Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/34c55a68-dd59-31cc-9c38-ece7d1eeab09.roa
File:                     34c55a68-dd59-31cc-9c38-ece7d1eeab09.roa (raw, json)
Hash identifier:          hmE0ttQKdYXq/oIDuQ3BtLZ0/DcwfTsHaWDeayTnJ7s=
Subject key identifier:   8D:2A:19:E8:FE:69:B1:A1:9E:73:48:F1:8A:A7:1E:99:48:E5:4B:64
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F43285846845707CA9892102214C050C0
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/34c55a68-dd59-31cc-9c38-ece7d1eeab09.roa
Signing time:             Fri 12 Jul 2024 20:15:04 +0000
ROA not before:           Fri 12 Jul 2024 20:15:04 +0000
ROA not after:            Thu 10 Oct 2024 20:15:04 +0000
asID:                     215133
IP address blocks:        209.250.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:57:07:ca:98:92:10:22:14:c0:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Jul 12 20:15:04 2024 GMT
            Not After : Oct 10 20:15:04 2024 GMT
        Subject: CN=2391a116-6429-4bf2-b125-c4532448596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:00:71:f0:67:ae:d8:fb:6a:9e:59:b2:81:
                    3b:df:88:32:bc:3d:da:dc:24:a2:e9:5a:86:8c:30:
                    c9:61:fd:7a:c5:45:bd:37:54:dd:04:5f:07:3a:a7:
                    6c:59:2b:95:08:8e:5a:ed:29:48:aa:8c:06:9b:1c:
                    8d:66:2e:ac:7f:bc:5b:09:37:76:54:f7:65:7e:4f:
                    5d:20:f2:84:04:96:de:f8:5d:4d:49:ef:2d:d2:0e:
                    b4:86:2b:96:51:94:f4:8e:f4:80:7c:ea:11:17:0f:
                    a9:78:87:4c:74:4d:24:a0:76:b0:d5:be:93:64:14:
                    5d:ce:7a:6a:9e:8e:08:f8:97:a0:41:ec:c1:6b:e7:
                    bb:5d:21:4f:45:46:5c:ee:21:e8:a1:0a:67:62:b6:
                    f0:2c:23:af:4d:5f:a0:3b:c3:7d:b0:cf:e7:d8:6b:
                    cb:73:14:c6:44:f8:84:c3:b2:99:e6:ca:ab:19:67:
                    f5:3a:60:b9:29:0c:7d:b2:39:67:ec:d8:01:e3:22:
                    3d:fe:fd:12:aa:14:cc:be:ce:28:fe:c1:1e:79:52:
                    41:5b:e2:12:cc:87:3c:93:61:27:44:60:c9:fb:be:
                    43:0a:8f:80:42:fc:89:74:67:e7:1d:2e:ff:9c:1a:
                    fa:bc:18:dd:0a:e6:d6:ea:7e:b4:02:34:93:d6:0c:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:19:E8:FE:69:B1:A1:9E:73:48:F1:8A:A7:1E:99:48:E5:4B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/34c55a68-dd59-31cc-9c38-ece7d1eeab09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:45:98:96:71:89:c5:5e:4c:5e:e8:72:79:1e:3b:8f:f1:af:
         3e:97:d9:96:38:16:0a:fa:93:ba:d6:90:f1:e1:e2:2e:65:4d:
         67:56:38:fa:de:1a:1d:ab:13:d9:72:7b:9d:64:8b:56:5c:2b:
         1b:8b:d2:b4:34:bd:cd:f9:12:8f:f3:01:e8:3d:bc:b1:91:35:
         65:87:d7:5f:e6:ae:06:88:41:b0:b1:8b:e9:66:69:df:67:84:
         b4:2b:d6:6a:76:01:17:af:7e:2c:79:75:52:70:2c:c4:8a:0f:
         f9:6a:f8:95:b6:ca:49:eb:0e:78:f9:ca:f6:d6:fc:6a:98:f1:
         68:3e:2c:c5:89:34:39:c5:f7:02:96:ad:08:6b:94:a8:28:95:
         c6:15:03:89:cd:6c:88:1d:0d:12:3b:f9:f5:60:ad:4c:cd:c6:
         d5:5e:8a:97:50:ac:b2:a3:6d:58:41:33:bf:f7:98:03:6e:87:
         b1:ac:f8:af:b4:21:d5:33:39:ae:0a:bf:da:c7:53:36:41:8c:
         0a:3e:1b:7b:70:a5:69:78:1b:32:43:e3:5c:58:32:f9:23:02:
         69:e9:00:32:dc:ec:db:f2:49:ec:ae:2e:ee:d4:bc:77:81:85:
         bf:3b:33:70:bc:ee:e8:82:3c:5b:ca:51:2a:ad:f1:81:3d:be:
         8e:65:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----