Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d0e9f2e1-9809-3d8e-9447-3bc307ea9a71.roa
File:                     d0e9f2e1-9809-3d8e-9447-3bc307ea9a71.roa (raw, json)
Hash identifier:          mze6RodeqrDRIgeO9lG4eW0d64OFMdImENKE5OXVo+8=
Subject key identifier:   D0:F4:9E:7F:67:AA:76:91:9F:19:11:82:8E:67:8E:EA:21:2C:D8:A4
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858448218A08C64E7160328B01C80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d0e9f2e1-9809-3d8e-9447-3bc307ea9a71.roa
Signing time:             Wed 10 Jan 2024 15:23:51 +0000
ROA not before:           Wed 10 Jan 2024 15:23:51 +0000
ROA not after:            Tue 09 Apr 2024 14:23:51 +0000
asID:                     60707
IP address blocks:        104.156.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Feb 2024 16:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:82:18:a0:8c:64:e7:16:03:28:b0:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan 10 15:23:51 2024 GMT
            Not After : Apr  9 14:23:51 2024 GMT
        Subject: CN=a8f284c9-5863-488d-bfcd-8517705de390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:37:97:52:b7:f0:41:38:97:04:82:f4:83:
                    b4:4a:c1:72:5c:3b:77:f4:a8:11:c9:39:93:cb:4c:
                    7d:0e:aa:0e:98:12:c4:40:5a:dd:81:ed:40:b0:2e:
                    69:60:4b:01:de:24:bc:84:9a:e1:f7:eb:c2:09:67:
                    07:de:98:b3:9b:10:f0:aa:54:12:83:f2:92:c2:7b:
                    e2:6c:f2:8a:53:23:7f:bc:6c:ab:ce:05:88:1f:87:
                    84:11:23:33:b8:fe:d7:8a:18:b1:88:c0:37:76:f0:
                    02:c5:65:c8:40:a1:04:c0:55:90:d3:a7:5b:f9:34:
                    a2:22:14:78:0c:1b:54:29:3a:b6:16:cc:7e:6a:4a:
                    7d:85:a3:39:32:d3:7b:22:73:7d:d8:02:32:22:15:
                    00:a4:c5:b0:4f:f4:b0:6a:0b:07:a7:70:51:58:2e:
                    92:61:fc:07:a1:20:22:21:73:85:4a:96:e4:f6:79:
                    84:8a:ce:b7:b2:d6:74:6a:f6:dc:92:8a:a0:78:3d:
                    4c:08:ee:b9:7e:36:4c:d7:93:dd:5a:73:b7:0f:3d:
                    03:d1:6c:58:5e:2b:d8:34:14:ae:c8:f2:b4:d7:cf:
                    8b:ad:6b:15:6c:92:1f:41:63:55:98:f5:6a:32:b1:
                    19:bf:c3:8c:1d:30:99:b5:b2:bc:ae:cb:5e:ab:68:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F4:9E:7F:67:AA:76:91:9F:19:11:82:8E:67:8E:EA:21:2C:D8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d0e9f2e1-9809-3d8e-9447-3bc307ea9a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:25:bb:da:60:b4:88:3c:3b:a5:73:1c:e6:1f:ef:b5:ac:85:
         c7:f0:36:f1:ca:27:2d:86:8b:66:42:1f:ff:bd:88:54:0f:8b:
         ab:a8:99:46:0d:c7:39:a3:98:06:07:e5:c9:84:5f:78:a7:c2:
         97:40:af:3c:96:fd:79:21:b9:c0:30:8f:bb:ad:5f:45:e8:be:
         a5:cc:d5:f9:ef:0f:4f:d2:6b:af:95:fe:66:c4:13:fa:3d:2d:
         cd:ef:58:fb:fa:c8:68:67:b3:f0:f5:d1:80:fc:1d:70:4f:72:
         26:3b:07:fd:44:f5:e0:f7:28:2e:fc:f8:71:da:73:10:d4:f4:
         ae:7c:42:55:7f:bd:3c:ab:d5:e9:58:96:f0:cf:55:3c:8d:d8:
         02:ad:ec:de:5e:f4:b7:7a:19:fa:5d:6d:76:c4:4a:e8:3f:42:
         75:48:40:41:e9:14:51:ae:ba:a2:a2:95:47:a3:d9:77:a8:d6:
         88:9c:53:be:8f:a8:c0:eb:83:0c:9f:ed:ce:47:05:60:e6:00:
         c9:99:f6:4a:4c:67:23:76:30:32:a9:68:07:bf:fe:d2:3c:55:
         76:9f:9d:62:c7:04:9c:69:c2:48:18:f2:21:99:bb:24:8b:c9:
         56:2f:e2:03:9c:0f:6a:d4:91:b8:bb:e5:14:3f:18:03:e8:d1:
         11:02:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 20:18:57 2024 by rpki-client on console-ams.rpki-client.org