Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/15bd9394-7005-3444-8f76-9bd19eaf241a.roa
File:                     15bd9394-7005-3444-8f76-9bd19eaf241a.roa (raw, json)
Hash identifier:          1oFfCHTqQwEIqxHm9imqwvTIm64/pYssO/NkIugu1JA=
Subject key identifier:   F5:F8:36:94:3B:ED:2A:21:54:0E:5F:98:C3:98:BD:EA:73:27:86:9C
Certificate issuer:       /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Certificate serial:       010D0C9F432858462FBEDBCF20143F78637918E0
Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/15bd9394-7005-3444-8f76-9bd19eaf241a.roa
Signing time:             Wed 12 Jun 2024 13:00:33 +0000
ROA not before:           Wed 12 Jun 2024 13:00:33 +0000
ROA not after:            Tue 10 Sep 2024 13:00:33 +0000
asID:                     1031
IP address blocks:        23.145.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 23:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2f:be:db:cf:20:14:3f:78:63:79:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
        Validity
            Not Before: Jun 12 13:00:33 2024 GMT
            Not After : Sep 10 13:00:33 2024 GMT
        Subject: CN=1a300ca1-0f6b-478f-ba1a-b5658958c728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:a3:76:17:f3:8f:50:fd:a4:d5:03:84:c6:
                    5c:d7:81:b6:02:ae:0c:43:d3:b6:62:6a:f3:49:15:
                    85:47:05:b6:4a:c4:78:b1:b7:c5:fb:10:e8:d8:a5:
                    72:74:0a:24:09:64:e5:27:11:bc:1e:86:59:ea:15:
                    02:63:b3:27:53:47:57:d2:1c:e8:da:48:99:bd:4f:
                    dc:1e:8e:69:64:8c:b6:6e:11:25:bf:55:d3:30:66:
                    c9:d7:80:93:1b:0e:c9:e5:3f:56:ab:2a:c5:8e:55:
                    78:c4:7b:53:aa:0a:9d:ea:53:52:69:43:4b:3d:14:
                    17:d4:50:01:c5:3e:88:cf:7b:2d:bb:4d:b6:4b:b5:
                    d9:c2:63:56:f4:32:94:02:c2:7c:33:b2:1d:93:ef:
                    48:ad:6e:ee:0c:c3:cb:a5:49:44:b1:31:52:03:be:
                    3b:ae:4c:9b:f3:7b:b2:f7:6a:ce:c4:5f:d7:bb:97:
                    17:ed:a3:64:89:ab:61:4f:d8:95:b3:85:e9:94:04:
                    72:8c:92:21:eb:e8:72:0f:61:20:a2:ee:4f:0b:1e:
                    d2:e8:bf:b8:71:1c:8e:ab:5c:1a:47:7c:7c:a2:13:
                    ea:3c:27:3a:e1:a4:02:28:30:58:8e:0c:77:8f:d9:
                    71:ce:a0:36:8c:0c:d7:a0:27:5a:7c:6b:79:ed:0b:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F8:36:94:3B:ED:2A:21:54:0E:5F:98:C3:98:BD:EA:73:27:86:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/15bd9394-7005-3444-8f76-9bd19eaf241a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl

            X509v3 Authority Key Identifier:
                keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:2d:26:5e:30:e2:00:a8:25:3e:3d:62:9f:52:23:d1:af:
         4d:98:8a:0d:3d:c1:ab:dc:d7:8d:25:32:9a:78:b3:0f:45:1e:
         c4:89:01:91:3f:58:15:d6:6c:f0:20:c8:6c:00:e6:a4:91:13:
         2c:e1:26:af:3e:fa:69:7c:d3:59:98:06:66:b9:d9:92:81:81:
         d3:64:af:01:73:68:2a:07:ed:2b:6c:d9:f4:ac:2e:ac:c0:69:
         44:e8:71:b1:fe:13:d5:a9:9e:74:fc:b5:37:59:c1:75:62:b5:
         ee:e3:e4:e6:da:12:79:87:58:6d:fa:14:1d:31:e6:f1:87:63:
         e1:69:0b:a3:11:8f:64:89:56:fc:6f:d7:07:6b:79:d1:eb:10:
         2f:a4:e7:1a:c5:63:0a:b1:d2:ac:18:cb:3f:ed:7e:21:fb:ee:
         71:da:4b:92:ca:da:8c:37:72:de:db:37:55:0c:3f:de:16:83:
         da:c2:0b:28:5e:c3:6b:64:cf:bc:89:28:0f:c1:bb:9a:7a:8c:
         88:04:b8:10:e8:b1:a1:09:a0:ee:e1:d2:39:43:90:d3:ab:ed:
         c5:38:ff:d0:93:ef:a9:a4:d2:d5:d8:7e:25:69:88:7c:84:c7:
         dd:53:8e:e7:7d:4a:ce:3b:e1:ba:11:93:2a:05:d1:29:23:d8:
         e2:51:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----