Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/750609e2-e242-3f40-be4d-485a701ece52.roa
File:                     750609e2-e242-3f40-be4d-485a701ece52.roa (raw, json)
Hash identifier:          ODjyhj/n5QzOBp6xuNry6SEpFs5TCgmuqYjj38NNsqU=
Subject key identifier:   D4:D4:A9:B3:AE:B9:F3:C5:42:1A:4F:E4:DB:DC:BA:C2:DC:82:CD:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858450BE80EF72ACFA4AE9A0C6300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/750609e2-e242-3f40-be4d-485a701ece52.roa
Signing time:             Thu 29 Feb 2024 00:07:32 +0000
ROA not before:           Thu 29 Feb 2024 00:07:32 +0000
ROA not after:            Tue 28 May 2024 23:07:32 +0000
asID:                     834
IP address blocks:        173.211.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 18:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0b:e8:0e:f7:2a:cf:a4:ae:9a:0c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 29 00:07:32 2024 GMT
            Not After : May 28 23:07:32 2024 GMT
        Subject: CN=e44a2c20-20af-476b-bc52-d9ab96e6492f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:88:95:88:c3:7f:60:91:ae:75:3e:65:f4:
                    0d:95:bf:f3:7a:e0:e2:d6:48:ba:47:23:30:5b:69:
                    e2:e2:70:7a:1b:92:89:c4:38:b4:99:e9:63:a3:d8:
                    4f:88:fa:93:27:9b:2a:3a:1b:55:bb:7e:46:ea:92:
                    81:18:cf:80:7e:b8:cc:a4:cc:43:8e:ab:25:9d:4c:
                    45:48:b9:93:7c:48:96:e6:b3:1e:69:7c:0b:e1:47:
                    7a:8f:f6:74:12:31:d5:6a:37:d8:41:e4:36:dc:84:
                    ec:26:11:ca:7d:a1:dc:50:70:95:c0:e3:69:ef:52:
                    30:f9:62:6f:bc:c1:dc:96:fd:13:10:d3:15:d1:ff:
                    c7:ea:93:01:74:33:b7:5d:4d:9a:92:34:5c:d4:f2:
                    3c:5c:46:79:6d:0d:cf:b6:24:e0:eb:58:3d:38:16:
                    a0:d5:81:24:c2:26:2e:3b:16:d1:48:20:f9:9a:34:
                    49:33:d6:ad:dc:14:90:63:69:78:51:65:9b:51:d7:
                    3b:3b:b2:34:a5:36:a6:db:b5:2b:ef:d2:e3:74:16:
                    d6:a5:8f:e3:86:fc:19:34:f3:80:7e:2b:c8:59:b7:
                    00:51:6b:7e:6e:a2:c4:9e:2f:6b:e1:11:48:e8:95:
                    da:2f:b1:cd:d6:0d:81:df:fa:8c:8f:dc:94:6b:19:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:A9:B3:AE:B9:F3:C5:42:1A:4F:E4:DB:DC:BA:C2:DC:82:CD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/750609e2-e242-3f40-be4d-485a701ece52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:ee:5c:ec:0f:11:39:66:c1:50:71:d3:e8:b2:c4:15:77:15:
         fd:f8:7e:c1:81:b0:27:74:29:62:57:df:81:51:f7:2e:2a:43:
         0e:fd:f9:5a:e2:3f:9f:25:57:cb:19:74:f9:d1:da:4f:f6:53:
         3e:ff:8c:e2:06:97:d6:36:87:be:b2:3e:3e:f6:cf:70:cb:99:
         ea:67:78:99:c8:f4:09:07:09:af:db:3c:e2:ab:a4:34:83:1b:
         f8:27:be:42:86:a4:96:22:ba:32:62:3b:2c:d1:c8:82:f1:05:
         af:9c:2d:ca:b0:cb:f7:30:3a:86:f9:1d:8c:04:ae:5a:dc:c4:
         ea:0e:a4:5a:fd:3b:84:fb:ef:b0:17:60:c5:77:2f:8d:d1:eb:
         6c:9f:67:89:12:ad:b9:08:35:43:a3:07:fe:c8:82:97:b1:c6:
         cc:ed:19:44:98:0f:84:11:4d:92:b0:a7:ee:f3:e7:52:8e:b1:
         4f:72:59:80:80:84:b2:2f:b7:08:d0:c6:91:37:86:c9:0f:a1:
         af:e2:d8:b3:eb:34:e0:20:60:ba:69:c1:08:75:c0:da:ed:18:
         b8:d8:b6:91:e4:f5:46:0b:36:0b:f4:24:48:f1:a7:21:a5:87:
         4c:ff:f1:79:65:f0:75:14:d5:7d:e3:1d:6c:7c:1c:03:ba:3f:
         b8:75:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----