Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/354bbf68-4b77-3685-961d-6d18cbadf690.roa
File:                     354bbf68-4b77-3685-961d-6d18cbadf690.roa (raw, json)
Hash identifier:          5Ove7oWgQFukMJ1XkbYIQck6SVm0ASq3T9jZry8vHRk=
Subject key identifier:   8D:B6:FC:A0:DF:E3:88:26:E5:44:AF:90:3B:42:D4:13:9F:7A:6E:96
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A13B8EFE0D6FF7B71F78540
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/354bbf68-4b77-3685-961d-6d18cbadf690.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:b8:ef:e0:d6:ff:7b:71:f7:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d019468c-b5b4-481f-9c3c-f9805b174278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:bd:87:56:63:66:71:ef:4f:d7:7c:86:cb:
                    ed:01:4b:51:20:03:19:50:da:9a:27:71:b9:92:14:
                    6e:35:08:c7:25:0c:ea:33:e1:3e:4d:8e:8b:30:0f:
                    47:cf:92:aa:d0:85:32:e5:0e:f4:2e:25:2c:04:c7:
                    26:62:69:48:a8:10:0e:fb:d6:73:2b:d4:f7:54:69:
                    94:5b:de:93:aa:b7:b6:1c:2a:4e:80:03:77:db:56:
                    3c:f9:bc:86:ae:f1:b8:73:64:b5:37:79:67:99:75:
                    a3:e2:63:ec:00:4b:48:7c:5d:88:47:78:81:16:c8:
                    66:aa:d2:4f:54:a3:8a:45:3f:f1:e2:d4:c8:82:54:
                    2e:85:1d:f0:b5:83:0c:81:48:21:d9:c3:49:a7:9e:
                    21:f6:97:8c:cb:a7:b0:4f:aa:7c:74:8b:27:f2:41:
                    72:53:57:5f:2a:ac:8d:2d:31:be:5d:03:0f:50:76:
                    80:4f:95:a7:61:31:63:f3:a6:f5:dc:4b:40:87:1c:
                    cc:bc:03:bd:a1:49:b7:ac:93:34:ff:fc:bc:cc:19:
                    d3:94:f1:9f:33:6f:3b:9e:bd:05:d3:aa:9c:ec:57:
                    ae:ca:5f:58:41:3a:9b:45:7f:83:9b:02:f6:cc:d7:
                    b2:d3:0f:d9:84:c3:5e:a7:b7:45:68:9b:0e:74:f5:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:FC:A0:DF:E3:88:26:E5:44:AF:90:3B:42:D4:13:9F:7A:6E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/354bbf68-4b77-3685-961d-6d18cbadf690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:ca:83:30:9a:11:cf:b5:45:e5:ad:02:67:9d:9a:56:e7:
         2f:4a:7d:27:a4:26:4b:8a:59:b0:50:9c:b6:e3:b0:96:00:9f:
         6d:1b:00:fa:70:e7:c4:40:2f:b2:0a:de:9e:71:be:9e:ee:49:
         7f:80:81:66:42:08:43:94:df:99:17:ee:8a:ca:45:84:ca:f1:
         08:b9:2e:32:e9:ad:07:48:42:59:af:85:b1:19:3e:56:71:a9:
         75:a8:6b:b7:14:d3:10:42:87:95:8e:ad:44:ba:e7:6c:ff:cc:
         38:4d:ec:0c:42:6b:7c:1e:0a:56:2a:db:84:c0:28:e1:75:2c:
         0a:73:57:30:81:4d:1c:3c:b4:9d:3b:3e:36:f2:94:4d:fb:e4:
         d7:43:ea:8c:1d:95:c7:34:d6:07:3a:d3:e0:13:6f:8a:e3:55:
         20:6b:5d:aa:eb:41:2f:ae:7d:7e:88:9e:20:74:f3:17:5e:6d:
         a0:60:11:21:93:17:4f:5a:c8:72:aa:03:30:8a:89:38:4b:47:
         cc:84:e3:7b:83:09:30:8c:11:ac:65:af:16:78:c1:00:19:2c:
         dc:d7:ae:77:7b:c6:6f:03:a0:a9:5e:cb:f4:84:75:23:3d:f9:
         93:c4:0a:07:2c:d5:68:a5:98:aa:82:a0:f7:8c:7e:d6:79:da:
         bd:3e:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----