Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4b101a8-8aca-33bf-8b09-8ad71a1e5d39.roa
File:                     f4b101a8-8aca-33bf-8b09-8ad71a1e5d39.roa (raw, json)
Hash identifier:          OGHgCycbDaalbYt9d1SaQZW1egel/FIPOXF5dM8EUL4=
Subject key identifier:   D0:0D:05:E6:DC:63:64:40:84:8D:90:99:FD:99:F3:78:E7:3A:E8:B5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA366E5B37A2FD5590F2B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4b101a8-8aca-33bf-8b09-8ad71a1e5d39.roa
Signing time:             Wed 04 Sep 2024 16:20:12 +0000
ROA not before:           Wed 04 Sep 2024 16:20:12 +0000
ROA not after:            Tue 03 Dec 2024 17:20:12 +0000
asID:                     11798
IP address blocks:        23.27.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 21:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:66:e5:b3:7a:2f:d5:59:0f:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:12 2024 GMT
            Not After : Dec  3 17:20:12 2024 GMT
        Subject: CN=05401a6f-4b57-47ec-9ff7-1b6ae741780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:9d:73:43:02:42:16:f0:b9:5c:b3:98:11:
                    28:7b:9d:3b:21:68:5d:f8:5f:85:ba:e4:e1:4e:7d:
                    52:42:77:82:dd:11:7c:18:13:f0:bd:66:a0:c7:ca:
                    bd:c8:01:17:51:09:6a:1c:4b:85:8e:dd:f9:16:71:
                    c5:25:91:e6:b2:42:6c:1a:ca:56:5c:9a:48:81:31:
                    8c:0f:40:36:1f:3e:d6:a4:22:93:43:83:ee:91:52:
                    db:1c:dd:a5:db:0e:66:79:ed:0c:fa:98:aa:75:13:
                    c2:d2:38:d3:a0:bd:e7:48:7a:9c:73:08:71:6d:de:
                    8d:c0:0d:35:44:6c:27:57:b8:40:8a:ed:cd:a1:d9:
                    96:fe:9f:3d:a4:bb:6d:ec:46:59:e3:bb:d2:4b:bf:
                    d2:f6:df:1a:28:7b:5a:f6:39:e2:4e:4a:66:65:ba:
                    38:0b:75:1f:68:6e:d9:2e:c8:fd:a6:d7:17:76:24:
                    7b:77:93:b8:02:85:b0:e4:78:5e:f6:17:b8:7a:3d:
                    d3:92:95:6f:65:d1:a0:fa:50:67:ba:0f:86:70:25:
                    bd:bb:4b:06:8c:dc:fe:68:1d:a5:75:76:43:7a:fc:
                    7b:a8:41:4c:4d:6b:fd:c7:a1:9e:3d:d4:2d:15:c5:
                    11:1d:ba:4a:1b:84:12:76:73:e6:21:61:3d:30:62:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0D:05:E6:DC:63:64:40:84:8D:90:99:FD:99:F3:78:E7:3A:E8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4b101a8-8aca-33bf-8b09-8ad71a1e5d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:80:1c:9e:e1:e5:e5:8b:0f:04:68:e7:64:f2:0f:cb:33:1f:
         a7:00:65:32:53:a5:a1:eb:f3:8e:3d:cb:b1:8c:34:c7:f5:c8:
         44:57:7f:ed:bf:2b:ef:60:86:80:f4:57:35:b8:ce:54:80:9e:
         8a:69:74:2d:43:53:78:22:37:6d:96:ea:87:d9:d5:22:2e:b7:
         07:f8:3f:a9:08:c8:15:3e:df:2c:27:a2:c8:a1:10:9d:e1:65:
         52:46:03:8f:88:a2:b9:27:bd:84:70:eb:f0:a5:a1:28:18:d9:
         97:ab:e9:db:a9:ec:19:05:5e:8e:40:ac:72:c0:e8:93:a9:21:
         34:5b:4c:60:ec:06:76:c7:91:78:8f:dc:6a:2a:bd:fc:af:d1:
         ec:53:10:f2:ab:72:19:ba:10:5b:51:c1:dc:21:72:ea:ba:24:
         d2:0c:ad:64:4f:dc:32:cd:85:52:0b:32:bd:21:bd:0e:31:7b:
         19:eb:97:1d:8e:b1:2a:d7:2b:1f:23:73:23:26:5b:55:f7:c6:
         d9:8d:83:d7:c1:bb:47:00:e7:e3:c1:ef:6f:ac:b5:67:e9:27:
         58:d8:eb:0a:49:20:f8:aa:2e:c8:39:8c:5e:a9:a3:d8:35:3a:
         77:48:9d:82:23:ee:80:8a:90:78:c3:f6:c9:82:16:a4:ec:2c:
         35:98:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 22:31:16 2024 by rpki-client on console-fra.rpki-client.org