Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d8b49d-0b07-35b8-8f94-35b0eec09cbb.roa
File:                     27d8b49d-0b07-35b8-8f94-35b0eec09cbb.roa (raw, json)
Hash identifier:          9ooKfnr7p0vRVW3lD6c8O4MM6hc12aCZZMtotVU0rDY=
Subject key identifier:   7A:76:BB:A8:34:87:4F:37:65:56:84:CF:01:EF:95:46:E2:7D:0B:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285846F5F5901AC311678AE86625C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d8b49d-0b07-35b8-8f94-35b0eec09cbb.roa
Signing time:             Thu 22 Aug 2024 13:00:40 +0000
ROA not before:           Thu 22 Aug 2024 13:00:40 +0000
ROA not after:            Wed 20 Nov 2024 14:00:40 +0000
asID:                     400536
IP address blocks:        104.164.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 11:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:f5:90:1a:c3:11:67:8a:e8:66:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:40 2024 GMT
            Not After : Nov 20 14:00:40 2024 GMT
        Subject: CN=dd667525-2e34-4dc6-aed6-f1f98aa7d4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:72:c7:93:25:8b:41:d3:bc:b2:90:2d:84:
                    4b:e8:ca:60:6a:2e:20:b2:46:77:02:15:69:83:6e:
                    85:b2:02:9e:ae:47:25:3e:8c:c0:cd:ee:d0:f3:32:
                    da:65:f5:cb:6a:3a:e5:ef:5e:e1:68:23:56:b3:b0:
                    3c:56:d1:e3:8c:28:38:30:66:7f:0f:94:a3:ed:26:
                    95:83:5b:da:36:44:f0:2d:04:05:f8:b4:5b:a3:5d:
                    36:70:58:85:b5:5e:3b:3c:23:06:90:90:bf:e1:6f:
                    09:9b:de:36:ca:2a:4a:0e:d4:66:b3:a3:13:3c:33:
                    89:41:bb:1f:4a:ca:8e:fb:ef:f6:bf:60:1c:47:82:
                    f0:08:bb:41:a6:b7:78:47:8c:26:6a:7b:13:7d:31:
                    36:3e:c4:4f:3e:f8:ea:fa:1f:72:ae:c4:cb:6a:2c:
                    a4:4c:d9:e6:8a:f7:d8:83:34:f3:8a:b0:6e:bc:8a:
                    37:47:0b:e1:4c:71:8d:24:ef:2a:41:f7:56:09:7c:
                    66:ee:3d:0a:57:f7:82:58:db:82:9b:b8:3b:52:77:
                    e3:7c:8d:93:62:ea:be:2b:65:49:6c:03:02:34:02:
                    4f:12:11:40:2a:a9:0b:58:94:72:74:0a:c6:bb:c4:
                    5a:84:05:74:35:a5:94:e0:f0:32:11:04:ba:3a:f3:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:BB:A8:34:87:4F:37:65:56:84:CF:01:EF:95:46:E2:7D:0B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d8b49d-0b07-35b8-8f94-35b0eec09cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:a9:e0:f3:80:37:0c:56:3a:f8:be:db:aa:01:cc:7b:be:
         6a:2d:24:0d:ca:7c:b3:05:f4:d3:cb:23:0d:e8:5d:63:c6:20:
         97:79:a1:3a:d1:3d:e7:3f:b0:bd:5a:7d:0d:75:65:0e:f4:09:
         76:50:a9:b7:b0:76:1d:8a:35:cb:3b:e2:85:93:b5:02:57:50:
         a4:b5:a1:db:c6:9f:8b:70:68:63:14:18:67:80:39:57:47:c0:
         40:78:c2:3d:38:fb:6e:ff:2b:16:55:2d:70:32:7f:c5:58:87:
         99:1e:7a:0e:b2:aa:05:76:86:38:b8:2a:4c:3e:8f:0c:26:23:
         ff:99:2e:b6:f4:dd:bc:01:82:eb:5f:9c:31:25:4e:77:ac:8c:
         4b:e6:fe:19:06:37:bb:5c:13:1f:3e:ae:ba:81:f1:7d:4a:66:
         fa:9c:d7:cc:98:f6:fd:1b:76:63:4b:62:89:4b:4f:76:a1:5f:
         86:9b:ad:ea:84:47:ea:89:14:a7:d4:8e:04:ed:ad:b1:06:b1:
         da:8e:09:41:c6:c5:eb:0c:c2:26:c4:5e:7f:f5:14:e9:4f:af:
         a0:46:4c:15:f7:43:f8:f0:b7:a1:7f:1d:be:0a:a1:92:27:c4:
         9f:e8:12:d0:3c:e9:06:68:26:66:76:f5:c0:6b:ea:2f:82:3c:
         ca:4d:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----