Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/8d769e89-79d7-31e6-ba03-412af8ea50e3.roa
File:                     8d769e89-79d7-31e6-ba03-412af8ea50e3.roa (raw, json)
Hash identifier:          SnuLinkEQPfzVrmq4qdrEf1F3hOhq++dbknbXtmGVzU=
Subject key identifier:   B9:F0:19:2F:15:BF:FD:8E:37:9A:3F:81:FB:F2:17:06:7A:7A:FA:24
Certificate issuer:       /CN=dac9cb7f-b46d-477e-8698-95f66c423aab
Certificate serial:       010D0C9F432858453749D6480C61EF5ED2C076F0
Authority key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/8d769e89-79d7-31e6-ba03-412af8ea50e3.roa
Signing time:             Fri 15 Mar 2024 13:04:18 +0000
ROA not before:           Fri 15 Mar 2024 13:04:18 +0000
ROA not after:            Thu 13 Jun 2024 13:04:18 +0000
asID:                     17160
IP address blocks:        104.247.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 15:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:49:d6:48:0c:61:ef:5e:d2:c0:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac9cb7f-b46d-477e-8698-95f66c423aab
        Validity
            Not Before: Mar 15 13:04:18 2024 GMT
            Not After : Jun 13 13:04:18 2024 GMT
        Subject: CN=d5e406cd-096e-4da5-b9a0-cd327b88551c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:70:19:3f:4e:ad:ce:22:67:6e:b8:e5:f7:
                    4e:f9:c0:45:c7:1e:94:32:b3:5d:e6:d4:0f:a0:10:
                    3d:ba:4f:05:94:8a:a2:10:9f:d1:87:66:83:c4:29:
                    b2:06:57:80:a6:52:52:11:03:a4:4c:4b:74:2c:67:
                    d8:0b:25:a5:53:e5:7f:01:17:a3:3f:83:6f:cc:27:
                    59:ca:e0:48:ef:4b:19:2a:cb:87:21:f4:c0:34:07:
                    76:13:74:24:23:57:d2:46:5b:ae:07:b6:9a:01:4b:
                    b3:62:b4:65:f0:16:8c:c1:9a:77:9d:12:b4:72:dc:
                    ff:d3:fe:8a:82:06:61:97:b4:b1:51:c1:2d:db:e1:
                    f3:28:cd:df:58:26:29:79:97:2b:69:03:ce:f5:4d:
                    62:a4:23:5d:45:5e:7e:58:59:9d:9e:37:2c:50:e7:
                    b4:56:2c:cc:2c:3b:26:c6:c1:2f:fb:3a:58:d4:0f:
                    3e:b3:7e:18:c6:26:97:8d:60:4a:c7:15:bf:15:da:
                    57:0e:d2:8a:6a:ad:cc:5f:63:c1:86:d9:bb:8e:a1:
                    39:6a:62:74:d8:0c:18:81:19:98:58:9c:a3:f9:17:
                    b3:fb:c2:bb:7d:cd:4d:cc:f5:dc:71:02:79:7a:5f:
                    32:c4:88:6c:24:8f:0b:f8:01:1e:36:77:60:40:e4:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:19:2F:15:BF:FD:8E:37:9A:3F:81:FB:F2:17:06:7A:7A:FA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/8d769e89-79d7-31e6-ba03-412af8ea50e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl

            X509v3 Authority Key Identifier:
                keyid:A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:fa:10:97:a5:e7:95:7c:13:68:24:44:a8:c9:1d:5f:f4:
         72:61:ce:42:b3:82:82:37:94:99:58:1a:ad:40:4b:f5:ae:33:
         4a:ca:78:9a:4f:95:e4:7a:52:38:f7:56:ea:f9:72:de:bf:e0:
         9c:65:23:af:3c:43:bf:28:c3:07:c0:ce:30:8b:dc:08:25:78:
         b5:cd:c0:fd:e9:3c:c3:46:38:c9:13:43:07:7a:05:11:6e:d8:
         42:d2:9b:3d:c2:f2:38:75:d9:8c:be:02:81:9f:a2:61:0d:ed:
         08:1f:6a:b3:18:41:51:19:eb:80:d7:74:37:fb:b2:1b:22:70:
         c3:bd:67:8b:b7:2d:1c:67:45:0d:58:ca:84:b7:c4:bb:3c:63:
         8b:a9:a8:49:96:32:1d:f1:6a:69:64:c5:fd:c9:09:b4:c6:9c:
         e8:29:3a:6c:56:4f:c1:46:1d:9b:c3:e7:e8:fc:c2:26:19:b5:
         a1:21:ee:76:e4:78:ae:58:b8:fe:08:0a:93:47:4b:4b:80:10:
         01:29:33:4a:df:2a:2e:7d:62:09:dc:0a:1c:dd:3e:9a:6c:5a:
         37:f7:9e:5e:f3:0e:72:33:a7:56:69:15:63:dc:e4:e5:ca:dd:
         81:83:d7:37:e2:0b:c5:2c:04:47:58:f5:29:4c:b6:8e:9c:06:
         ba:af:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 19:57:57 2024 by rpki-client on console-fra.rpki-client.org