Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4328475f-bb6d-34c7-a828-81baca402b41.roa
File:                     4328475f-bb6d-34c7-a828-81baca402b41.roa (raw, json)
Hash identifier:          epluDCjGeui217C3DfIozQeSPZIU/+kCTmpc2nS3cb8=
Subject key identifier:   93:00:AA:A2:59:4A:A8:93:6A:81:83:5C:34:C9:39:78:34:A0:CD:83
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858466BC489F859FB69D1C0C40E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4328475f-bb6d-34c7-a828-81baca402b41.roa
Signing time:             Thu 04 Jul 2024 01:00:26 +0000
ROA not before:           Thu 04 Jul 2024 01:00:26 +0000
ROA not after:            Wed 02 Oct 2024 01:00:26 +0000
asID:                     3223
IP address blocks:        172.94.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:c4:89:f8:59:fb:69:d1:c0:c4:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  4 01:00:26 2024 GMT
            Not After : Oct  2 01:00:26 2024 GMT
        Subject: CN=8e8caf60-93e8-4516-9d17-310548da68ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:b8:f5:f2:52:50:29:ab:87:ea:c0:b4:47:
                    cd:fc:d3:74:7d:fc:b8:5b:a8:ab:d6:98:cf:9a:3a:
                    74:c8:9e:8d:3c:b3:bd:fe:30:b2:70:85:ed:0d:b7:
                    a9:74:bc:c5:39:11:cc:49:e7:ba:4c:64:2b:ad:00:
                    6f:0a:47:8f:cd:dc:27:8a:9c:19:e3:6f:79:8c:63:
                    36:59:f6:a4:9d:bc:88:b8:83:32:a2:6b:e7:c4:ba:
                    ed:d0:06:50:91:85:26:3a:b6:21:46:78:fa:7e:01:
                    50:19:6c:0f:77:38:22:9e:21:8b:e6:c1:ca:80:f8:
                    e4:77:17:a5:d2:cf:76:f3:89:46:5f:73:0c:3f:e1:
                    e4:8f:fd:4e:31:fc:52:02:0d:ae:89:9e:d2:23:e9:
                    74:ec:34:df:e6:fc:16:d0:a2:32:85:4a:b1:7b:2f:
                    9e:13:8a:69:b7:3a:a2:76:81:24:3f:63:1d:c5:d7:
                    29:bd:bd:d1:4f:45:e3:87:6b:71:eb:f6:83:a7:15:
                    48:85:a1:dc:f7:b2:d0:2e:53:91:6e:02:8f:ec:4d:
                    f0:52:f6:1f:5d:e0:42:82:00:d9:69:4f:37:c4:bd:
                    62:83:4a:6d:04:b0:f9:14:04:75:8c:cf:48:d5:0c:
                    a6:e3:8d:20:35:ef:0f:9e:a5:ee:6d:e6:23:44:94:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:AA:A2:59:4A:A8:93:6A:81:83:5C:34:C9:39:78:34:A0:CD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4328475f-bb6d-34c7-a828-81baca402b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:cb:a4:1a:3e:af:92:23:7b:72:85:34:c6:17:35:37:4c:
         07:e4:60:41:66:0e:51:7c:cd:1d:01:f2:a4:28:a7:49:1f:82:
         24:8d:a9:60:30:2d:19:bb:a0:2f:98:30:de:f8:f3:84:79:8d:
         1f:2d:d4:8e:08:bb:bb:f7:3a:1e:25:31:70:0b:f0:62:bb:29:
         b1:23:0a:ab:16:16:c0:da:0b:ec:d6:79:5b:a9:09:8e:16:ac:
         3f:01:94:35:13:07:d6:23:de:e1:66:49:f7:bf:94:9a:d6:ea:
         ef:82:f5:ed:54:e4:64:d7:51:8e:93:ff:a5:c1:25:aa:ed:f6:
         30:3d:62:5a:74:19:d6:5f:86:f2:80:48:ac:28:d9:c1:56:9c:
         50:49:ba:85:6a:e4:1c:ce:8b:c5:60:47:76:f0:59:59:b3:84:
         45:6c:4c:7c:ba:41:70:1e:91:4a:12:34:5b:ad:8a:14:72:bc:
         6f:8d:52:62:5d:ad:cd:e1:6e:5b:39:7a:78:a2:4b:08:96:da:
         02:18:35:0e:ad:ee:44:46:eb:af:4a:03:0e:01:e6:5e:4f:ef:
         03:4d:bc:54:a8:4a:21:55:c1:8a:35:fc:59:29:9a:08:ed:6c:
         f9:5a:c9:2b:83:bd:c0:ee:81:e1:c1:56:89:d9:8c:06:f7:db:
         59:a3:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----