Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/f7e0ee66-deb4-3b6d-a295-bc928e451611.roa
File:                     f7e0ee66-deb4-3b6d-a295-bc928e451611.roa (raw, json)
Hash identifier:          KIFdZ3XgccRlSsEeVqhSM6JgGJuKiTQygxt7GOICLTk=
Subject key identifier:   16:2A:63:F1:FA:75:C7:88:AF:C8:89:ED:ED:A1:71:C6:1B:B1:DE:4D
Certificate issuer:       /CN=8912efe9-9a7a-4e99-821c-82dc2da25794
Certificate serial:       010D0C9F43285847062F569E1BE9164F81861800
Authority key identifier: 78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/f7e0ee66-deb4-3b6d-a295-bc928e451611.roa
Signing time:             Wed 28 Aug 2024 08:30:11 +0000
ROA not before:           Wed 28 Aug 2024 08:30:11 +0000
ROA not after:            Tue 26 Nov 2024 09:30:11 +0000
asID:                     29838
IP address blocks:        23.165.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 03:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:06:2f:56:9e:1b:e9:16:4f:81:86:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8912efe9-9a7a-4e99-821c-82dc2da25794
        Validity
            Not Before: Aug 28 08:30:11 2024 GMT
            Not After : Nov 26 09:30:11 2024 GMT
        Subject: CN=8c683523-3ea4-4aa4-bcb6-ccb2596ca90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:e9:87:68:26:e6:d9:f3:f0:c2:05:d5:50:
                    8b:e9:3b:b6:9f:f6:a0:15:3a:ee:58:a7:66:64:8f:
                    31:3f:71:a7:d6:a5:57:eb:5c:a5:ac:e4:72:dc:65:
                    be:57:bb:45:ab:f3:9b:6a:5b:68:ff:36:0b:35:30:
                    f9:43:b6:d8:a3:d3:0b:0d:2b:98:83:27:c3:f3:f5:
                    ee:af:53:54:ce:c0:5c:7e:e4:1a:41:6c:52:10:e1:
                    85:8d:a7:64:ff:7c:80:51:2d:20:91:fd:78:eb:f5:
                    29:50:75:a2:d9:50:88:0b:d4:ee:3c:f5:0f:b8:2f:
                    bb:44:08:23:04:96:d3:a3:45:19:3b:a9:65:b1:7c:
                    9f:3f:32:ef:1f:34:c2:9c:5b:b2:ce:65:c7:db:4b:
                    98:64:a8:b9:60:1a:6e:13:d6:83:4b:fa:28:cf:8a:
                    f6:05:6b:00:15:12:eb:68:6a:0d:d8:0b:ff:93:aa:
                    97:49:a5:5c:0b:b0:74:57:5a:c7:e2:3d:c4:18:3e:
                    eb:85:61:6f:5d:1f:b2:3c:71:46:31:5a:dc:59:89:
                    8f:51:e0:5a:87:87:70:c2:32:a4:a4:ed:da:39:de:
                    c4:14:c5:02:a3:62:dc:b1:b9:51:56:0f:78:a4:7c:
                    52:18:39:76:3e:e8:d1:76:61:21:78:af:c4:a3:67:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:63:F1:FA:75:C7:88:AF:C8:89:ED:ED:A1:71:C6:1B:B1:DE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/f7e0ee66-deb4-3b6d-a295-bc928e451611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.crl

            X509v3 Authority Key Identifier:
                keyid:78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:87:0c:5f:07:ec:08:3a:ed:cd:74:c5:7e:f8:fa:22:8c:a2:
         e5:86:4b:1c:e5:40:a9:57:6d:04:7d:d9:f4:53:55:09:5f:99:
         cb:98:3f:e4:b9:aa:bb:58:8a:6a:cf:8a:7a:3b:38:41:4e:0a:
         28:13:cf:90:45:e3:fd:0b:d7:02:95:86:af:8a:a6:9b:6c:f2:
         85:dd:81:26:d0:e6:d6:39:7e:68:b2:89:d8:e7:e2:d6:51:24:
         76:85:00:df:74:82:2a:8c:c6:f2:c6:d0:91:24:2a:80:d1:bc:
         c0:63:82:cc:ff:c9:26:8d:49:ec:b8:02:1c:d9:55:e7:45:49:
         11:0e:e9:af:4e:d1:d7:db:51:68:22:a5:67:65:79:46:4f:8b:
         58:66:65:71:50:d3:09:48:46:ef:5e:80:c7:05:d4:6e:f5:f8:
         2d:77:32:64:31:9b:50:b9:a6:ab:36:b1:2c:b1:52:bf:70:ca:
         df:36:1b:0a:9b:9d:71:33:6e:e2:bc:49:04:c5:21:74:60:21:
         9c:20:ae:17:da:59:fd:3f:a6:26:91:67:0a:e3:5d:85:93:8f:
         94:eb:f6:8f:6f:03:c5:c8:da:14:b7:79:35:48:2d:84:69:7b:
         16:40:f9:7a:f4:8f:7c:f8:86:f1:a7:fd:1a:0b:aa:96:d8:33:
         23:84:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----