Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/d76b14f3-825b-334d-9401-6886c09f18d6.roa
File:                     d76b14f3-825b-334d-9401-6886c09f18d6.roa (raw, json)
Hash identifier:          cGcDgTkgOReO+Ja/Tw3sIqHgUHvwvhvqLTfpKFwrovY=
Subject key identifier:   F1:FE:2D:34:C0:31:5E:72:B8:41:04:C0:1A:1E:D4:85:1F:F9:BB:A0
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F432858477230DFF6F792D0DA13A9A680
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/d76b14f3-825b-334d-9401-6886c09f18d6.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     399575
IP address blocks:        206.204.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 18:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:df:f6:f7:92:d0:da:13:a9:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=a5dfee7d-7017-4fe3-906b-03758dca75bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:c9:4a:7b:6c:80:14:96:fe:53:af:ff:32:
                    8d:26:ad:36:c3:75:42:cb:76:15:b4:6f:8c:c8:c6:
                    2f:cd:65:ea:9e:50:eb:12:c8:f3:26:86:48:54:b1:
                    6b:a8:99:ef:c0:2d:aa:08:c6:8b:61:2a:af:ee:ae:
                    41:e5:ee:8b:62:63:98:74:e5:8b:1a:fb:87:00:57:
                    38:6a:7a:60:f3:2e:ce:a4:9a:5b:34:e8:b1:7d:ab:
                    fa:1f:9b:2a:28:85:ae:0f:e0:51:ef:19:ad:02:95:
                    1c:c1:34:6b:a6:15:4f:d8:5d:ea:1f:b4:c3:86:f7:
                    7b:d4:85:65:a1:b5:79:f3:37:9a:59:a1:c6:7e:b8:
                    f1:02:7f:bc:8f:6d:d2:39:68:d6:60:e9:82:ba:52:
                    b4:35:d0:de:85:62:98:cb:e0:92:7a:58:c1:bb:39:
                    31:cb:61:c8:86:4d:ba:3c:63:3c:e6:f6:3f:6b:7e:
                    9c:9d:8d:80:ce:55:7d:73:63:cd:ff:2f:4f:44:b3:
                    79:9e:6d:fb:b3:7b:56:64:8a:bb:f3:78:71:d2:db:
                    d8:e0:46:06:d2:db:4c:51:b4:88:b4:8f:46:13:d6:
                    34:73:6f:1a:33:51:8a:88:85:2b:72:0e:d0:b7:ca:
                    e2:fe:f4:37:b6:c4:e9:da:01:7f:be:3b:56:28:c0:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:2D:34:C0:31:5E:72:B8:41:04:C0:1A:1E:D4:85:1F:F9:BB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/d76b14f3-825b-334d-9401-6886c09f18d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:27:15:a4:cb:07:86:49:01:66:ce:f4:f2:e4:cb:29:eb:f3:
         dc:d5:a7:40:33:c0:a0:fc:02:de:85:72:2a:4e:df:65:b3:86:
         92:4c:12:57:dd:c5:7c:ed:c0:d7:e0:5f:aa:74:06:71:48:7e:
         74:f4:b1:52:4c:18:8c:c0:ab:4b:1f:dc:04:f7:98:ac:c7:6b:
         f3:0f:04:60:7c:3b:ff:99:0c:f8:24:fd:34:9e:7d:a9:c7:92:
         3b:01:88:a0:48:d4:cd:e8:20:62:fd:16:ac:63:45:1d:52:1f:
         aa:09:4f:da:87:1e:04:1e:2f:3f:74:ca:69:c4:dc:af:43:07:
         40:99:5e:68:34:51:c0:f8:8e:bf:24:20:b3:6c:fe:a9:da:2e:
         d2:87:72:a0:f5:64:15:3f:19:13:6b:ad:39:98:a7:02:66:54:
         29:ce:64:17:f9:97:09:74:81:e5:fd:8c:24:01:d9:d0:63:a1:
         89:6b:e1:cc:36:d4:4b:20:fb:2c:43:ff:dd:4e:dd:87:fa:9d:
         ba:b3:50:52:d0:b6:e1:a1:2c:e4:bd:52:4c:72:d1:86:bc:1f:
         6c:9c:f4:c7:11:9e:50:b9:fc:50:00:c7:be:7c:f5:59:ce:c5:
         ed:8c:05:c9:34:13:51:05:a1:a1:bc:61:0e:cb:a3:29:97:ff:
         76:75:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----