Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/03a86bf9-4be4-371a-87da-ca02fc89dd60.roa
File:                     03a86bf9-4be4-371a-87da-ca02fc89dd60.roa (raw, json)
Hash identifier:          7cofgFe+Ch9Yak0PozZVRozFMvGwVHStJCufvigJpWk=
Subject key identifier:   46:55:8F:77:B2:AE:98:33:DB:9A:49:8D:CB:8C:5A:B6:DB:E5:ED:09
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F432858447F88539D310DCDEBD7BBFB60
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/03a86bf9-4be4-371a-87da-ca02fc89dd60.roa
Signing time:             Tue 09 Jan 2024 17:21:29 +0000
ROA not before:           Tue 09 Jan 2024 17:21:29 +0000
ROA not after:            Mon 08 Apr 2024 16:21:29 +0000
asID:                     46723
IP address blocks:        23.178.80.0/24 maxlen: 24
                          199.83.26.0/23 maxlen: 24
                          2602:fc8b::/36 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 01:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:88:53:9d:31:0d:cd:eb:d7:bb:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Jan  9 17:21:29 2024 GMT
            Not After : Apr  8 16:21:29 2024 GMT
        Subject: CN=1e127222-1850-4713-baf1-89b0d6d32c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:1c:68:10:91:7e:73:d7:b8:1d:63:aa:a0:
                    ed:95:8a:3d:e7:66:8c:be:95:61:ec:86:68:9d:13:
                    17:3f:90:ec:94:dc:85:24:66:75:a0:bf:a1:ef:1b:
                    3d:10:c2:33:e7:97:c2:0d:16:59:69:b0:92:cf:66:
                    83:9a:ee:4c:87:f1:19:a0:dc:37:d3:a2:71:98:b1:
                    90:71:14:88:77:07:79:d9:93:07:c0:68:30:1d:7e:
                    47:8f:82:51:dd:09:c1:30:82:10:0c:b3:32:6e:bb:
                    c0:88:61:5e:61:c2:84:bb:59:5c:e2:6a:e9:5b:eb:
                    c3:90:3f:19:6e:2c:89:1a:02:3f:7c:06:40:6c:27:
                    fb:d1:03:f2:89:18:f6:62:a5:a8:20:cb:a3:fb:6c:
                    fe:fe:cd:b3:bf:49:fa:5d:7e:e9:4c:24:08:07:ea:
                    2e:08:d1:1a:9d:9c:a9:9b:48:fb:be:52:f8:be:ad:
                    85:b5:4e:72:76:b7:55:0c:d1:ba:fd:8f:6f:93:aa:
                    5c:ba:c1:00:53:31:ff:ab:62:49:c9:25:09:b5:87:
                    56:06:44:93:d0:06:e5:05:ee:18:0f:88:bc:32:d6:
                    c8:e1:03:b8:b4:0d:dc:15:0a:b8:fa:72:7f:ac:73:
                    61:8f:41:a4:9e:2e:da:83:ec:72:c9:81:e0:c7:b3:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:8F:77:B2:AE:98:33:DB:9A:49:8D:CB:8C:5A:B6:DB:E5:ED:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/03a86bf9-4be4-371a-87da-ca02fc89dd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.80.0/24
                  199.83.26.0/23
                IPv6:
                  2602:fc8b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:b9:7c:3b:8b:ad:2e:c6:ec:29:aa:00:e1:3b:d2:c3:69:
         13:a7:f0:68:25:b2:9b:21:a1:3d:a8:d2:3e:8e:2c:24:2f:a3:
         23:68:7f:c7:ef:78:1c:20:cb:c5:98:a2:ed:8e:6a:f3:8c:77:
         a2:4d:00:60:9c:03:4d:bd:71:28:f9:ec:a2:e1:28:e3:58:39:
         b2:a0:6f:ed:ec:28:ae:fa:a2:22:04:15:61:44:f1:bb:47:45:
         02:d7:f3:6c:bc:83:5b:3d:df:06:b4:0a:a8:b7:f0:e1:c8:57:
         f4:7e:f0:3c:94:4f:11:c0:a7:0d:ae:45:c9:3a:92:79:1a:a3:
         e0:cf:b0:3b:ae:41:da:d4:e9:53:44:e9:a5:83:5f:d0:60:59:
         ab:5b:c8:e8:72:7a:ba:b6:73:36:aa:43:09:a3:b1:05:bd:27:
         af:9f:01:d3:e1:a7:f6:e3:1a:05:ed:46:b5:fc:f2:b4:df:d3:
         88:59:4b:61:5d:45:e1:32:70:6a:9b:80:a5:98:8a:e8:e4:b8:
         94:95:4a:57:14:40:60:69:24:ca:ea:bd:65:a2:e0:d5:6b:15:
         d0:5c:48:31:54:89:8d:76:7c:07:65:0e:f1:5f:12:0b:1a:a1:
         a0:d7:b3:26:02:d1:59:58:6b:51:6d:1c:5f:c2:d3:9c:9a:fd:
         ee:7b:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 03:19:08 2024 by rpki-client on console-fra.rpki-client.org