Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6fa00cd-f418-30f1-a04e-f679e48197d8.roa
File:                     e6fa00cd-f418-30f1-a04e-f679e48197d8.roa (raw, json)
Hash identifier:          K5Gm23eCL/XKmoNNkXZR/y96aHzdF5PDSswIHq99VY0=
Subject key identifier:   C6:9A:BA:5C:16:2B:F4:3E:BA:D1:B7:5A:B8:F4:7E:82:10:D4:E9:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F527F8FB005DAA73641680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6fa00cd-f418-30f1-a04e-f679e48197d8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:27:f8:fb:00:5d:aa:73:64:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5f17699f-2677-46e6-84c1-a60ec61e8508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:2e:2b:38:0e:b8:be:d5:2e:74:50:8a:86:
                    8e:88:54:e0:30:29:a4:13:14:3c:2c:76:a3:50:49:
                    5e:08:40:8e:54:be:9c:d2:06:6d:14:eb:27:27:29:
                    4e:1d:5e:d0:71:cc:93:23:5a:99:14:23:6e:80:17:
                    fb:b5:83:ba:75:70:1e:0e:a2:e9:64:31:74:0f:b2:
                    c0:47:b6:1a:10:96:94:21:19:88:23:46:70:20:39:
                    e4:b3:5e:b4:40:d0:e8:b1:1b:ea:79:e0:05:a6:b9:
                    02:c6:90:37:de:d3:3d:e8:28:f1:a0:c7:0d:5e:33:
                    2d:d5:aa:5a:20:fe:f4:8b:48:7a:7d:fd:c3:0a:be:
                    f3:70:85:33:f3:c0:5b:22:c6:7c:24:9e:bc:e5:20:
                    be:e3:57:da:e5:8f:05:ce:d3:5e:89:8d:d4:10:32:
                    d9:50:f3:f5:75:76:45:80:1f:d3:82:89:d4:4f:56:
                    0f:3a:72:e9:c3:4c:0a:90:e9:76:0d:81:30:78:12:
                    43:87:8d:e5:26:e5:c0:73:3c:e9:de:e3:a8:4e:bb:
                    e8:4e:35:5b:9e:1a:2c:7e:73:09:2e:80:b7:50:c1:
                    2a:24:23:99:05:27:24:a1:3e:7c:07:f2:66:01:7d:
                    a4:d7:68:93:60:f4:e2:f1:a8:f5:c4:a2:32:73:28:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:BA:5C:16:2B:F4:3E:BA:D1:B7:5A:B8:F4:7E:82:10:D4:E9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6fa00cd-f418-30f1-a04e-f679e48197d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:1c:ec:4b:58:64:86:aa:3c:24:d7:22:e6:98:ef:48:3c:
         b9:d6:0b:a3:03:f7:76:74:39:b3:a0:51:e9:62:92:ce:e0:70:
         01:75:88:e4:3a:a9:03:0b:11:54:86:d0:be:0d:85:69:03:a4:
         8e:11:5a:48:d4:0a:06:97:bb:c6:8e:83:08:d2:6b:72:0e:ef:
         f9:2d:bd:60:0c:8c:98:62:1c:b5:88:d6:1f:aa:b9:93:ff:fb:
         ae:9b:14:fb:d4:46:9b:7e:08:90:33:bf:1c:3c:74:96:d0:c0:
         bc:8e:20:f0:7c:e6:23:73:25:58:9d:de:76:d0:69:1c:8e:70:
         14:fa:b7:77:85:96:fa:dd:df:60:35:61:e3:ec:35:26:3c:4b:
         65:f7:d1:b3:b3:06:e0:68:14:18:f0:a7:3f:1d:f4:90:bc:a4:
         f0:0d:20:c1:17:bb:a6:d1:59:67:89:b5:14:5e:29:a8:97:cb:
         cd:dc:8f:9a:0d:70:0b:3d:54:f6:11:14:ea:27:0f:ab:ee:ba:
         5b:3a:62:ba:9c:6a:16:ad:83:66:c0:51:5e:d9:02:a2:36:39:
         a1:be:7e:d7:10:84:93:02:cd:10:83:d6:02:04:6e:b1:f6:4a:
         71:bd:38:fa:da:6f:b0:eb:b0:7f:5a:94:39:d8:95:8c:16:7b:
         b3:29:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:59 2024 by rpki-client on console-ams.rpki-client.org