Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de1072ad-430c-3579-97b2-e40f0fa1a9fb.roa
File:                     de1072ad-430c-3579-97b2-e40f0fa1a9fb.roa (raw, json)
Hash identifier:          wGVKNCp6KGrYAok3src7ac08MaOWfqIAGIpQdExdGG4=
Subject key identifier:   5E:0B:12:D6:99:9C:B2:D5:70:97:C9:D0:44:DE:46:B0:02:69:78:04
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A09985FE1CABCCE39D5E560
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de1072ad-430c-3579-97b2-e40f0fa1a9fb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:98:5f:e1:ca:bc:ce:39:d5:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a85690c5-9a73-4779-83b5-50cde735bb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:0a:11:39:a8:a5:a4:37:dc:13:1d:f0:b5:
                    53:68:96:03:46:fb:47:f3:49:a1:98:e2:13:a7:63:
                    ca:24:8e:de:8b:b1:4e:fc:83:ba:ed:e5:a2:d2:72:
                    1d:c4:71:4c:fb:c9:f2:b3:54:9a:c2:54:c3:f2:f7:
                    39:64:da:2b:0b:74:5b:63:df:ba:0a:22:e4:19:32:
                    37:02:04:03:9e:a7:36:12:25:6e:81:b8:62:91:0f:
                    c4:9b:c1:12:c9:f3:06:69:34:2d:94:71:2d:4d:ac:
                    53:5d:f6:cb:18:48:17:93:a1:f2:01:75:5c:a3:96:
                    5e:93:73:51:71:18:a7:8c:57:a7:12:76:17:f6:8b:
                    1e:49:6f:8e:dd:56:c8:de:02:5b:11:ca:f6:48:1c:
                    f7:8f:14:c2:a0:05:e4:6d:f8:4b:65:a1:b6:cf:a7:
                    3a:e0:54:dd:2e:8a:c4:04:c1:2a:1e:92:e5:8e:cf:
                    51:8e:37:4e:f8:0a:fd:77:63:ba:7b:42:b8:de:cf:
                    9d:67:0f:d4:61:8e:4a:55:18:9b:d2:e8:04:cb:09:
                    7e:fa:8e:09:98:d1:45:67:40:97:f9:e6:4b:88:64:
                    42:bf:55:37:e3:3e:f9:f4:b7:bc:e8:af:d0:c4:51:
                    cb:e6:08:01:a0:18:ac:1e:4e:f9:cf:b0:5e:56:4f:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:12:D6:99:9C:B2:D5:70:97:C9:D0:44:DE:46:B0:02:69:78:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de1072ad-430c-3579-97b2-e40f0fa1a9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:53:60:57:ed:ad:7e:96:32:fe:62:9a:54:af:35:eb:23:b1:
         de:b8:61:39:fe:bf:d5:ec:c1:35:70:d9:d1:af:06:73:ae:ec:
         1c:64:44:bc:5f:d6:f3:f5:55:b4:36:87:76:91:3b:78:ed:57:
         f5:b2:76:d7:df:7a:64:d3:d4:37:45:76:db:1a:5f:0d:94:5b:
         9a:d8:9b:d2:45:7b:34:30:0b:e7:b0:a7:83:0a:92:9d:80:f5:
         0b:6c:19:eb:08:4b:ca:99:0a:31:f3:c6:d2:08:31:bb:ae:a4:
         bd:df:b0:6b:93:a5:9a:d8:63:5c:27:e6:e3:34:81:c6:3b:0b:
         64:70:49:0c:10:fa:c2:a0:d0:9e:cb:77:e2:ab:76:5a:68:1c:
         ba:e7:92:e7:ee:05:ac:96:fe:f8:d4:d3:0f:69:b1:d8:cb:86:
         95:2c:8e:f1:6d:85:00:36:cb:28:0f:9d:90:1d:59:d2:59:7a:
         1f:23:2e:61:09:9a:b5:97:f8:89:aa:57:51:ec:77:e4:af:47:
         13:2e:56:bc:3b:bb:e6:a9:05:b1:ed:dd:f5:c3:26:6b:d8:c7:
         7b:f2:02:77:bc:7a:bc:7f:e2:f1:6b:49:b6:a0:62:28:a2:1f:
         32:6a:1f:d0:a0:20:8a:75:54:35:41:03:16:60:08:58:12:49:
         bd:20:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:34 2024 by rpki-client on console-ams.rpki-client.org