Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f564b062-96f6-3367-ba82-71cf13ee8374.roa
File:                     f564b062-96f6-3367-ba82-71cf13ee8374.roa (raw, json)
Hash identifier:          1/j5xl5ziCC2tCCrclShKXR3G181ml3u7sLnEeCXutM=
Subject key identifier:   E6:20:B8:79:3B:98:6D:B6:DB:AF:EA:58:D3:01:3E:9E:BD:13:4E:71
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A2774BB90308C7033863E00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f564b062-96f6-3367-ba82-71cf13ee8374.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:74:bb:90:30:8c:70:33:86:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=f67fe240-ff2c-43cf-a50f-ff6a33de6163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:d2:65:cb:c7:2d:1f:bd:62:86:d2:77:a8:
                    e2:23:fb:28:72:56:d5:a1:db:9a:c6:32:5a:6e:0b:
                    e1:75:41:d7:0d:7b:f4:dc:a2:db:63:46:de:d4:67:
                    36:31:9c:c8:52:dd:de:cd:fa:e7:aa:df:37:a8:52:
                    08:ed:29:61:96:3e:2a:24:33:a6:9e:ef:70:99:43:
                    70:c0:d4:10:54:4c:78:f1:27:58:93:38:ab:04:cc:
                    0a:37:5e:7d:b8:c9:2d:cc:ad:d4:24:16:7f:55:36:
                    c7:7f:b9:77:f5:19:78:e2:d2:12:af:8f:bd:fc:6e:
                    0a:c1:c9:b7:7e:d8:f0:f1:70:3f:fd:93:00:4e:da:
                    98:31:c6:99:93:cb:1f:cc:e5:95:de:0e:98:56:b2:
                    4f:cd:69:0d:1b:6f:5f:ba:0c:7e:c9:58:db:5d:de:
                    f8:ef:10:5d:76:80:9c:01:cb:d0:e9:72:27:9c:53:
                    5f:e4:b1:5b:68:e7:41:ea:17:d7:12:93:e7:c7:f9:
                    d9:55:30:83:f4:43:41:64:8f:cc:a8:7c:c1:8b:19:
                    9a:59:c5:3f:44:b7:1e:98:90:7e:58:89:b3:30:5d:
                    a6:6c:ba:cf:f7:5c:52:12:b7:1b:18:58:3a:3c:78:
                    37:93:ec:bc:d7:42:6a:36:2e:d6:39:b6:fb:2f:dc:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:B8:79:3B:98:6D:B6:DB:AF:EA:58:D3:01:3E:9E:BD:13:4E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f564b062-96f6-3367-ba82-71cf13ee8374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:66:de:76:0b:96:4e:f4:c9:ce:97:8d:2a:2a:80:15:bc:
         48:cb:03:29:04:3b:d5:d6:55:e6:e6:64:2e:ff:c4:f2:35:06:
         ca:a3:30:4d:36:6a:96:2d:72:f4:a2:d5:aa:da:1b:7b:c1:e9:
         cc:df:5c:b1:d5:db:e9:d6:25:13:d8:9d:6c:73:de:5a:a2:02:
         f7:04:4f:ea:3c:74:7a:10:f2:c9:89:d7:a6:00:2c:93:ed:ca:
         9e:68:91:b1:f1:ac:2d:4f:d0:80:34:4e:c4:d8:a5:ff:2e:5b:
         d9:e9:16:1c:03:88:aa:f0:56:22:15:36:dd:7c:40:4c:19:b4:
         2f:73:c7:30:03:5f:c3:b3:30:7d:8e:01:b0:5a:fd:93:b1:fe:
         fa:83:28:a3:ed:fb:e5:f0:47:6c:a7:c7:d7:42:82:ce:09:32:
         14:28:7c:5f:f9:83:fc:15:4e:46:93:d5:ef:74:70:42:eb:b1:
         92:a4:8e:8b:87:29:3e:42:43:ab:b3:05:91:36:ff:39:04:c8:
         97:0e:32:1d:9a:f2:8d:81:37:4c:c1:ea:f7:1c:07:51:00:14:
         d2:67:3e:80:00:ea:af:83:ae:69:20:0f:98:d9:f7:5a:17:63:
         32:d8:17:87:a4:0e:8a:af:72:8c:d5:c5:34:be:bb:4a:14:87:
         3a:27:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----