Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c927740-beba-3262-b56a-9bf102ae9428.roa
File:                     0c927740-beba-3262-b56a-9bf102ae9428.roa (raw, json)
Hash identifier:          4eSSpE7HzXVNtMYmLsqzlB5y8SXTGXufD+2fl8n6+V8=
Subject key identifier:   A4:35:81:A7:1C:F6:80:E6:49:D1:AE:E2:02:33:C0:43:AF:41:6F:FB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F512B277EBA3321DB57AD0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c927740-beba-3262-b56a-9bf102ae9428.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:12:b2:77:eb:a3:32:1d:b5:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=86ff5df7-d668-42da-b251-f50c4923b1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:67:42:e2:76:18:1f:99:70:15:29:e7:c4:
                    c4:91:fc:c6:49:5e:8e:fe:c9:1b:18:a0:29:f9:f5:
                    3a:9f:6d:f5:36:fb:73:05:b4:0c:c3:b1:fd:aa:c4:
                    89:75:01:4a:e9:fe:ba:4a:0f:37:d8:8d:8a:51:d8:
                    ac:f9:e3:fa:6e:c8:e3:ff:93:a9:11:f6:f4:f0:88:
                    0c:a1:c0:92:5c:6b:f6:b2:ac:30:48:61:24:6d:39:
                    02:0a:3b:45:4e:4b:f6:f5:03:83:f1:1c:3d:de:52:
                    00:0c:f3:b4:dc:06:4c:69:fa:a2:f2:e4:0d:9a:03:
                    9d:6e:a8:94:bb:dd:74:76:73:fc:74:40:82:0a:d3:
                    08:e3:2f:96:15:d3:28:26:64:c1:70:ce:bd:5e:5d:
                    22:69:18:9e:f1:83:67:f6:5f:12:ef:dc:5a:e5:e3:
                    5f:68:83:48:46:7c:e1:7a:0a:fe:20:9b:c4:07:61:
                    8c:0b:cf:22:c5:93:70:2e:28:1c:8a:d2:e1:13:e3:
                    e3:f7:d6:02:0e:ba:18:b6:c4:ce:f7:c9:f2:27:4e:
                    d3:1d:8d:25:0e:87:d1:b3:95:e8:1d:f9:70:4a:e3:
                    d7:ca:b8:6b:9a:54:06:d1:31:5d:7c:4c:b3:39:f6:
                    27:53:27:d7:00:bb:49:a3:e1:aa:6f:76:b4:d8:87:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:81:A7:1C:F6:80:E6:49:D1:AE:E2:02:33:C0:43:AF:41:6F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c927740-beba-3262-b56a-9bf102ae9428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:53:1e:61:06:46:49:97:59:be:e7:67:07:27:1f:80:b0:
         a9:5c:87:56:ad:1c:39:b0:10:d0:3f:4d:76:0c:7b:3f:21:44:
         ab:3a:a5:86:72:c5:c7:d6:d2:b8:b1:27:08:f7:e2:27:02:7c:
         6d:a2:7c:ab:02:5f:22:49:f6:3f:58:cc:56:60:c3:61:ec:ec:
         e0:61:b3:62:05:8e:17:ae:56:f0:db:53:e4:54:6a:74:82:46:
         06:f8:df:63:39:5a:33:3b:95:ef:29:b7:a3:27:67:c1:8b:27:
         cc:b3:3b:f6:6e:20:e7:60:69:fd:5f:5f:f2:78:6f:f6:31:d3:
         ab:ca:cf:36:d0:1d:00:9d:8b:1d:4b:de:09:ae:68:b0:17:ff:
         f7:35:b3:ae:8f:a7:20:8e:e9:af:7b:f8:f5:26:06:78:f0:b3:
         1e:5f:37:5f:d0:3a:27:55:7f:66:4d:bf:85:b2:52:06:81:8e:
         66:77:67:c9:6d:39:45:49:9f:db:93:9e:83:b7:b9:e9:e7:9e:
         f0:2b:d7:e1:92:35:cf:09:0b:17:a4:a3:35:d7:13:c9:7e:e1:
         5b:a3:38:68:ef:70:99:fe:2e:23:13:d5:ea:b2:51:a7:b2:23:
         c2:cd:f4:9d:f6:9f:90:1a:7e:12:ac:5d:80:af:70:84:e4:9e:
         4b:1a:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----