Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f497789f-b571-3c2c-81bb-0e56a45ad643.roa
File:                     f497789f-b571-3c2c-81bb-0e56a45ad643.roa (raw, json)
Hash identifier:          UNolJT8aohU0dqHwklDlTgdk2+chuNurrKBxSqa/R4Y=
Subject key identifier:   35:F4:00:D8:96:6C:7A:A7:28:74:D7:62:69:C2:B3:E8:30:DD:69:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0644ACA6A4CA13CFA8669D
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f497789f-b571-3c2c-81bb-0e56a45ad643.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:44:ac:a6:a4:ca:13:cf:a8:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=bda5d259-0580-497a-bd90-b1b065a2723c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:36:79:b2:e4:7b:6d:63:cb:1e:e7:fb:b9:
                    6a:95:0b:5d:db:f6:69:df:11:2a:0f:d9:23:d1:44:
                    2e:cf:8e:e7:8f:6b:68:2a:0e:37:51:12:78:d0:56:
                    1d:4c:92:5c:2e:c3:82:30:42:59:cd:ba:2c:be:4f:
                    a6:f1:de:ca:f5:84:f9:90:c7:a1:a6:f9:3f:0d:e2:
                    51:7d:54:cd:c5:1a:c2:fd:f3:4a:6b:a0:31:a3:df:
                    e5:42:a8:34:ae:e4:97:c3:85:b9:c7:33:74:50:e2:
                    6c:8c:af:7f:c0:27:fb:60:0c:45:37:4c:6b:61:96:
                    6a:a7:ca:05:7a:32:cb:f0:3f:8a:97:6b:8c:22:d2:
                    35:27:51:b5:21:55:8d:c2:ff:55:dd:4b:39:aa:35:
                    f0:c0:9f:a4:7a:07:3d:e0:a2:3b:09:46:0c:48:9f:
                    84:21:5e:eb:ac:8d:cd:10:83:34:ad:d5:34:76:38:
                    99:6e:96:7c:9d:d3:95:fa:d7:94:04:f2:c9:77:0f:
                    7c:de:ee:55:bc:ef:4d:8f:60:32:0b:42:f3:20:2a:
                    c1:38:3f:5c:bc:7f:67:1f:18:cc:50:d9:40:bc:29:
                    c8:8d:d1:2f:ab:7f:ca:93:fa:84:16:7f:46:96:82:
                    5a:03:92:3d:ae:b4:74:54:0e:75:44:be:30:83:29:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:00:D8:96:6C:7A:A7:28:74:D7:62:69:C2:B3:E8:30:DD:69:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f497789f-b571-3c2c-81bb-0e56a45ad643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bc:27:ba:02:f9:43:54:52:98:62:4d:9f:9f:6e:4a:3b:f2:
         53:c7:6d:bb:c2:ec:d9:a6:fe:03:9f:8f:f1:c4:fe:67:a7:e8:
         8b:de:88:48:8b:45:86:2e:d8:ed:12:ef:5a:ca:91:3d:72:f1:
         e1:c3:d6:9c:ce:32:3b:69:e1:ca:cb:37:43:86:4f:ed:88:8a:
         43:eb:0c:bd:f0:7d:ab:d6:45:c0:cd:1d:7b:e3:0c:63:67:d2:
         7f:3c:2d:d5:96:2a:c1:2a:75:2f:64:68:be:f2:f3:02:87:93:
         1e:58:7f:a9:a8:ed:ab:bc:70:f3:43:00:21:27:49:ad:16:a7:
         28:f0:ad:87:31:9c:be:16:4c:26:8a:8e:e5:90:fe:7c:50:87:
         25:1f:61:d5:eb:6b:63:2b:53:46:ec:8e:28:86:f9:44:f5:f5:
         57:59:df:da:60:01:3b:19:2e:54:e8:11:ff:52:f5:9d:a3:a4:
         be:3f:de:cb:d9:3c:96:83:81:1c:40:0a:81:60:ce:b8:8e:fe:
         58:42:f4:aa:9f:73:93:7e:81:9d:7c:de:e4:49:e4:b0:3a:90:
         60:f9:45:52:a9:5c:f0:b7:8e:69:8b:ab:50:53:07:41:ae:53:
         cb:9d:46:b2:72:22:15:ce:a6:c8:9f:89:ec:6e:a1:10:f3:6c:
         f0:80:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:35 2024 by rpki-client on console-fra.rpki-client.org