Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0b474469-ac5e-3864-9948-bbb3964177af.roa
File:                     0b474469-ac5e-3864-9948-bbb3964177af.roa (raw, json)
Hash identifier:          lQBJyY81+FvDGfKCrumncFeHcgJfLJgwZwJY2G/DBmU=
Subject key identifier:   EB:4C:D1:09:17:50:F9:72:75:11:5C:F7:A8:DD:B2:25:56:5A:58:48
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F43285845FACBC7613757BB3E4FC8E500
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0b474469-ac5e-3864-9948-bbb3964177af.roa
Signing time:             Fri 24 May 2024 13:48:45 +0000
ROA not before:           Fri 24 May 2024 13:48:45 +0000
ROA not after:            Thu 22 Aug 2024 13:48:45 +0000
asID:                     14618
IP address blocks:        216.147.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 15:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:cb:c7:61:37:57:bb:3e:4f:c8:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: May 24 13:48:45 2024 GMT
            Not After : Aug 22 13:48:45 2024 GMT
        Subject: CN=f0f78a86-128d-41cc-82c4-64d8da4007bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ef:e3:e8:f9:7b:56:91:3f:56:5b:53:cc:d5:
                    a0:05:dc:f9:dd:f9:0f:8e:9e:3e:2c:97:e8:68:e0:
                    cc:2f:09:3c:dc:7a:b5:0d:9e:3e:02:4a:42:35:17:
                    a3:16:94:68:f4:59:0f:f3:65:ff:38:53:c4:84:71:
                    53:30:be:fc:af:af:48:d7:c5:73:07:db:5d:67:04:
                    72:9f:24:23:7a:21:cc:04:bc:98:51:5b:23:d8:5a:
                    9d:35:05:82:29:e0:a6:cf:c9:26:c2:e4:73:8c:24:
                    f7:70:4b:4b:da:9c:61:4d:70:57:41:a0:68:c0:4c:
                    96:38:d1:8f:d9:bc:b5:7b:ac:0c:1a:08:f7:6d:7c:
                    e8:a7:de:4d:53:3e:84:a0:a7:47:a9:f3:7e:e7:8c:
                    74:a5:1d:1b:79:ed:c3:ad:2e:71:37:3f:0a:91:75:
                    ce:bb:b4:c8:34:52:2f:33:f8:28:8a:f0:9f:f7:a6:
                    2a:9a:08:fc:5c:e2:7e:e2:22:c9:2e:64:76:20:1c:
                    7a:10:b7:ea:a5:f8:56:f0:cf:62:df:a1:f6:ed:57:
                    7b:af:ab:71:91:dd:99:f5:b7:4e:d6:86:37:2e:e3:
                    73:70:6a:25:e0:e8:35:7b:cc:83:b0:fc:30:e2:28:
                    19:2c:0b:74:75:ba:3d:78:a5:3c:8b:ed:b0:d6:60:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:D1:09:17:50:F9:72:75:11:5C:F7:A8:DD:B2:25:56:5A:58:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0b474469-ac5e-3864-9948-bbb3964177af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:d6:fd:d7:0a:7f:b5:50:15:56:62:47:48:28:f6:1e:fd:
         1b:2a:d6:8b:14:bb:98:90:70:e4:5b:d1:00:8f:0d:ba:98:c8:
         59:61:74:f2:c4:1b:8a:a3:58:a7:c6:3f:34:34:ec:4a:d4:5b:
         ca:9a:43:af:90:4b:8b:aa:41:b6:ff:e5:b0:67:7f:87:e5:49:
         0c:f5:62:5b:b6:fc:20:9a:47:45:f8:e6:67:ef:63:d7:db:ce:
         c5:7d:57:f2:c8:db:20:63:59:41:99:e7:f1:f0:f3:16:d9:bb:
         63:87:95:f3:1d:d4:8f:f9:7a:35:15:08:6f:9e:81:07:00:f4:
         15:b5:63:8b:70:29:e7:d8:92:2f:ae:4e:af:31:c1:40:70:ea:
         12:b3:3d:6d:f2:97:22:e5:d7:d8:38:3f:4a:6d:67:c5:21:d7:
         f5:d0:49:91:d4:28:c9:55:3c:c5:61:35:30:2c:6b:e0:7e:15:
         a1:57:ac:b3:b9:38:c1:24:e0:50:aa:cc:55:87:7b:07:ab:5f:
         5f:2a:52:5d:84:bd:e3:06:4d:76:b1:08:36:3e:0b:03:34:f9:
         19:e9:e6:fd:43:16:6b:fa:75:d4:b0:dc:e8:61:b6:1a:81:12:
         5b:89:6d:cc:69:46:e1:d8:67:a8:45:1e:1f:c4:6a:2e:c1:3e:
         13:6b:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----