Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8dd77f43-4694-3c83-9427-5968573f282d.roa
File:                     8dd77f43-4694-3c83-9427-5968573f282d.roa (raw, json)
Hash identifier:          UtqqOiyCsy7yCn1TgTZIKfYcdBlzwG1gKBSVyMw3UuE=
Subject key identifier:   73:5E:F5:24:CE:54:29:17:70:3E:C2:25:DF:6C:A6:AB:39:84:B8:30
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA3678036A53F4296C82800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8dd77f43-4694-3c83-9427-5968573f282d.roa
Signing time:             Wed 04 Sep 2024 16:20:12 +0000
ROA not before:           Wed 04 Sep 2024 16:20:12 +0000
ROA not after:            Tue 03 Dec 2024 17:20:12 +0000
asID:                     11798
IP address blocks:        23.27.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 17:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:67:80:36:a5:3f:42:96:c8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:12 2024 GMT
            Not After : Dec  3 17:20:12 2024 GMT
        Subject: CN=e6fee82f-a882-47cf-ba59-15b552637cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:c0:6e:b5:05:d1:27:d6:9c:a8:b4:fa:68:
                    71:77:bb:2e:67:b3:82:6e:e0:04:cf:38:a8:9b:eb:
                    92:fa:17:18:a7:a7:7d:6b:72:5f:63:7b:7a:01:b4:
                    e7:79:ee:46:63:56:e3:cc:de:0a:90:20:93:ef:81:
                    73:48:a2:6d:77:5c:e9:2d:a8:e8:d6:55:18:3b:e8:
                    49:e5:24:fe:ef:1d:0d:fe:a7:e1:56:1c:5f:da:0c:
                    3b:e3:79:52:9c:17:10:38:07:a8:61:e4:37:b1:34:
                    9f:bf:6c:c0:c2:cb:8a:ab:ec:04:ae:5c:99:7e:b7:
                    1d:d4:b6:7f:d0:ac:bd:d5:85:f1:eb:43:e2:04:d5:
                    0c:56:be:fa:cc:0f:de:e8:82:21:04:b2:63:28:a5:
                    db:c8:7b:16:c6:6b:c4:01:ed:b5:1d:74:84:d5:85:
                    17:3b:43:91:92:08:81:2c:5a:0a:a6:74:f3:ff:4a:
                    1c:df:35:b6:0d:21:fd:9a:4e:2b:45:bc:13:1a:df:
                    35:1a:37:03:53:31:e8:97:a8:73:33:8a:b4:0f:31:
                    e0:96:d2:44:bd:85:d9:9b:7f:c1:db:54:b9:3e:05:
                    15:a4:12:40:f8:bf:55:6c:91:e5:32:53:81:ca:0a:
                    2d:81:2d:45:e8:4a:26:cb:64:fc:5a:7b:5d:46:9a:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:F5:24:CE:54:29:17:70:3E:C2:25:DF:6C:A6:AB:39:84:B8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8dd77f43-4694-3c83-9427-5968573f282d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:5e:aa:a1:83:64:a1:0f:21:e2:0e:91:c2:0a:f0:19:51:
         bf:de:7a:63:e7:5c:aa:86:c3:dd:4b:72:6c:9b:34:52:a2:4b:
         e4:41:61:c9:75:b3:59:b7:ec:e5:ad:b2:75:9a:96:70:72:cd:
         74:0c:da:48:5c:5f:61:c2:69:52:03:69:ca:50:ba:f1:69:2a:
         28:8f:2d:86:21:57:d3:a1:c6:16:02:30:98:7a:b4:59:6c:38:
         bf:2c:b0:63:be:3c:6b:e0:37:2b:a7:da:04:4b:d7:af:17:ac:
         81:b3:5d:77:18:44:d9:4f:2b:a9:bc:e4:68:1f:ac:5e:67:d4:
         f5:6f:f2:7b:e5:3c:82:e4:28:45:d1:da:1c:a8:3d:f3:27:a9:
         b2:69:48:be:f6:01:5d:a5:e9:80:bc:81:4f:25:d8:d1:d7:e8:
         6c:9f:20:ca:7d:85:e0:7e:3a:48:9f:46:da:a7:4c:7b:5c:ee:
         01:3c:d4:7e:33:2b:5c:a2:27:5a:d2:fa:b9:6a:d5:e1:94:43:
         c6:ec:ec:bf:7d:66:33:a0:fe:32:fa:4a:08:21:27:93:5a:a6:
         93:79:e9:56:3e:8a:21:af:d7:a7:4a:45:82:e1:02:84:d0:60:
         ff:fc:cf:4f:27:3f:3a:e4:db:d5:98:ec:fa:8c:58:b3:67:2c:
         1e:eb:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 19:23:57 2024 by rpki-client on console-fra.rpki-client.org