Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/18ef6bf1-d1b1-3a55-ac74-41c1a01c8ad2.roa
File:                     18ef6bf1-d1b1-3a55-ac74-41c1a01c8ad2.roa (raw, json)
Hash identifier:          AQIEH5pngLVFAvSH9UUnoafkpJFIUBecFDw+RSWG/5o=
Subject key identifier:   76:08:7E:A5:6A:0A:AE:60:2F:27:86:C8:8B:4E:BD:FC:45:D3:D7:98
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844E3788436787C98789A524080
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/18ef6bf1-d1b1-3a55-ac74-41c1a01c8ad2.roa
Signing time:             Wed 14 Feb 2024 12:30:27 +0000
ROA not before:           Wed 14 Feb 2024 12:30:27 +0000
ROA not after:            Tue 14 May 2024 11:30:27 +0000
asID:                     149181
IP address blocks:        103.24.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 03:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:78:84:36:78:7c:98:78:9a:52:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 14 12:30:27 2024 GMT
            Not After : May 14 11:30:27 2024 GMT
        Subject: CN=aaf7f5a3-134a-42d9-b7f6-0832f80ef1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:c1:f3:2b:a5:55:22:77:83:ff:70:d6:b4:
                    95:b2:2f:bc:95:7e:00:c1:bb:df:2a:72:a2:1f:39:
                    44:fb:86:da:b6:bc:b3:ca:8f:c5:9b:3f:b3:3e:09:
                    11:6f:7e:c1:ad:2a:76:1e:fa:af:e5:b9:3c:f3:ef:
                    0c:93:0b:e2:b6:4f:02:80:34:56:e9:f1:f4:44:d3:
                    27:25:6d:76:a0:b4:3c:b3:70:d9:61:10:1d:d7:8d:
                    80:0e:fa:c8:62:01:55:f7:81:db:45:5c:f8:4c:7c:
                    43:82:fc:3e:c9:b7:5e:90:28:d6:f9:36:bd:cc:94:
                    a1:19:c7:a7:5a:15:06:f4:c7:d8:bc:ca:50:2f:c2:
                    a8:fd:4c:c0:07:1f:b0:45:d3:c4:70:cb:62:cb:90:
                    33:ce:2f:f3:59:0b:39:3d:05:bc:c6:aa:0e:8d:fd:
                    0e:dd:43:9b:c8:26:e6:b5:97:6e:bd:1a:c4:d8:0a:
                    ac:df:b3:ae:6b:49:89:e9:46:ec:39:16:0b:a2:dd:
                    44:eb:d1:5f:cc:5a:e1:bc:3b:76:15:6d:2b:b3:59:
                    e9:c1:59:65:e7:8a:90:56:05:ec:b6:5a:af:4f:64:
                    c4:ea:89:ea:93:30:44:94:0c:2b:9c:e5:35:95:5a:
                    b8:0c:3a:50:71:7d:79:ed:e7:be:c1:43:32:d8:b2:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:7E:A5:6A:0A:AE:60:2F:27:86:C8:8B:4E:BD:FC:45:D3:D7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/18ef6bf1-d1b1-3a55-ac74-41c1a01c8ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:55:4a:01:93:d3:13:41:0d:c3:a5:14:b9:fe:0f:04:40:6a:
         11:5d:0a:d2:b1:b4:bd:ce:dd:f2:4c:b2:a9:63:43:14:ad:2b:
         83:9c:41:90:3b:c8:25:50:76:51:eb:3a:c1:65:3a:5d:c1:96:
         3a:65:70:3b:99:6f:27:09:d4:19:ff:c3:f4:cc:60:df:aa:fe:
         68:53:97:15:e9:3c:56:29:87:95:a3:95:6e:0d:b1:bb:ad:c3:
         8c:3b:ae:80:3b:1a:60:77:ed:b5:7d:07:c3:67:f1:49:3d:9c:
         b9:65:58:74:7b:c0:39:d4:ef:89:18:54:fd:a1:ca:78:fb:59:
         57:da:ed:fb:bc:dd:9e:3d:f6:75:a1:78:ff:2d:6d:35:e9:13:
         06:d4:6a:15:2c:cd:46:0d:da:76:be:60:14:f7:2f:d7:27:97:
         12:84:f8:89:3f:ef:12:86:34:27:0e:72:e3:a0:02:f6:7c:b6:
         30:b0:53:a1:1d:58:40:52:cc:fa:74:f2:4e:17:f7:84:7d:5a:
         df:67:c5:60:f2:83:55:59:a1:1d:4f:7e:35:6d:37:00:7e:7c:
         a3:27:1f:c8:0e:5a:70:0c:13:4e:00:d0:e4:06:28:ef:bb:73:
         be:9f:01:ce:87:8b:b7:bf:2a:f3:38:05:32:c4:27:3e:6d:4e:
         9c:89:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----