Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d454aa98-aee6-3453-a3c3-402dc8325fe5.roa
File:                     d454aa98-aee6-3453-a3c3-402dc8325fe5.roa (raw, json)
Hash identifier:          GjyE2/2aL1gRvhD+HUEP4szf7KlXqnv7lK/pq8iGluU=
Subject key identifier:   64:92:84:CD:7C:FF:D1:4D:08:D2:81:BB:4D:51:1B:64:4C:DF:52:41
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A2693E5713FB00A3FC4BD80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d454aa98-aee6-3453-a3c3-402dc8325fe5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:93:e5:71:3f:b0:0a:3f:c4:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fa5c5218-1647-4c19-83b0-b56f38c75475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:32:b8:57:51:7d:ae:fb:eb:c2:7d:24:b0:
                    0f:38:06:56:5b:5b:8e:be:92:f0:0f:89:f0:ba:67:
                    60:fe:a9:09:f4:bb:83:c7:f0:14:f5:94:8c:44:47:
                    da:22:03:04:21:7c:7a:48:56:f0:85:ab:43:af:8e:
                    90:d5:41:c6:b6:b1:68:74:17:ea:b3:92:91:d0:3c:
                    a0:0a:ec:ce:b3:56:ac:53:40:37:83:19:27:03:2b:
                    fc:11:b5:16:d8:77:be:f9:16:1a:e0:ca:cc:25:f3:
                    bd:9f:16:7a:b2:d2:fc:35:02:c6:9f:e3:19:4b:06:
                    b7:80:29:7d:43:68:9e:21:0c:4e:bb:3c:31:38:0d:
                    6c:e0:b2:7d:94:ff:89:e2:77:64:49:2c:a0:91:c9:
                    7d:bc:df:93:4d:6b:9e:3b:aa:5c:64:5f:c0:8a:30:
                    8d:06:98:8f:3b:cd:ce:48:10:66:8a:71:8f:d6:af:
                    6a:da:ab:97:dd:9e:6b:fb:98:de:e8:ab:64:0b:e1:
                    b5:58:5c:87:ff:13:aa:d0:16:5c:c3:b4:83:1b:a1:
                    75:b2:89:97:c1:f1:8c:24:a9:3e:5d:8e:15:74:6e:
                    69:b2:99:7d:71:3d:d8:e6:be:a9:ee:8e:5c:63:cd:
                    5f:88:b1:59:82:c9:93:c8:13:69:a9:f2:56:be:7d:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:84:CD:7C:FF:D1:4D:08:D2:81:BB:4D:51:1B:64:4C:DF:52:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d454aa98-aee6-3453-a3c3-402dc8325fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:ab:8f:d7:3d:e6:2f:59:8b:a6:ed:e0:00:02:99:ec:1e:
         5c:88:b3:50:9d:89:3e:19:f5:32:6f:c6:92:02:06:94:14:be:
         62:61:85:9c:6d:af:1b:7c:af:f1:8b:80:21:66:12:37:78:21:
         1c:e4:7f:24:da:2b:58:0c:e8:b2:3c:cc:26:7e:8b:80:7d:c7:
         d3:8f:99:1e:fb:0d:79:93:01:e2:78:72:18:2b:6b:82:07:72:
         a7:c7:98:e7:01:06:9f:c7:f0:61:c3:1d:f5:a7:47:15:cc:fb:
         ae:5b:02:0a:39:69:7c:a7:5e:16:36:77:8e:73:63:eb:0e:9b:
         8d:5e:0f:f0:42:c5:d0:b1:83:2b:a6:a6:52:1b:bb:42:d6:94:
         e2:06:bc:a9:1a:80:1e:e6:5d:8a:51:7f:43:84:07:28:f9:f3:
         26:3d:4c:de:24:da:86:b0:71:09:05:16:b5:38:01:f3:04:6b:
         ec:a3:86:fc:34:4d:cc:b2:a0:68:83:c7:b7:5e:b0:3d:6e:39:
         89:08:15:55:b0:36:c1:de:5c:9a:91:04:88:73:fa:47:7f:b8:
         98:5c:0e:e2:89:52:5e:93:72:dc:1a:91:cd:f3:cb:da:75:79:
         06:ab:8a:96:9d:ae:d6:61:fd:ee:56:57:5e:75:a3:ea:78:14:
         ef:a0:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org