Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/14328f2e-d0c0-3eaf-9efd-b69a7857cf97.roa
File:                     14328f2e-d0c0-3eaf-9efd-b69a7857cf97.roa (raw, json)
Hash identifier:          BIDkaN+XboR6x3g9kqx+DHDF6ytNdSCyV6aC7CmVxdg=
Subject key identifier:   A5:75:FC:E4:C0:01:C5:58:72:3F:78:9D:C9:9A:A3:33:53:9E:D7:9C
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F432858451E14720B60D45A7FA6E00F00
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/14328f2e-d0c0-3eaf-9efd-b69a7857cf97.roa
Signing time:             Wed 06 Mar 2024 12:21:31 +0000
ROA not before:           Wed 06 Mar 2024 12:21:31 +0000
ROA not after:            Tue 04 Jun 2024 11:21:31 +0000
asID:                     26042
IP address blocks:        23.160.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 May 2024 15:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:14:72:0b:60:d4:5a:7f:a6:e0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Mar  6 12:21:31 2024 GMT
            Not After : Jun  4 11:21:31 2024 GMT
        Subject: CN=ae6b41f1-2d8f-4880-90a6-17e0ad649f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:e1:76:64:d0:81:bc:1f:29:96:74:56:f3:
                    72:25:4f:76:3c:8d:93:59:91:ed:1d:45:2a:3b:ed:
                    cc:d0:43:b0:ff:06:fd:28:5e:37:14:70:e9:f3:cf:
                    8b:6b:4c:49:92:1d:23:bb:17:b0:4b:86:19:90:ff:
                    76:07:85:95:f8:84:eb:30:55:b6:9a:28:b1:13:2e:
                    cd:77:56:16:fa:dd:c5:2e:92:73:7b:a7:7f:a6:5b:
                    82:14:68:67:93:20:fa:00:95:40:d8:c0:75:e4:e6:
                    24:f6:36:b4:ed:dc:40:0d:b6:68:7d:b8:4b:36:99:
                    34:0d:f8:62:f8:9e:2f:ec:4a:f9:44:5b:60:08:75:
                    60:2d:a0:fb:ca:87:f9:33:36:fa:3f:e0:1d:3e:e9:
                    2d:3d:18:89:2c:31:81:55:69:c1:1a:d0:2c:b8:67:
                    79:e6:48:b4:48:7e:18:68:f2:66:a3:3d:41:41:0c:
                    39:ca:bc:a1:93:f8:71:3d:e1:af:04:c5:b0:00:2d:
                    6b:17:92:87:39:ec:c1:2a:53:8e:b9:61:07:fb:a7:
                    7c:e5:1e:9d:92:fb:ef:87:09:6a:24:cf:ae:60:e1:
                    64:f1:88:40:7f:ca:84:7b:89:f6:55:17:60:d9:87:
                    03:d1:18:78:c3:98:94:4a:07:1f:54:d9:a8:6d:45:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:FC:E4:C0:01:C5:58:72:3F:78:9D:C9:9A:A3:33:53:9E:D7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/14328f2e-d0c0-3eaf-9efd-b69a7857cf97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:4c:5e:e4:fe:36:5f:12:56:01:f3:b5:b5:ca:6c:46:ec:9b:
         12:f2:93:b2:ea:14:4b:79:4e:5c:09:b7:05:39:e4:3b:f4:49:
         c0:37:fa:ad:f6:6e:ba:b1:e5:1b:c3:79:f6:bd:b8:bb:ee:b5:
         04:7a:04:1b:20:a8:3b:10:bc:d9:ed:5d:b9:a1:36:7a:ec:70:
         0f:91:5d:42:60:7e:d6:ef:aa:07:ed:2a:c4:3c:a8:5f:db:af:
         f8:94:fb:a2:eb:b6:20:9d:05:6a:36:6f:eb:82:43:47:b6:ad:
         9a:2e:cb:90:c4:15:f0:63:7f:94:b1:bf:9c:b3:40:59:0a:7a:
         83:e7:83:55:98:86:ce:2f:6b:9e:28:52:7a:67:92:6f:ca:02:
         70:f6:c5:ec:00:d4:52:3c:a8:d6:1a:22:62:20:6d:b3:2e:95:
         f0:a6:98:a5:59:ac:c3:54:2e:b5:d2:3c:52:b1:96:29:df:36:
         8a:51:70:44:df:5d:bc:81:90:cc:bc:5e:a2:2e:15:29:ab:7f:
         25:53:2b:38:43:14:9f:19:6e:7b:51:89:58:1b:06:d6:89:8f:
         a3:ab:2f:c0:2f:7d:42:53:c0:5e:c5:3f:a9:5c:f4:b3:78:e4:
         1a:e0:ca:36:54:3d:cd:19:99:14:2a:e4:ac:54:f3:2a:b0:e8:
         ec:94:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:54:02 2024 by rpki-client on console-fra.rpki-client.org