Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/03c4cb45-a902-3e58-96b9-b19ed3535e1e.roa
File:                     03c4cb45-a902-3e58-96b9-b19ed3535e1e.roa (raw, json)
Hash identifier:          nCrlgLBYxZlkU8gNxdqcjeim3O/hE/TFhXpJKKYfvrQ=
Subject key identifier:   70:6A:24:BA:E7:26:86:98:23:49:0F:07:97:8A:E4:83:67:E5:F0:56
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F432858430A20F36447DA17EE8E8D6900
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/03c4cb45-a902-3e58-96b9-b19ed3535e1e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     394725
IP address blocks:        206.126.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:f3:64:47:da:17:ee:8e:8d:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6d445d40-f8af-4fdf-9615-9a8e41eb0475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:e1:46:6c:15:23:b1:d5:ba:82:92:53:50:
                    39:b0:76:01:c0:00:85:d2:5f:24:cd:a7:29:a6:f7:
                    e9:8e:7d:88:39:a9:11:b4:f1:51:99:a7:83:29:ef:
                    d0:3b:8e:83:4c:e9:52:99:55:ea:65:23:67:b4:07:
                    64:fa:39:cf:f3:8d:7d:99:b9:f9:28:81:03:28:a8:
                    cb:b0:34:f2:cf:65:8f:61:2c:27:5d:7d:1e:9d:2b:
                    9a:d7:32:d2:42:d0:22:b7:8e:04:a3:ab:ca:07:89:
                    85:48:d2:00:3d:df:ff:20:96:ab:be:c5:5b:72:a8:
                    5c:32:f1:8a:95:53:78:21:11:45:ee:9c:11:4b:11:
                    07:b1:82:e7:e9:4e:43:a0:aa:ec:52:44:7f:b3:ad:
                    d4:a3:a0:16:53:23:91:84:e8:29:22:86:89:9b:0c:
                    a3:1d:83:09:0a:0b:77:26:74:80:d9:79:46:6d:1c:
                    f9:b5:9b:65:89:88:9f:26:f8:71:0d:24:9b:0e:5d:
                    a3:3c:d7:a2:7a:87:3b:12:90:03:f3:83:5f:9c:df:
                    a5:ff:4d:85:ec:2d:c9:86:3e:89:6c:f7:fe:db:3a:
                    ad:b5:b0:da:15:6e:90:4b:b5:d9:de:0d:c7:b9:a0:
                    d1:a3:66:69:db:79:97:87:61:f2:5f:38:8b:ab:db:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:24:BA:E7:26:86:98:23:49:0F:07:97:8A:E4:83:67:E5:F0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/03c4cb45-a902-3e58-96b9-b19ed3535e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:cc:a0:45:47:10:1b:70:f0:d8:e1:8a:e8:a8:d9:7d:22:
         df:14:e4:fe:aa:c4:ac:6c:6a:4c:54:47:c8:3e:90:10:81:0b:
         3c:86:3a:50:75:c0:f8:fb:98:a7:25:3b:9a:39:8f:61:af:cf:
         42:3c:2e:51:d2:59:38:1f:31:16:88:cb:7d:9a:b9:3c:37:5a:
         ee:6e:49:67:fd:d5:0b:e1:3a:fb:88:c0:73:84:96:3d:81:e0:
         22:af:f1:32:90:8b:46:43:44:4e:58:6d:fb:f4:67:90:57:bb:
         7d:5c:a9:02:02:69:2b:46:7e:7a:cd:8a:55:a5:1a:14:0c:03:
         aa:14:b7:08:a9:c4:d0:60:a4:31:5a:a0:c3:89:c4:e6:7c:2e:
         07:46:9b:ab:c1:c4:9d:e7:39:04:4b:e5:39:13:70:87:05:e7:
         d9:71:82:07:ea:e3:1f:50:0d:ef:1a:da:81:5a:d7:16:4b:d2:
         82:3f:a0:d5:9c:9f:96:3f:b2:43:d8:5f:d9:0b:31:5d:8e:13:
         b1:2f:d9:56:77:6b:21:11:fa:66:df:5e:41:1c:fc:a2:5d:da:
         44:16:c5:04:e3:1c:d6:5b:3e:85:fb:95:e5:36:7c:ba:e9:54:
         ed:ba:41:f6:a7:51:58:e4:c2:64:9c:b3:90:0f:62:27:b8:3c:
         03:83:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----