Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/7f9a7ebe-c5cf-3a7d-964f-8aab1ff6325b.roa
File:                     7f9a7ebe-c5cf-3a7d-964f-8aab1ff6325b.roa (raw, json)
Hash identifier:          f8f419EkZVZZzJohjOPnJjrVWQpI1hxHzOkuQ/F3ruE=
Subject key identifier:   A8:6F:86:E6:DE:F6:41:3D:77:DD:E5:9E:F6:75:E4:9D:51:EC:A8:0E
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285844D1570DA62B7CE4BB47E50300
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/7f9a7ebe-c5cf-3a7d-964f-8aab1ff6325b.roa
Signing time:             Thu 08 Feb 2024 00:38:29 +0000
ROA not before:           Thu 08 Feb 2024 00:38:29 +0000
ROA not after:            Tue 07 May 2024 23:38:29 +0000
asID:                     0
IP address blocks:        104.167.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 16:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:57:0d:a6:2b:7c:e4:bb:47:e5:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb  8 00:38:29 2024 GMT
            Not After : May  7 23:38:29 2024 GMT
        Subject: CN=d9c511a4-d28e-4593-92a2-b801c1abeec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:33:bf:e5:44:35:02:4d:74:2c:98:20:31:
                    20:83:9a:0b:2e:70:c1:30:c5:8a:8a:4e:19:8e:10:
                    85:19:0d:c9:a4:00:cf:93:2a:31:ec:4e:4b:ba:2c:
                    cb:d0:34:14:65:e0:f7:40:61:e4:a6:97:98:52:ea:
                    bd:29:4c:34:f1:7c:06:44:79:18:19:dd:a4:c6:a3:
                    97:bd:a5:b1:38:a8:b2:a2:79:53:fc:6e:fa:af:6f:
                    55:c8:d7:92:43:8d:7a:4a:71:ab:48:d6:f0:e4:d3:
                    9a:03:01:ff:53:fe:a7:b2:59:e1:e8:3b:55:4c:75:
                    1a:1b:4d:0b:34:5c:6d:f9:b4:00:ab:13:84:b4:3c:
                    69:ef:d7:78:b9:36:f4:5c:04:86:2f:07:cc:ad:f0:
                    f4:ad:80:9a:5a:4e:f9:70:b0:b3:19:9e:f9:48:b0:
                    02:2e:9d:0a:15:b4:9c:59:3c:4f:36:24:72:57:48:
                    d3:bb:d9:73:62:ab:d3:2c:a8:f2:7d:8c:1e:1d:9a:
                    f8:96:3b:84:9c:31:57:43:9d:d9:72:bb:a4:3f:e5:
                    70:b8:c3:ee:a2:3c:ba:2c:ec:6f:24:0a:93:3e:84:
                    00:d3:84:56:9e:ed:2f:fe:8a:d3:4c:4e:4c:76:6a:
                    54:ab:3b:ef:1c:b0:ee:94:1b:ee:2a:59:fe:45:5c:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:86:E6:DE:F6:41:3D:77:DD:E5:9E:F6:75:E4:9D:51:EC:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/7f9a7ebe-c5cf-3a7d-964f-8aab1ff6325b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:1e:55:14:87:3e:b9:bd:12:d5:e4:d1:cf:a2:63:9b:f8:
         c3:1d:f2:a9:e1:ad:cd:ae:9a:96:c4:1e:ab:15:b8:50:c6:b0:
         ea:b1:f5:54:e6:ae:7f:2e:b2:7e:d0:4c:78:66:eb:d6:c7:e4:
         e8:bc:22:c2:4a:4c:ea:2f:fe:a9:60:60:86:7e:99:63:9f:58:
         7f:3e:de:a4:aa:d8:05:3b:76:7b:d5:ad:60:ee:24:0e:da:86:
         c2:20:5d:2e:ad:04:d8:a0:db:41:cc:19:57:14:8d:4e:d0:78:
         2c:fe:0d:a1:fb:85:79:c9:24:0f:2c:70:f9:46:5b:e7:cd:91:
         6f:21:b7:c7:df:1d:76:be:62:d6:87:ed:65:7d:8e:b8:68:ea:
         48:7d:49:4f:2f:6f:b5:e3:be:84:c4:c1:1d:04:f3:fb:5e:10:
         ae:9a:7a:96:cc:1b:82:2d:3d:94:c4:50:a4:67:b1:34:9e:33:
         d0:94:b1:69:1b:06:4b:40:34:04:3c:f8:81:17:36:56:44:c3:
         56:4c:c2:28:6e:f8:f0:b6:21:7f:a7:99:aa:3b:c6:1b:af:d6:
         a7:f0:dc:31:8c:56:e8:31:eb:ce:07:af:76:cb:3e:a7:1c:4c:
         a5:5a:38:85:08:be:53:4a:51:70:5e:d7:29:bd:f8:f0:61:f0:
         3a:44:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 20:50:20 2024 by rpki-client on console-ams.rpki-client.org