Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/4c45a11d-803b-3834-a61a-4a374ce99165.roa
File:                     4c45a11d-803b-3834-a61a-4a374ce99165.roa (raw, json)
Hash identifier:          JeYmo+M0x+Eg4NGKTtVIo4VAa/v3m1Xw0ccCRkOJAv4=
Subject key identifier:   1C:55:71:8A:CF:CC:69:A3:77:B0:28:50:29:07:8F:6E:4C:CE:13:A6
Certificate issuer:       /CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
Certificate serial:       010D0C9F4328584700A563B2CBBD616C1040A480
Authority key identifier: B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/4c45a11d-803b-3834-a61a-4a374ce99165.roa
Signing time:             Mon 26 Aug 2024 08:53:11 +0000
ROA not before:           Mon 26 Aug 2024 08:53:11 +0000
ROA not after:            Sun 24 Nov 2024 09:53:11 +0000
asID:                     43260
IP address blocks:        23.176.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 12:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:00:a5:63:b2:cb:bd:61:6c:10:40:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
        Validity
            Not Before: Aug 26 08:53:11 2024 GMT
            Not After : Nov 24 09:53:11 2024 GMT
        Subject: CN=eef5c2e1-ef30-4e2c-9c41-27f3da317842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:bf:f3:c1:4e:75:4e:9c:c2:63:cd:5b:ec:
                    22:d0:9b:d2:74:35:c5:5a:47:f5:89:bc:72:b4:20:
                    e3:94:4d:b8:80:b6:10:71:ca:57:27:73:f4:09:b4:
                    e2:8b:70:cd:9d:31:9c:fb:2d:0a:b4:f3:f7:b6:20:
                    9f:ec:f4:69:2b:f3:07:92:28:47:ab:0c:ac:96:4b:
                    99:be:14:18:36:2a:34:0e:63:84:8a:60:af:eb:7e:
                    eb:e1:38:5c:ef:62:72:f1:db:54:73:4e:4b:d5:b7:
                    7a:ec:84:34:ab:0d:07:7e:c2:6d:25:6a:eb:1a:4f:
                    2f:dd:9d:03:91:d4:71:c5:1a:d2:c7:75:ef:b6:f6:
                    82:c4:cc:04:9e:c8:bb:96:0d:83:b1:0f:fc:31:fc:
                    f6:ac:0a:a4:5a:f7:5e:b3:a0:09:01:e7:c5:34:69:
                    4a:15:f4:a7:41:d9:59:b5:75:97:a4:07:1c:b7:3e:
                    9e:85:d0:cc:a1:08:4e:2d:a3:1a:f3:16:a0:53:1e:
                    5d:3e:9a:e0:aa:26:ce:0e:9f:02:f8:9b:60:05:0a:
                    0f:6f:e3:50:e4:f7:43:04:1e:a7:25:a4:b8:fc:e9:
                    ee:ad:d8:d0:93:41:10:73:f7:eb:d1:58:dc:40:f1:
                    be:32:aa:4a:47:cc:eb:de:8f:23:9a:01:20:3d:78:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:55:71:8A:CF:CC:69:A3:77:B0:28:50:29:07:8F:6E:4C:CE:13:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/4c45a11d-803b-3834-a61a-4a374ce99165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:8e:9a:15:5a:e5:5d:fc:6f:c9:4e:08:30:d3:c1:ee:a2:
         27:42:51:3b:f1:45:da:3a:32:24:18:99:5d:b0:48:7c:c1:2c:
         88:51:8f:ac:95:f0:b7:3e:b8:6c:80:19:dc:66:33:1a:ee:10:
         0a:43:02:42:7e:fa:ec:97:95:7b:e6:bc:75:f9:54:65:76:1b:
         28:ac:92:d1:f9:2f:54:50:ac:5f:e7:60:cc:c1:ad:31:b6:a5:
         16:f8:6e:4e:89:9c:fa:f1:97:50:04:b5:bc:58:0c:e0:70:48:
         0e:89:11:78:b8:f4:78:6e:c7:c9:5f:e8:73:26:96:1f:04:86:
         3f:2a:26:2f:74:46:a4:72:c5:c6:c1:72:63:45:29:10:e9:b6:
         c9:60:73:1f:8f:95:b2:03:03:a2:0a:eb:29:fa:00:db:a3:21:
         2b:c7:09:84:9e:9e:be:03:fa:5a:75:74:c0:25:85:43:fe:f3:
         1b:5b:fb:1c:7a:92:fa:99:9a:33:7e:5d:aa:8a:7e:38:15:19:
         68:12:3c:9f:4a:93:49:58:07:65:54:a6:9f:30:53:55:fd:95:
         17:fa:77:bc:85:05:08:65:2d:23:13:45:39:ae:e6:93:ef:b4:
         69:ac:5c:8b:6f:2f:ad:90:75:3f:87:5d:b4:12:4b:a4:a6:fd:
         08:69:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----