Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/44d01af9-7151-3f8f-8414-f48000a89b78.roa
File:                     44d01af9-7151-3f8f-8414-f48000a89b78.roa (raw, json)
Hash identifier:          LXhXQ3Cl82sREFxL6JF5XEAKdVB8qrr1R0smv7jYXO8=
Subject key identifier:   BD:A9:55:7B:47:57:2F:DE:81:E7:02:11:9B:44:AB:C2:B8:17:D2:BB
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858452FE92EFF032F4F68D9190140
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/44d01af9-7151-3f8f-8414-f48000a89b78.roa
Signing time:             Tue 12 Mar 2024 21:38:54 +0000
ROA not before:           Tue 12 Mar 2024 21:38:54 +0000
ROA not after:            Mon 10 Jun 2024 21:38:54 +0000
asID:                     834
IP address blocks:        199.255.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 20:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:e9:2e:ff:03:2f:4f:68:d9:19:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Mar 12 21:38:54 2024 GMT
            Not After : Jun 10 21:38:54 2024 GMT
        Subject: CN=366c129b-b03d-495b-ba2a-a89418afee64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:12:e0:64:40:40:ee:c8:9c:bf:16:4c:dd:
                    c3:02:49:c3:75:05:b6:51:7e:6d:19:c9:44:ba:01:
                    09:39:12:77:74:04:a5:0c:46:2b:a0:d1:09:93:ab:
                    47:b4:dc:5a:01:c9:db:77:2f:3b:95:9b:30:0a:48:
                    c7:af:89:8d:87:b1:c7:30:6d:bd:23:ed:20:4d:38:
                    2a:15:32:e8:5f:a5:7e:b2:c1:72:87:3f:c5:f9:72:
                    eb:01:a0:dd:4f:7b:f2:30:64:9e:d2:a8:90:cb:9a:
                    56:d6:8b:ec:a2:d5:3e:dc:43:84:16:5a:55:6c:10:
                    3a:a9:1d:63:bd:c7:b9:b1:20:90:b7:41:ad:9f:09:
                    c1:bf:95:24:20:27:4c:ba:31:7a:4d:50:3a:e1:aa:
                    73:79:0b:6a:a8:07:27:ce:d7:66:ae:cb:fc:3d:ea:
                    e5:09:c2:60:13:dc:c1:4f:a5:3a:86:dd:79:9d:f0:
                    84:89:d3:11:55:20:62:1c:c9:9d:e5:e5:21:b8:b5:
                    db:17:7f:2f:e1:fa:05:9f:af:ab:7c:85:62:66:08:
                    bf:ea:b1:49:3b:79:6e:b8:79:c6:2b:27:18:c9:5f:
                    77:9e:e9:61:9b:36:1e:27:0a:b5:11:19:7f:28:04:
                    4e:f4:39:b5:c5:90:0b:b0:35:0e:2e:ea:5c:fe:92:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:55:7B:47:57:2F:DE:81:E7:02:11:9B:44:AB:C2:B8:17:D2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/44d01af9-7151-3f8f-8414-f48000a89b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:53:5a:b8:b1:81:93:62:19:30:65:50:2e:86:ba:3c:21:08:
         bc:53:32:7f:75:d3:bf:c9:3a:97:fe:20:d1:3c:6b:38:81:41:
         73:1c:46:ca:e9:23:e7:98:2e:4e:cc:be:f5:ec:43:56:a2:b6:
         82:71:03:64:39:94:80:be:f6:c4:4d:15:78:e6:69:61:c9:16:
         ee:52:6c:75:63:71:04:45:fe:09:c9:9d:9c:33:77:df:58:46:
         d8:98:fc:cb:41:cf:f6:4c:0c:aa:bb:2a:88:ab:83:d5:58:68:
         16:32:b3:11:f1:5f:f8:9a:03:d8:33:42:b4:2b:40:a8:97:e2:
         df:97:fc:8d:0c:8f:e3:10:98:17:08:ba:4a:38:56:b5:b8:15:
         f4:59:09:cb:e2:5a:4b:b1:36:0f:e5:f8:6b:17:56:38:21:9a:
         f3:85:5d:58:01:25:17:9c:5b:ef:35:e6:83:0b:69:cc:9d:ef:
         a1:9d:75:87:3a:e7:c7:75:06:d4:b1:8c:39:06:a1:70:c5:d5:
         3a:ea:d7:c6:5f:60:21:8a:ee:b7:b4:d2:a5:53:4d:76:fb:8e:
         25:65:c5:b9:cd:18:a8:a3:05:d4:12:5b:0f:36:61:c9:1f:68:
         52:9e:4a:12:bb:86:c0:2f:5b:28:18:47:b5:23:b1:24:2f:54:
         cc:45:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----