Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff4b429c-c4fe-3642-88e8-da94b9c2c43b.roa
File:                     ff4b429c-c4fe-3642-88e8-da94b9c2c43b.roa (raw, json)
Hash identifier:          6XZGYyUrVWXBx9aY/mz266K1tlhYbYWFAVPp+2WmNtM=
Subject key identifier:   00:87:54:35:87:15:CF:C1:91:CF:B8:41:45:69:BB:19:C2:45:94:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FE2650E868DA2B38DB2CA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff4b429c-c4fe-3642-88e8-da94b9c2c43b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:26:50:e8:68:da:2b:38:db:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=99b8f3e8-ce70-42bb-838d-35729e22a7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:e5:8b:90:93:67:63:5a:9d:15:34:da:60:
                    f0:c1:e5:2c:5a:5b:5c:2f:84:cd:8e:37:9d:f6:dd:
                    94:a8:6c:93:d8:09:4d:3a:93:21:e1:cf:41:e9:22:
                    dd:ed:ba:06:71:96:2a:48:77:e5:4f:43:c0:ca:a8:
                    18:fe:8c:b3:36:3b:3f:60:64:27:a0:bb:b1:5e:c4:
                    30:06:45:0c:18:62:ff:c7:5e:1e:aa:46:97:a1:55:
                    41:59:8c:b2:33:e1:2b:cc:6e:0f:8c:46:26:e2:e2:
                    55:8c:47:66:9a:59:19:85:48:77:53:5f:2a:66:55:
                    ca:8f:29:c6:0e:a1:f4:04:d7:ee:53:98:f3:14:99:
                    50:48:3a:c9:ec:04:68:51:62:01:a5:99:74:ce:7b:
                    dc:e5:98:8e:50:6b:9c:ea:e0:ff:cf:fe:82:6d:9b:
                    2b:dd:4e:65:56:96:d2:5f:72:cb:ce:5e:bc:52:f9:
                    09:6c:cd:f4:5e:a2:93:b2:4c:17:8b:02:8b:2e:1c:
                    d6:1c:8d:e5:9e:c5:18:f1:4c:39:16:e6:6c:63:5e:
                    ba:1b:92:88:50:60:e2:f4:23:7c:32:37:69:e9:80:
                    1a:ed:92:f9:5c:cf:a2:cf:e9:4f:68:1b:35:f7:70:
                    97:73:f2:a4:87:4f:81:8e:ee:4e:88:57:f0:6b:af:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:54:35:87:15:CF:C1:91:CF:B8:41:45:69:BB:19:C2:45:94:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff4b429c-c4fe-3642-88e8-da94b9c2c43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:8d:2c:79:ee:19:94:13:32:1b:8e:22:ab:c2:fe:fa:44:
         3a:73:5f:c6:b5:9b:25:ee:2f:1b:90:62:85:83:14:ed:8a:50:
         1b:db:ce:e5:e7:d8:aa:15:4e:59:e4:75:7f:5e:e7:bb:a0:c7:
         29:b1:ff:ac:1d:53:92:27:d2:eb:2e:4b:2d:8e:16:b8:5f:c9:
         39:1d:c9:f0:79:a3:d2:ca:70:b6:b1:dd:56:2c:5c:b2:4d:b4:
         cd:4d:bb:11:19:bf:fb:2b:7f:de:3e:4d:35:14:23:21:be:13:
         8d:f2:39:f1:a7:26:02:ea:9d:41:20:e6:77:ce:10:be:32:81:
         4d:ba:47:ae:82:73:b9:f4:05:8a:ef:26:5b:ff:46:d6:ec:3a:
         90:4d:7b:ef:d6:d6:6a:51:37:ca:2a:88:bd:94:b9:c2:d7:ff:
         2a:55:eb:48:60:47:09:57:e0:72:84:80:22:c0:f5:5e:50:27:
         a7:ad:73:68:7a:6e:1b:93:82:5f:ff:23:7d:50:df:08:70:82:
         d0:66:57:02:ee:fa:09:be:11:7f:f1:cf:5e:09:49:86:88:28:
         e5:da:d0:c3:00:26:62:4d:c6:83:8f:10:44:91:80:df:35:f5:
         9d:fb:d3:71:90:05:4e:8a:1e:f5:ac:fb:78:ae:6f:b4:1d:6c:
         56:45:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:36 2024 by rpki-client on console-fra.rpki-client.org