Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/ae027f84-dd37-32c1-935b-26d9a2e09c25.roa
File:                     ae027f84-dd37-32c1-935b-26d9a2e09c25.roa (raw, json)
Hash identifier:          LuYvgtbl6l8JvQpz5OgloQU8bNspA4POl2/RRRNhraw=
Subject key identifier:   96:33:A5:63:F4:F9:9B:05:3D:82:78:11:63:52:DA:A0:1F:B2:D1:43
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845B4E8D5B1C164492478955580
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/ae027f84-dd37-32c1-935b-26d9a2e09c25.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     13213
IP address blocks:        173.244.212.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d5:b1:c1:64:49:24:78:95:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=eff2671e-ad95-476f-a341-82ffd39fc952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:53:27:16:79:18:25:19:6e:b6:70:15:e8:d8:
                    c0:27:0d:f3:d6:a0:cf:1e:da:ee:1b:bf:8a:9c:1a:
                    82:b9:9a:3b:32:18:0c:79:2d:8c:9f:41:11:1f:55:
                    96:70:60:cd:05:ac:46:94:86:49:57:97:af:57:0d:
                    33:dd:ab:10:98:64:b6:61:66:e2:84:69:2b:99:d9:
                    cd:4a:b8:8f:f4:57:a3:e2:29:4d:ed:18:25:60:3c:
                    40:05:a0:20:1b:2d:49:87:00:8e:9c:d6:e1:b0:19:
                    7b:fe:53:2a:57:8f:b4:78:7e:dc:6d:6d:39:5b:cb:
                    55:25:1a:ce:d7:d5:5e:f3:ed:3e:d6:04:a1:ed:b9:
                    b4:54:be:da:7a:40:b4:42:c4:df:14:2e:5f:0e:19:
                    ef:d0:78:98:a0:09:31:c2:12:09:9e:9f:92:66:4e:
                    b0:f6:0a:51:f3:b3:45:4a:5c:00:83:0e:cd:f7:45:
                    52:fd:db:b4:e2:47:d5:cf:8f:02:6b:62:dd:2b:1c:
                    50:1a:5d:d1:cd:0b:84:d7:16:bd:fd:90:89:68:53:
                    07:3a:63:79:3d:ef:96:47:92:b9:39:cf:ce:33:9b:
                    a1:85:be:26:1e:ae:96:cc:72:80:fa:dc:f9:2b:f1:
                    5e:ad:dc:f2:bf:19:d6:00:76:3d:67:5d:90:16:b8:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:A5:63:F4:F9:9B:05:3D:82:78:11:63:52:DA:A0:1F:B2:D1:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/ae027f84-dd37-32c1-935b-26d9a2e09c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:c5:aa:43:ed:50:cd:2a:d6:85:cc:48:c8:52:39:7d:64:
         e0:82:23:0c:08:35:42:48:32:69:41:9e:7a:f3:2c:33:b2:35:
         75:ca:96:4d:59:42:06:40:47:c0:1f:0b:74:54:85:f8:b0:b5:
         61:f7:bb:4c:cd:a3:8f:50:d3:85:82:57:ea:aa:0c:50:50:f1:
         d2:38:52:a4:9c:87:8b:48:4d:62:d4:01:a3:2a:6f:87:87:af:
         bf:a8:33:fb:5c:64:ce:f1:07:e3:fe:89:15:db:91:2f:ac:68:
         73:58:c2:6a:23:0e:b9:6c:64:79:fb:48:67:df:42:ea:03:da:
         93:b3:e9:47:cb:b3:6d:0f:a5:a3:08:ab:fc:5a:f8:f8:1a:b5:
         fe:28:dc:43:94:56:72:f1:b8:32:62:b2:9a:dd:b5:36:eb:d1:
         38:0a:ea:4b:a2:48:18:fe:1c:8a:3b:e2:fb:d8:e6:69:3d:75:
         bf:11:e4:e9:39:d1:7a:cf:61:01:97:60:91:cc:6b:70:63:d4:
         c7:8c:f7:f4:57:d0:24:21:86:6e:db:12:d5:6a:f1:b1:ae:4b:
         1b:bb:e9:48:1b:ed:ab:3e:f1:e6:a6:54:75:ac:31:10:48:00:
         7c:99:d5:35:7c:12:d4:4b:c8:54:aa:1c:98:87:3d:f1:27:64:
         88:a6:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----