f:e2:bf:82:1f:6d:b3:53:f6:ad:ee:7f:e4:0f:b6:02:29:c1:
         08:19:65:14:bb:80:08:be:ef:d6:a4:dd:ed:bc:d8:b7:29:fc:
         90:58:27:3e:28:b9:1e:e3:7d:87:39:11:bb:a3:87:4f:05:77:
         a4:73:8c:48:30:2b:8d:2c:e4:de:bf:f9:12:20:16:81:dc:cb:
         0d:3e:c3:c9:0b:8f:3d:5e:1b:c2:68:5e:1d:30:60:ac:16:d3:
         85:56:52:18:98:0e:39:26:76:21:a1:9d:2c:59:ca:a6:40:48:
         96:e2:d4:e6:6d:bd:01:a8:11:91:55:7d:b6:ad:93:df:16:d5:
         d0:2c:b8:95:cb:17:b5:e4:ad:06:13:7e:82:77:1f:28:1d:27:
         67:32:4c:54:76:e2:27:d9:4a:f7:5c:ca:02:a7:a8:ed:17:ef:
         d8:84:79:b2:f8:1a:0f:3a:9a:4d:10:12:02:1c:0c:f9:db:dd:
         7f:de:dc:16:4f:7f:37:6f:dd:78:4b:5b:a3:ed:95:f5:d6:0c:
         8e:e7:d4:1c:da:91:6f:e7:c9:d2:1a:f3:5b:7a:ad:8c:06:2e:
         58:f3:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:34 2024 by rpki-client on console-ams.rpki-client.org