Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee5115ba-7230-3a22-8069-255c2abb13e3.roa
File:                     ee5115ba-7230-3a22-8069-255c2abb13e3.roa (raw, json)
Hash identifier:          Z4tBAtAJmal0N45I/rVI3pFCXBcE4lbDE9gTnJDCQzw=
Subject key identifier:   FB:E6:D8:FF:94:8D:F0:92:5A:CE:21:58:44:69:87:14:18:9B:6E:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1089DDEADAA9672CBFB480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee5115ba-7230-3a22-8069-255c2abb13e3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:89:dd:ea:da:a9:67:2c:bf:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7de693ae-ade3-43ef-b420-45dff5c2b5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:3e:b0:e0:32:ca:2d:d9:09:7d:e4:fc:b8:
                    fa:cb:23:3e:33:16:df:6f:85:db:6a:dc:48:2d:b9:
                    4c:7b:ec:68:5d:e7:ba:8e:e6:33:3a:82:fb:d7:1f:
                    cf:b1:a3:94:18:2a:07:2a:4a:43:5f:b1:80:e9:65:
                    81:43:1a:ff:23:58:76:51:b7:ae:ca:45:15:a3:b8:
                    aa:9a:50:9d:82:43:29:d9:d4:69:ca:fc:51:7a:ea:
                    61:d6:de:c8:4a:f1:dc:ba:7c:ea:52:8b:60:5a:33:
                    9e:8f:91:91:1f:11:a0:12:8f:93:ca:3c:a5:6a:b2:
                    8c:3c:34:5d:82:4b:98:c1:c3:f7:21:64:b8:f3:8b:
                    25:12:d6:e0:6c:47:00:d7:36:aa:19:90:62:83:73:
                    0e:52:c3:82:42:39:8f:ad:1a:ec:6e:44:0f:5d:07:
                    09:f9:b3:38:a3:73:39:a3:40:18:1b:ee:64:58:93:
                    d3:d0:de:3a:e7:04:ef:dd:74:98:f1:60:27:c9:6f:
                    c8:16:3e:24:05:06:ff:0c:9f:16:ee:c6:ff:29:a7:
                    2b:cf:ca:85:39:85:4a:00:8c:f0:22:1e:f9:ec:46:
                    4f:53:fc:8b:de:ab:f2:ce:5e:c7:ca:18:6a:b5:a8:
                    d3:31:ce:be:99:76:aa:9c:db:94:a2:d2:24:e9:f8:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E6:D8:FF:94:8D:F0:92:5A:CE:21:58:44:69:87:14:18:9B:6E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee5115ba-7230-3a22-8069-255c2abb13e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:ee:b2:83:23:55:e8:8c:57:6a:2b:af:fd:6b:89:cb:85:
         de:79:cd:df:df:25:cc:76:53:84:92:66:bd:2c:19:34:0a:08:
         67:f9:c8:82:9a:8d:e1:0e:1c:c3:7c:e8:cb:90:dd:32:86:5d:
         81:18:48:22:55:95:ae:a0:87:57:62:9d:35:da:5a:78:36:b2:
         61:29:18:34:03:69:2e:19:86:0b:e5:18:c2:3c:d9:61:7f:0d:
         22:a5:20:4c:bd:6f:35:50:91:ba:dd:63:8c:10:c8:43:56:83:
         01:63:4e:85:ea:30:22:62:8c:f8:79:4d:1b:b2:e7:64:90:e1:
         33:ad:00:33:a2:3b:07:78:15:ae:f3:7f:69:53:46:fc:ac:ca:
         01:2c:7c:e8:50:a5:85:7b:e7:73:92:87:5b:55:46:87:5a:f7:
         93:88:bc:24:61:fa:0b:fa:a7:66:02:98:02:1c:4d:20:ab:e9:
         cb:1b:9e:2f:f3:a6:47:92:f3:6d:69:30:7e:e1:80:a3:ad:8c:
         a8:ab:96:7c:46:fd:f8:ea:70:64:c1:57:f4:dc:7a:53:a7:90:
         7e:11:e8:ae:12:2c:93:01:a9:5a:ab:14:05:ae:d8:fb:6b:fd:
         6f:54:04:66:8b:5c:85:96:31:aa:a5:b5:8f:3e:84:79:09:b5:
         c9:bc:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:35 2024 by rpki-client on console-fra.rpki-client.org