Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1f20428c-06d0-3793-bd1f-f6c8018f8e67.roa
File:                     1f20428c-06d0-3793-bd1f-f6c8018f8e67.roa (raw, json)
Hash identifier:          GLOcDvAKMS3XjMjTSjVGZTpjnaniImKkIqB8DHRA/Gw=
Subject key identifier:   31:FB:94:55:10:68:80:96:77:4A:73:CE:E4:7B:71:DD:C5:84:D0:EC
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858468D44C3FA27480B504562BC80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1f20428c-06d0-3793-bd1f-f6c8018f8e67.roa
Signing time:             Tue 16 Jul 2024 01:00:24 +0000
ROA not before:           Tue 16 Jul 2024 01:00:24 +0000
ROA not after:            Mon 14 Oct 2024 01:00:24 +0000
asID:                     13213
IP address blocks:        67.213.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 10:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8d:44:c3:fa:27:48:0b:50:45:62:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul 16 01:00:24 2024 GMT
            Not After : Oct 14 01:00:24 2024 GMT
        Subject: CN=10200d1b-aaea-4202-958e-693a0175e0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:10:ee:d7:b7:dc:cb:fd:e0:d9:75:aa:cf:
                    64:c3:6b:c9:6e:48:a9:f6:f6:ef:f1:a6:47:12:b3:
                    40:49:f0:30:21:de:b9:28:20:73:8a:54:d3:a1:97:
                    45:3a:1c:7c:c5:0f:1f:a4:d2:f8:e4:37:aa:d5:28:
                    b1:c3:78:ae:f6:66:df:6d:81:51:1d:ef:84:f3:fb:
                    3e:e7:38:51:1c:3a:0a:14:86:b5:e4:4c:92:c9:5d:
                    ce:66:c6:6b:11:b6:68:d0:a9:d7:6d:18:ff:3f:1f:
                    a7:88:fc:40:c0:78:70:3d:3e:06:0f:0a:67:90:12:
                    0a:87:bb:ff:ac:1b:60:ef:09:3b:e2:f4:a8:37:a9:
                    c3:84:a9:b6:25:cf:82:45:c7:65:97:00:10:71:53:
                    26:89:51:f7:b8:a8:e8:1d:66:fa:66:17:43:14:cc:
                    6e:f6:5f:37:b7:4b:0d:b5:f3:db:ca:9b:bf:a1:df:
                    a5:4d:e9:b3:9b:70:3c:25:24:bd:54:5b:bf:68:40:
                    0c:7e:1a:45:64:09:e8:f8:b2:bf:45:92:9d:d8:ab:
                    f3:96:ab:d3:ac:fb:f4:dc:7a:21:d2:4f:d0:e4:21:
                    3e:8c:6f:08:68:e9:4e:d5:c5:f5:4c:3c:de:df:48:
                    bb:62:91:74:9b:c9:34:3d:80:7c:ed:c1:7b:7b:25:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FB:94:55:10:68:80:96:77:4A:73:CE:E4:7B:71:DD:C5:84:D0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1f20428c-06d0-3793-bd1f-f6c8018f8e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:c8:4f:f7:e4:54:48:8a:07:97:2b:90:b7:d5:f9:7f:87:
         0d:93:db:49:71:44:83:17:ee:8e:24:3b:2e:e9:03:8b:1a:5f:
         db:93:76:7f:e9:07:77:4c:34:39:96:12:d1:7c:b3:e2:22:59:
         12:cf:ed:ef:86:25:0e:15:2d:c6:4f:23:f1:fc:e6:0c:2d:b2:
         92:82:5c:21:f3:2a:99:0a:53:89:1f:48:39:c2:3f:b7:e9:74:
         2e:d4:77:da:23:75:ca:f1:97:33:92:fe:17:f4:72:13:70:d4:
         b3:1c:14:95:f7:e0:36:6c:57:31:08:7e:ad:4c:24:88:e7:87:
         2d:40:59:4a:31:65:60:56:97:0e:0f:14:97:6b:88:72:c0:5d:
         07:d0:39:e2:52:76:64:e3:7f:a1:dd:1b:70:e5:8a:5c:c4:41:
         19:fb:56:ad:86:87:88:0d:40:a4:08:26:21:f8:11:a4:c3:c9:
         25:42:5d:f0:a7:fe:11:2b:e7:74:e0:dd:c2:7d:ce:f8:73:67:
         45:8a:3c:10:fa:df:34:b7:65:d7:d6:a4:21:81:9e:b5:f2:cc:
         82:c1:9f:29:de:92:d0:ad:e0:b6:87:e4:d1:23:90:d8:68:b5:
         d6:82:24:74:b7:ac:78:28:b7:13:e2:d1:f9:e3:58:22:b3:7a:
         07:cc:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----