Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94236047-31d2-3232-b850-41844aa9ff01.roa
File:                     94236047-31d2-3232-b850-41844aa9ff01.roa (raw, json)
Hash identifier:          zdv5DDJn62F0bY5n6Xpf3ETbq8JugS3PD/xyfbGzoIw=
Subject key identifier:   72:04:EA:B6:E9:82:20:D5:22:E5:63:90:7D:FC:AF:8A:C8:DB:D0:FE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858467B1F58174D9B393D1198C1C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94236047-31d2-3232-b850-41844aa9ff01.roa
Signing time:             Tue 09 Jul 2024 13:00:33 +0000
ROA not before:           Tue 09 Jul 2024 13:00:33 +0000
ROA not after:            Mon 07 Oct 2024 13:00:33 +0000
asID:                     40676
IP address blocks:        104.243.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:1f:58:17:4d:9b:39:3d:11:98:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  9 13:00:33 2024 GMT
            Not After : Oct  7 13:00:33 2024 GMT
        Subject: CN=3154de4a-6aab-4ede-87c9-2645451f8ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:29:4f:1a:6e:ee:d3:9b:bf:92:37:4b:a9:
                    04:87:ae:fe:1b:ea:03:09:75:e5:e6:16:56:ec:67:
                    c6:ff:7d:9c:fb:bb:c6:90:35:3e:bd:ef:9e:83:ef:
                    d1:48:00:f7:60:e8:66:16:80:68:d2:2d:ef:5f:b1:
                    9e:b9:78:8f:e2:bb:41:fa:6e:85:5b:0a:17:50:44:
                    91:0c:79:66:ac:60:fa:2e:b8:10:07:9a:83:bb:91:
                    74:b0:d8:d7:36:0f:fa:ad:e6:3d:ad:e2:75:2e:c0:
                    db:8b:1c:ad:01:e1:13:32:c1:21:4a:96:27:2c:a2:
                    69:61:40:61:05:64:dc:f5:4a:f4:6d:06:51:88:69:
                    bc:17:bb:ae:10:58:ba:32:eb:b2:64:4d:28:ce:47:
                    2d:af:9a:10:29:a7:8d:b2:d5:41:ea:7c:e8:93:58:
                    6a:65:2c:84:89:e4:91:a3:1c:a4:45:c4:7c:8a:8d:
                    c7:6f:d2:bc:81:5f:be:9b:81:91:71:88:4c:aa:6a:
                    3f:39:10:a6:67:8c:87:5d:d7:40:8d:0d:bd:45:f6:
                    42:2f:67:5d:d7:12:d7:b9:d0:9b:e9:e4:bb:a7:d6:
                    7f:2e:7e:11:d1:4f:79:04:95:ed:e0:fc:7a:29:09:
                    a9:21:8b:f1:66:45:49:50:d7:0f:cc:2c:fe:eb:d8:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:04:EA:B6:E9:82:20:D5:22:E5:63:90:7D:FC:AF:8A:C8:DB:D0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94236047-31d2-3232-b850-41844aa9ff01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:ac:31:b6:9b:d0:6c:04:d7:e7:e5:2b:56:14:5e:f9:98:
         b4:cd:30:41:ca:b3:e4:80:50:13:1c:7d:6e:8c:42:d6:b6:bf:
         be:21:ea:d4:d7:ce:bf:4d:d7:93:92:05:e2:c0:96:b4:56:7e:
         de:b0:10:86:92:f8:ab:d7:56:f0:cc:1e:7d:58:33:d9:cd:c4:
         52:ec:19:f5:68:38:ac:f6:c4:43:38:64:a2:73:c2:cd:d3:78:
         5c:b3:fe:ba:be:c3:4f:30:4a:dc:9d:42:b1:ac:41:cc:d1:6f:
         21:56:2d:08:2c:1f:4e:34:6d:69:64:0b:46:48:c0:ce:b2:fe:
         02:2e:af:93:00:5e:27:5e:b1:92:28:7d:0a:d4:1c:16:91:12:
         a1:5c:75:b0:c7:7e:24:fe:8b:33:59:e7:d1:a1:9f:72:04:97:
         d1:73:70:18:89:d0:85:7a:8c:d0:6e:87:27:71:9a:49:d1:49:
         44:f3:82:50:95:84:9d:a3:fb:18:9d:5e:01:28:cd:41:ec:ad:
         a0:06:dd:44:d3:c5:69:c5:ff:5a:97:e7:02:c8:fc:4a:12:07:
         0e:54:79:ba:20:c4:8c:38:9c:b1:e9:dc:a2:79:56:ad:a7:4b:
         25:af:ca:27:12:9e:07:14:8c:a2:34:21:ca:83:14:ad:16:25:
         b5:aa:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 17:20:35 2024 by rpki-client on console-ams.rpki-client.org