Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dec01740-505a-395f-b2c6-feb936f25f7c.roa
File:                     dec01740-505a-395f-b2c6-feb936f25f7c.roa (raw, json)
Hash identifier:          80jhVBnO8S5J+JlBZVz6O2i8aGmbCupBNSTL6sw1nSw=
Subject key identifier:   D8:08:CD:3A:F9:04:87:82:40:C2:BB:FF:7F:9D:41:4A:5D:48:D7:84
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E859D0F931C541C403600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dec01740-505a-395f-b2c6-feb936f25f7c.roa
Signing time:             Fri 11 Oct 2024 21:09:58 +0000
ROA not before:           Fri 11 Oct 2024 21:09:58 +0000
ROA not after:            Thu 09 Jan 2025 22:09:58 +0000
asID:                     7385
IP address blocks:        23.27.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 18:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:85:9d:0f:93:1c:54:1c:40:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:09:58 2024 GMT
            Not After : Jan  9 22:09:58 2025 GMT
        Subject: CN=12f4fa6b-5c1d-4b85-99c6-69b6f3903713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:c1:4f:56:01:51:c5:7f:6e:23:ea:59:7e:
                    68:36:79:4c:0d:50:27:df:c7:ed:7a:ec:bd:94:5d:
                    54:74:7a:9b:38:06:52:b3:75:12:ef:4b:9b:be:c8:
                    c9:bb:41:0d:c9:d9:3e:df:2e:b7:5b:96:db:9d:60:
                    8d:f7:67:c0:3c:b6:cf:a2:38:1d:d8:97:91:1d:cd:
                    1c:79:2e:f0:f3:57:5a:60:fc:96:f2:03:c3:61:f4:
                    af:0f:b8:fc:2e:a0:41:9e:ac:98:d1:c6:c3:db:81:
                    e4:f8:34:44:12:a2:82:9a:56:28:06:3a:f2:e7:6a:
                    7a:57:61:18:01:ca:92:44:b7:09:b2:45:2a:fe:12:
                    1d:18:45:8d:5f:ee:7f:cc:80:34:98:2a:4d:ab:a2:
                    b3:63:22:cb:ac:47:bf:d8:49:7e:0d:9e:2a:ea:85:
                    16:61:d6:2b:92:73:92:4b:c8:10:b3:3d:09:83:cf:
                    e1:4e:69:8e:96:ef:a7:de:f0:f7:c5:13:9f:f1:4e:
                    fb:29:25:bb:07:4f:f4:94:2a:ba:d9:4b:3b:2a:8a:
                    26:06:c1:ee:9b:c0:2e:cc:99:84:fe:c9:ba:e3:09:
                    a4:fe:f8:c4:e9:ab:4b:63:e1:b0:a8:ee:7e:97:c3:
                    e1:56:99:55:d6:3c:9e:13:fb:19:55:ba:2d:24:b6:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:CD:3A:F9:04:87:82:40:C2:BB:FF:7F:9D:41:4A:5D:48:D7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dec01740-505a-395f-b2c6-feb936f25f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:86:76:ac:c4:a8:de:b8:0e:99:13:54:d1:fc:51:3a:e1:ec:
         01:c6:35:b6:cf:2c:e8:29:80:f9:a0:79:39:27:29:5e:1d:79:
         bf:d5:c0:fa:1e:a3:87:81:db:33:40:d0:9f:6b:3a:4f:ff:15:
         be:a3:68:78:16:9d:e1:15:c5:b4:bf:52:40:c6:3f:ac:fa:8b:
         87:40:75:56:cc:ec:fe:da:93:c7:f3:9c:a9:93:77:89:5c:10:
         2c:bd:c8:a3:97:88:bb:42:c5:30:d0:b1:e3:37:42:7e:ee:79:
         57:0e:0d:1d:97:d7:10:30:de:9b:40:ee:91:00:be:6b:3f:7e:
         af:37:fc:80:ce:97:10:95:74:9f:0f:77:10:33:df:f3:79:96:
         6b:ec:66:61:eb:fe:36:c8:29:b6:0a:28:c5:f3:11:f8:75:2b:
         67:83:d9:15:b0:c2:6f:d4:71:94:af:be:a6:d2:0b:60:15:d8:
         59:d1:db:ab:dc:fe:14:5f:0a:4b:4b:39:25:a3:3b:52:2f:10:
         45:d6:52:06:f9:1c:fa:19:82:cf:64:23:6e:b3:73:b5:35:7c:
         3b:4b:2f:12:1f:8e:eb:c1:21:10:7a:11:87:1a:aa:33:f5:c2:
         0e:64:47:11:3a:5e:66:29:99:b1:3d:9c:4b:4f:98:a6:f8:24:
         6b:a8:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:21:54 2024 by rpki-client on console-ams.rpki-client.org