Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/989030a8-0e16-397d-96bd-d310b17a6b3a.roa
File:                     989030a8-0e16-397d-96bd-d310b17a6b3a.roa (raw, json)
Hash identifier:          DJ/zj7zDWMXrqmzXyHH5LH6CHRQke0IakRBupDn2qdA=
Subject key identifier:   53:FF:B9:6F:8A:41:8C:65:15:DC:EA:D5:06:82:CC:F5:A9:05:6D:3B
Certificate issuer:       /CN=f729fc58-80cc-4645-bde5-79b3fcca33c3
Certificate serial:       010D0C9F43285847F7CD399EC075288EA0DCFE40
Authority key identifier: DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/989030a8-0e16-397d-96bd-d310b17a6b3a.roa
Signing time:             Fri 22 Nov 2024 21:38:07 +0000
ROA not before:           Fri 22 Nov 2024 21:38:07 +0000
ROA not after:            Thu 20 Feb 2025 21:38:07 +0000
asID:                     400334
IP address blocks:        204.16.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Nov 2024 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:cd:39:9e:c0:75:28:8e:a0:dc:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f729fc58-80cc-4645-bde5-79b3fcca33c3
        Validity
            Not Before: Nov 22 21:38:07 2024 GMT
            Not After : Feb 20 21:38:07 2025 GMT
        Subject: CN=903f4da0-5c28-4f7d-b105-f66eea12fe35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:48:81:bd:9d:dd:60:85:e2:10:a0:2c:ca:
                    9e:df:7f:23:08:4d:e0:f6:11:28:9f:46:0d:1b:53:
                    38:47:6a:e8:40:26:c3:cb:ca:bb:35:3f:c2:14:8c:
                    00:51:c5:63:4c:5e:f0:28:32:5e:1c:38:ef:58:8f:
                    bd:ba:fd:4c:44:19:1f:4c:38:3f:96:c0:a5:a4:b3:
                    f6:c5:1f:c7:b9:46:2c:b1:45:f1:89:97:fd:eb:4f:
                    99:8e:38:59:9c:03:38:95:0d:fb:df:47:ee:3f:32:
                    9f:19:ff:7a:3f:a5:7d:33:fc:72:5d:74:74:db:fe:
                    7b:5a:88:11:9a:88:dd:0c:6e:0c:7c:18:68:95:53:
                    9d:db:69:81:76:64:66:4e:50:46:3f:c3:d4:4a:5c:
                    fc:d0:be:23:0b:d8:98:b4:41:e8:f1:aa:1e:88:e1:
                    1a:b0:48:ae:5c:41:e6:dd:28:f5:0b:4c:e0:a4:ae:
                    d0:b9:01:09:68:c6:c8:6d:ec:b2:a4:d6:5d:92:17:
                    c7:dd:c0:3e:a3:cb:17:66:aa:cc:e7:ba:8b:ab:f5:
                    2d:03:40:ad:38:48:69:ab:d3:33:41:a6:60:bd:2c:
                    95:10:7b:4b:79:30:6b:8b:b3:51:cd:ab:07:97:94:
                    76:c9:f4:26:c4:bf:12:d9:cc:ea:71:7c:0d:57:4e:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FF:B9:6F:8A:41:8C:65:15:DC:EA:D5:06:82:CC:F5:A9:05:6D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/989030a8-0e16-397d-96bd-d310b17a6b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:39:51:43:13:7d:20:c2:f5:41:6c:69:30:c4:4c:8b:49:99:
         59:dd:b6:de:d7:61:95:6b:61:f9:6a:8e:8d:24:cf:fd:eb:76:
         0b:95:c3:13:e9:15:9f:8e:2f:40:a6:d2:7b:c6:c6:c8:dc:cf:
         ff:cf:32:e6:d1:90:94:02:db:76:30:75:fb:82:19:f6:cb:07:
         72:06:06:39:44:da:79:89:f9:3c:6f:99:46:05:12:61:fa:38:
         a6:05:9e:0e:ea:fe:02:24:14:1b:1c:bf:c1:4a:39:75:ce:43:
         a7:f6:2f:29:7c:22:56:09:07:0f:8e:41:0c:f0:55:bc:d0:62:
         ee:bc:e8:50:e1:19:83:3c:e2:2a:2f:71:7c:95:32:f9:f7:7b:
         66:99:8b:89:f0:27:b0:76:8c:09:64:58:87:37:b6:a0:e4:3e:
         1b:b4:d3:aa:f1:2d:5f:86:97:8c:28:a4:bf:b0:1e:f8:08:26:
         8c:58:45:4f:5c:b2:3b:f8:50:87:a5:dc:be:87:90:b6:e4:39:
         08:25:64:08:ab:72:5c:34:05:89:27:b2:f7:57:39:8a:31:3a:
         63:79:4f:d8:c1:6b:67:67:6d:cd:02:4b:48:0d:04:a0:5d:07:
         cb:77:22:99:b7:69:8b:59:00:e8:44:0c:10:9b:2b:fb:6f:9a:
         cc:05:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----