Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96ce4092-bb44-3b11-aa8c-889b45c03033.roa
File:                     96ce4092-bb44-3b11-aa8c-889b45c03033.roa (raw, json)
Hash identifier:          j5JZC4++QatblIP06/ftoKeiTZgIMuP9BhuzA10Gp00=
Subject key identifier:   16:73:A4:0D:D8:A3:C0:DE:5F:E0:F4:80:EC:62:1D:57:45:2A:46:A8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A249CFA948150844BD5B240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96ce4092-bb44-3b11-aa8c-889b45c03033.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:9c:fa:94:81:50:84:4b:d5:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=11d1ff18-5b67-47b0-b768-1617a9bc4982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:bc:22:ac:cd:68:65:da:fa:6b:79:2b:25:
                    6f:86:9e:e2:08:2b:2a:19:af:a2:00:04:4f:24:7f:
                    ab:60:95:0e:e9:1e:c2:db:c7:1a:be:ea:9e:22:a3:
                    2b:cf:33:5c:46:43:7f:07:97:ef:4f:b3:f1:e0:c5:
                    c1:41:74:67:1c:1e:82:b6:84:53:4a:9a:9c:01:f5:
                    6a:1d:e7:0a:91:25:d3:a6:35:33:09:a2:16:a1:72:
                    7f:7a:b8:b9:6c:32:e4:7c:c1:fc:2a:56:ae:e5:86:
                    13:6d:0b:55:3a:14:2e:c8:51:97:65:ad:6e:49:5c:
                    be:28:ae:ba:3f:de:2e:1e:13:54:1d:c5:4b:38:89:
                    f7:b0:2b:ea:3e:a8:f3:35:66:c6:2b:f0:f3:87:d5:
                    2d:c0:3d:dc:17:38:99:d8:17:35:96:82:94:07:d4:
                    d6:ad:d4:df:3d:19:f8:29:63:bc:68:70:3e:59:f0:
                    94:23:79:bc:ad:05:f0:21:70:53:82:02:a7:cb:d7:
                    2c:7c:8f:20:5b:5d:80:ba:57:a2:41:2f:65:7c:0f:
                    dc:a2:bf:0a:0d:a4:0a:23:c2:a3:55:ef:63:39:1d:
                    d0:da:2a:14:a5:a3:50:2c:ea:47:ca:d1:c7:40:19:
                    53:cf:54:10:a1:a4:9a:b0:84:ed:a6:f1:0d:d4:1d:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:A4:0D:D8:A3:C0:DE:5F:E0:F4:80:EC:62:1D:57:45:2A:46:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96ce4092-bb44-3b11-aa8c-889b45c03033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:ae:12:1d:52:5d:bf:52:41:ee:e8:63:4f:20:55:6e:cf:
         61:a9:9f:2d:fb:e0:54:f5:b3:b7:24:b7:d5:11:70:bd:f4:91:
         25:16:ae:45:44:d8:fc:0b:2f:a7:76:bb:a3:02:cc:68:73:20:
         83:87:44:08:b8:50:ae:2b:34:80:d1:bf:4b:9c:7b:bd:a8:e5:
         d2:cb:2c:e4:a5:90:de:b4:de:b3:0f:fe:83:31:09:63:66:b3:
         7a:be:4d:60:c5:75:8a:6f:9a:27:eb:34:8b:0f:60:6c:2b:e4:
         af:a8:05:e4:e2:ec:c0:8c:6c:a3:42:0f:57:2f:64:d2:84:58:
         3e:89:53:d4:5b:55:91:1e:0f:54:04:dd:71:66:40:df:97:41:
         07:8c:cd:41:19:43:96:63:29:b5:65:9b:37:3d:f8:40:5e:22:
         6b:6f:f2:be:cf:03:f0:74:57:da:b0:cb:e1:1f:70:ff:14:f6:
         64:a6:62:f9:d0:17:5a:69:ba:32:fa:d8:24:d1:49:92:33:3f:
         8a:47:65:d0:04:66:25:20:be:ca:0d:95:4c:b5:ac:26:e1:0a:
         ac:3c:ed:48:fc:9a:4c:08:43:f2:8d:28:04:45:7b:11:9d:0d:
         fd:89:3d:32:44:fe:dd:60:41:38:d7:18:6e:78:55:8a:bc:41:
         34:4c:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----