Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f72522d6-1e37-37d4-b0d7-c724b7143926.roa
File:                     f72522d6-1e37-37d4-b0d7-c724b7143926.roa (raw, json)
Hash identifier:          csLgjEansgZyQecbRrM947SwAcwnlSUYDZmxQ6e89u4=
Subject key identifier:   D1:87:34:8D:BA:EB:D7:F1:5A:FB:99:7B:AF:1C:70:4B:7C:2C:D1:C0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA36759B88E5D466E1E4880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f72522d6-1e37-37d4-b0d7-c724b7143926.roa
Signing time:             Wed 04 Sep 2024 16:20:12 +0000
ROA not before:           Wed 04 Sep 2024 16:20:12 +0000
ROA not after:            Tue 03 Dec 2024 17:20:12 +0000
asID:                     11798
IP address blocks:        23.27.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 17:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:67:59:b8:8e:5d:46:6e:1e:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:12 2024 GMT
            Not After : Dec  3 17:20:12 2024 GMT
        Subject: CN=a740f348-150e-4905-aaf0-66e7d8951328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:8a:c9:09:96:a2:65:d4:4c:60:9e:35:36:
                    a7:ce:41:b7:fe:28:c9:3d:0d:c7:49:5c:ea:55:3e:
                    79:bf:3e:ee:4b:95:f7:ab:1e:78:4e:11:9c:b7:e7:
                    6d:2f:c6:0b:87:23:f5:1a:f3:fc:3b:83:3e:e3:7b:
                    ba:b8:92:19:73:b5:b1:4d:18:2f:fa:cb:0d:81:30:
                    ab:e7:19:58:c4:c9:cf:c5:90:80:bb:2c:05:b9:83:
                    02:8e:8d:84:3d:d7:5d:f4:bf:df:99:50:0f:57:c8:
                    0b:8a:26:50:08:09:81:58:f4:cd:cc:7a:72:af:c2:
                    c8:87:2e:76:b5:c8:9d:49:33:a7:99:9e:bd:2b:76:
                    31:16:a7:f9:42:00:38:31:94:4b:95:d1:cc:9d:e6:
                    f1:f3:14:9d:50:56:a0:7a:96:b9:a1:bd:77:99:e8:
                    e3:f7:bf:15:93:02:77:7c:36:9c:47:f5:cc:45:cb:
                    98:e7:b4:b3:7d:66:42:5a:c0:fe:6a:ad:88:c8:5a:
                    b0:cd:62:8c:73:19:93:75:5a:45:00:95:f3:02:f0:
                    3b:9d:20:aa:ea:74:43:e3:3d:17:5d:9c:5f:cd:7b:
                    69:68:f2:7a:0c:28:db:70:f4:0c:b2:ca:7d:94:f7:
                    64:74:33:18:26:65:fd:0a:f4:b4:60:e3:68:47:25:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:34:8D:BA:EB:D7:F1:5A:FB:99:7B:AF:1C:70:4B:7C:2C:D1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f72522d6-1e37-37d4-b0d7-c724b7143926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:0d:29:d0:f1:73:ae:54:20:33:bd:74:7b:28:5c:15:90:
         a8:cc:63:cd:d2:d5:a1:e9:ba:59:4e:82:33:45:aa:84:79:4b:
         4c:a4:64:43:1a:af:86:bc:00:9d:91:22:08:63:7f:2c:44:1d:
         ff:f9:ab:49:25:76:24:66:e0:67:24:bd:20:1c:10:7d:55:32:
         00:22:9f:5e:2a:2d:ac:3d:db:1e:ce:d1:35:42:14:17:60:98:
         98:ad:35:0d:32:86:74:7d:62:57:5f:c9:62:a4:1b:4b:ed:05:
         4a:70:a5:05:f6:2f:fa:34:e2:31:f1:a8:bd:74:70:79:99:5e:
         d4:4e:04:6c:0f:69:00:a7:ab:45:3c:24:7f:28:5a:43:5f:89:
         c2:df:e8:30:63:f7:31:ce:e1:68:c6:c8:31:27:ec:73:8f:68:
         84:6f:95:54:b4:4b:19:7b:c0:af:af:15:30:44:13:c2:54:d7:
         cc:ac:12:48:96:02:7a:44:4f:75:64:b2:f6:ae:01:af:29:1d:
         9f:9e:4b:c6:d7:9d:70:2b:6a:9d:b9:73:a3:36:0b:09:49:77:
         ed:d5:35:54:25:aa:4e:6e:e5:4f:12:77:d1:64:80:65:73:0c:
         24:f4:71:37:47:81:00:b7:3e:fc:8f:d6:09:7d:ad:71:bb:1d:
         4d:b8:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 19:23:57 2024 by rpki-client on console-fra.rpki-client.org