Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fa91549c-083c-390b-85a2-f02560c6b741.roa
File:                     fa91549c-083c-390b-85a2-f02560c6b741.roa (raw, json)
Hash identifier:          bIqTBkXtOXgh0BB2cQlfLkvE7ntojD2QP55aVZNHCBA=
Subject key identifier:   53:63:90:16:61:FE:71:E7:5D:6A:68:71:A2:9C:D9:F0:7E:91:56:F4
Certificate issuer:       /CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
Certificate serial:       010D0C9F43285846A234EED2D98164B201ED8FE0
Authority key identifier: B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fa91549c-083c-390b-85a2-f02560c6b741.roa
Signing time:             Tue 23 Jul 2024 13:00:36 +0000
ROA not before:           Tue 23 Jul 2024 13:00:36 +0000
ROA not after:            Mon 21 Oct 2024 13:00:36 +0000
asID:                     11972
IP address blocks:        23.176.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 08:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:34:ee:d2:d9:81:64:b2:01:ed:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
        Validity
            Not Before: Jul 23 13:00:36 2024 GMT
            Not After : Oct 21 13:00:36 2024 GMT
        Subject: CN=be18483b-ef6a-4cca-93f7-0033714e6b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:66:6c:e2:23:43:c8:54:bf:48:9e:01:60:
                    f8:f9:15:7f:70:e2:65:82:68:69:85:bd:94:c1:56:
                    e9:21:51:28:c2:f2:3d:61:4e:19:4e:31:51:61:47:
                    39:e2:f3:44:d0:ea:aa:55:dd:45:8e:d7:d0:87:37:
                    1b:6e:95:8e:86:81:5b:a7:9e:81:40:68:72:4f:dd:
                    5c:fe:01:f1:34:f8:3b:ea:13:fa:34:59:35:b9:b8:
                    02:dd:0b:a5:9b:51:b7:66:cf:e7:d8:c4:af:d6:0a:
                    92:26:94:00:6d:9d:8e:31:df:cb:b7:1b:77:d5:3e:
                    80:c8:2d:25:c2:19:31:3b:ce:5b:61:4c:51:b0:e0:
                    f5:df:07:bb:4d:cc:93:a0:68:39:a8:13:89:a9:ab:
                    03:c8:0d:b8:f7:18:1b:45:ea:49:95:49:ab:7c:d7:
                    1c:b0:4e:99:c9:24:7f:c8:59:e6:c7:e9:60:34:36:
                    fd:84:ef:62:74:3a:d9:6f:c8:52:94:d4:c0:7a:8a:
                    6c:b9:b0:f0:cf:73:b5:b1:21:86:79:75:37:73:0e:
                    9f:5d:57:6f:10:1c:47:c4:25:89:bb:23:70:d4:fe:
                    39:84:76:06:fa:2e:ad:c7:40:5c:1f:3a:b4:b9:bd:
                    c8:39:4a:91:a7:59:4d:8e:ba:12:f1:c4:1d:4d:22:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:63:90:16:61:FE:71:E7:5D:6A:68:71:A2:9C:D9:F0:7E:91:56:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fa91549c-083c-390b-85a2-f02560c6b741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:55:d1:24:6a:1f:54:8e:01:64:e5:bb:80:a7:b2:a8:80:
         8e:9f:f4:b5:18:11:b9:af:d8:1e:da:2a:6a:d4:20:55:f7:46:
         cc:88:4a:48:6b:7c:7a:5e:48:b4:30:ec:83:39:d1:25:d8:8e:
         6a:90:9a:f5:a7:de:f0:56:38:ed:d0:f3:e9:56:b7:8e:39:ff:
         2a:f6:7f:de:f9:2d:a0:c7:b8:62:c4:cd:38:83:8c:35:1d:1d:
         78:f1:88:93:de:2f:5e:1a:64:f8:cb:c1:95:a9:cc:4a:cd:a4:
         be:fa:81:7a:ec:b1:38:08:c3:d6:db:ec:28:67:b9:01:df:4f:
         e1:62:80:46:86:ed:47:e2:95:74:72:24:2c:28:9c:6a:fd:c0:
         aa:fd:13:d9:8a:2d:0f:28:6e:95:84:5d:72:0d:b1:f7:01:4e:
         ed:52:ad:cf:86:dc:57:aa:20:1f:1d:8a:61:dd:aa:e9:8e:be:
         4c:89:88:3d:52:f0:cb:a1:4f:c3:27:ef:c6:35:4f:d2:31:c1:
         1d:c2:87:e2:8e:3e:2e:cf:a1:6d:da:94:cb:bd:b1:4d:ed:9c:
         59:d5:b9:41:7f:e3:a7:28:2f:08:37:c8:4c:3b:67:ad:17:f8:
         87:d9:67:c9:c3:7b:53:a0:9c:15:20:7e:97:c4:14:c5:9f:72:
         05:77:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----