Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/22a35516-61a3-3881-9d48-429f5a8075c4.roa
File:                     22a35516-61a3-3881-9d48-429f5a8075c4.roa (raw, json)
Hash identifier:          rsypEexiZpJXnNuiV2w36Am7o59aNrqkIlVibqUOzJM=
Subject key identifier:   83:77:55:BE:6A:CF:20:4A:34:77:9F:BC:CB:16:24:61:D4:73:C2:B7
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858447D86C0C01A32CB915613C200
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/22a35516-61a3-3881-9d48-429f5a8075c4.roa
Signing time:             Tue 09 Jan 2024 00:06:41 +0000
ROA not before:           Tue 09 Jan 2024 00:06:41 +0000
ROA not after:            Sun 07 Apr 2024 23:06:41 +0000
asID:                     212477
IP address blocks:        104.156.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 15:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7d:86:c0:c0:1a:32:cb:91:56:13:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  9 00:06:41 2024 GMT
            Not After : Apr  7 23:06:41 2024 GMT
        Subject: CN=93e17fdb-7989-4bee-a9d0-f2c8f0da3dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:cb:67:e6:54:e2:58:6b:b1:1b:85:9b:4c:
                    e0:52:29:dc:36:21:d2:21:d5:fc:32:7a:8d:c5:5f:
                    1e:12:3f:e1:46:3c:86:20:2b:e8:82:89:80:94:67:
                    bf:92:3e:a4:86:2b:d6:f2:5b:ea:5d:4e:fd:7a:0b:
                    5d:31:f8:19:c9:21:1d:e6:42:59:b9:e5:ac:3e:71:
                    12:4b:9d:ef:66:4e:2d:f1:fe:de:89:27:8b:84:65:
                    e4:25:0c:40:c6:dd:7d:0c:c6:f7:53:a6:0d:eb:f7:
                    a0:1c:bd:96:2d:51:d9:99:75:c2:80:51:1f:c2:5f:
                    b9:be:24:e9:45:8a:28:28:c1:09:98:f5:e6:06:2a:
                    8d:0f:1d:40:4e:ff:43:03:e1:ff:7a:0b:a4:b3:c6:
                    80:17:38:d8:bc:74:44:94:42:57:1e:8d:8b:56:9e:
                    62:84:ee:38:d8:a4:11:c2:e2:27:f6:a3:10:cf:f1:
                    58:c4:0e:64:08:c6:1b:56:f9:47:d5:aa:28:d7:0c:
                    4b:34:48:ef:c1:db:d3:4c:30:4e:2f:dd:8f:40:99:
                    ae:37:6b:76:4f:4c:cd:70:bb:13:8c:61:2c:17:e1:
                    93:6b:ef:dc:0d:b0:d7:27:ee:39:c5:21:c7:f6:50:
                    93:e4:10:f5:94:e0:8d:7b:4d:cc:b8:54:a3:ea:d6:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:55:BE:6A:CF:20:4A:34:77:9F:BC:CB:16:24:61:D4:73:C2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/22a35516-61a3-3881-9d48-429f5a8075c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:03:55:f3:2d:c9:50:1f:a3:41:ea:ff:ea:5e:73:d7:14:
         8c:ec:0f:9c:a2:ac:79:75:b0:2b:93:02:eb:ce:a5:e5:b9:cd:
         f5:50:b7:26:47:21:8e:27:fa:c9:51:24:af:c1:ec:88:ee:7a:
         8b:90:8d:1c:5c:b9:aa:04:4d:69:eb:5e:42:7c:e1:b8:b7:c1:
         10:64:46:f2:49:7d:d1:a9:aa:ab:21:b5:5b:25:50:9b:f8:9b:
         43:8c:22:7a:db:c1:47:b7:26:cc:01:78:0f:9a:1e:5d:83:b1:
         45:77:95:d3:93:c8:5b:f1:c5:ef:c1:8d:26:9f:06:7a:e7:50:
         04:7b:04:53:8d:a0:64:fa:e9:61:e0:33:f3:ec:9f:50:41:1b:
         5d:f1:69:95:b4:7e:b6:4b:a0:48:3d:00:df:68:fc:e2:b4:f8:
         49:c9:95:5a:3d:93:89:5a:15:85:f1:a5:f1:3f:b2:37:d3:07:
         c9:1b:be:f7:7b:1f:87:36:4a:32:aa:f6:4c:2a:fc:1d:09:7e:
         02:86:50:7b:0b:23:b0:b3:d5:9f:e8:f7:7d:08:1d:47:3b:31:
         63:89:9f:7a:3a:8c:42:c4:14:51:d5:be:7e:30:13:8a:51:bc:
         18:8b:a8:5a:65:92:39:a7:ce:40:5f:f3:c0:75:19:78:3f:5d:
         78:9b:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 19:13:17 2024 by rpki-client on console-fra.rpki-client.org