Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa
File:                     30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa (raw, json)
Hash identifier:          jvtYylEN4JrkK5Cny9jV8UNyRNq8Nnw7KUGupZLzhQA=
Subject key identifier:   46:56:A7:4B:A4:D3:11:C2:26:ED:8F:38:D1:B4:92:1A:1D:C2:E0:26
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F43285845B4E8D6487838BAFBE486C680
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     400378
IP address blocks:        104.232.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 May 2024 21:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:48:78:38:ba:fb:e4:86:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=7fe347e8-53b0-4f58-b73a-cbd5af1a036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:b2:bd:99:45:a7:c3:f5:2f:cf:81:aa:81:
                    f3:de:da:d5:d5:1e:ec:0d:9b:d7:0b:7b:2d:4d:a9:
                    1e:bb:70:50:e8:8d:b1:34:56:95:51:7a:26:2f:db:
                    28:2a:ec:d1:48:3e:f8:db:93:94:1d:86:d2:d7:d1:
                    5e:92:97:11:15:0c:fb:44:ce:a0:53:c4:0a:1e:59:
                    e2:d4:8c:e0:3e:78:89:13:01:fc:10:ef:b8:bd:30:
                    fd:73:62:a5:ea:34:d8:57:f6:ee:ac:ef:25:f0:8d:
                    92:ec:6a:7f:c8:7e:51:a2:94:1e:fb:cc:f5:ee:ea:
                    4a:df:0e:74:75:1c:26:6d:fa:75:27:e5:db:2f:d7:
                    ba:75:9a:b5:9f:29:80:f3:d5:dd:f6:a5:4b:26:eb:
                    d1:23:b7:b0:1e:5c:d9:fd:c2:92:bb:ba:05:37:0f:
                    a2:e1:75:3b:41:a4:93:26:ce:45:84:97:fc:7f:7f:
                    99:a2:4c:3c:69:9e:20:8f:b0:89:10:cc:90:4b:6e:
                    df:f8:48:cb:29:2c:6a:a2:e7:1b:a5:4d:df:ea:e0:
                    30:da:41:5a:ea:e5:fc:1d:8c:68:d7:d7:c1:c1:3a:
                    f1:a8:49:f5:46:4f:b8:8f:b3:4c:c5:7f:d4:54:7f:
                    df:3a:d3:dd:7a:2f:b3:90:2b:ca:fb:3d:7d:4f:a5:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:56:A7:4B:A4:D3:11:C2:26:ED:8F:38:D1:B4:92:1A:1D:C2:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:b4:ed:7b:43:8b:39:2b:e1:cc:cf:03:e6:45:56:82:2f:
         ba:ec:16:18:37:5d:fb:de:34:09:8c:87:c8:a0:0c:3b:b1:97:
         4c:ce:05:df:d9:29:da:cf:60:ab:4e:96:e2:3f:03:22:99:d3:
         39:3c:e2:da:fb:f0:6a:9a:51:1d:c6:b3:6d:85:98:2c:d2:4a:
         f6:0f:aa:01:9f:0a:33:1f:b8:9a:99:e6:49:f8:72:22:55:13:
         5a:b0:95:65:3c:90:22:b9:e7:00:82:1b:d2:23:71:fc:b3:d5:
         48:c9:02:53:da:16:28:b5:b4:a4:77:e5:10:f4:24:4d:a9:eb:
         f7:df:1d:25:83:b9:3f:05:bd:98:9c:c1:95:50:64:5e:61:ed:
         a9:4e:16:56:8b:69:a3:39:33:67:d7:de:08:be:6e:8f:e0:42:
         99:9f:3a:8f:1d:19:63:d0:fb:c9:bd:e7:a8:6f:12:3b:5f:55:
         66:60:40:af:b0:b4:60:6b:f1:3f:84:60:78:14:ec:e8:41:23:
         e3:b6:03:f9:b2:30:6e:89:ed:1c:e6:b9:a3:68:43:1d:0c:2c:
         0a:37:08:3e:e0:7e:8f:b9:1e:ad:98:27:29:92:21:17:77:21:
         2a:f9:8e:79:46:5d:63:b0:c6:8c:0c:24:1d:77:e4:0f:04:1e:
         68:11:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----