Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/d23fbce8-0455-3051-b1a3-0ee006e4687b.roa
File:                     d23fbce8-0455-3051-b1a3-0ee006e4687b.roa (raw, json)
Hash identifier:          4B577Hea+Dq2VNKgsjaimipQ1pbYg1pa0APvUhwhml4=
Subject key identifier:   57:53:3C:93:0A:17:71:46:54:03:33:17:2A:F0:94:FE:66:29:4E:93
Certificate issuer:       /CN=76577e62-26cf-4652-b145-46ee5148cca5
Certificate serial:       010D0C9F432858455CF82AA0B251F140E8BAEF60
Authority key identifier: F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/d23fbce8-0455-3051-b1a3-0ee006e4687b.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     42198
IP address blocks:        192.245.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2a:a0:b2:51:f1:40:e8:ba:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76577e62-26cf-4652-b145-46ee5148cca5
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=e0939da0-8af0-4a8c-b96a-bb850b72b455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:66:be:40:31:43:f1:cb:5d:ef:5c:f6:19:
                    8e:bc:05:df:91:b2:0b:41:1b:8a:1e:30:52:75:39:
                    75:e2:1f:f8:5e:8a:c4:11:a2:e9:50:2e:83:38:89:
                    1f:f0:ce:a3:5a:9f:0f:da:b1:46:4e:f2:90:48:0d:
                    0c:42:57:fe:36:cb:69:10:20:f8:21:70:70:a2:bc:
                    79:7a:39:8f:6d:72:54:7c:cf:4c:ac:7a:8e:9f:94:
                    2b:78:e0:a1:07:72:f8:bc:9c:bb:fd:93:d6:ad:df:
                    09:77:2f:10:cb:7a:35:58:81:23:d3:3b:d2:79:fc:
                    e3:d2:af:0d:f5:92:99:e6:03:76:0f:79:3d:54:d3:
                    b3:c8:a2:ed:fc:69:ee:f9:13:f3:e8:68:f6:b1:b4:
                    ca:1c:c0:d3:04:79:62:e6:53:94:f2:25:f0:c4:9e:
                    2a:1f:ee:68:75:c8:77:be:c6:ca:a5:f1:dd:61:f6:
                    d0:9c:19:60:bb:f0:9d:34:77:cc:13:d0:74:b6:f8:
                    ce:40:53:9d:f8:cd:18:40:81:89:bd:49:89:b3:17:
                    46:6f:59:cb:2f:63:a8:8e:3d:05:9b:3b:4c:cd:bc:
                    66:8d:01:67:27:2b:01:be:6b:49:af:9b:1a:f8:9a:
                    67:d6:35:5c:a7:3f:f9:b0:72:9b:6b:1c:cb:3b:ef:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:3C:93:0A:17:71:46:54:03:33:17:2A:F0:94:FE:66:29:4E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/d23fbce8-0455-3051-b1a3-0ee006e4687b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl

            X509v3 Authority Key Identifier:
                keyid:F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:14:d7:ad:3e:6c:4f:a4:e7:99:92:68:f6:25:90:d1:86:af:
         69:e8:b8:dd:64:05:12:07:3d:8d:42:16:b6:c3:55:16:b1:75:
         b2:5a:85:4f:6e:3d:a8:58:de:df:ed:68:ff:f3:d3:7f:84:c5:
         b4:7c:ab:c3:05:df:cd:c9:d1:0a:8c:9e:9f:ee:ae:c3:67:f6:
         0d:f2:89:64:76:81:92:8e:9a:91:0a:6f:e2:3d:33:35:84:e9:
         95:85:12:0d:0c:be:47:c9:51:ca:2b:65:f8:9f:1a:85:51:9b:
         da:74:42:10:07:03:a5:e3:f6:b5:ed:eb:83:f0:ff:18:36:25:
         7d:b2:9c:4c:67:ea:ac:7e:39:63:c9:f3:4b:c0:ec:08:ae:14:
         2f:43:21:8b:bd:db:1c:84:b6:3e:50:90:2f:f0:20:74:c8:af:
         7f:a3:97:ad:91:3e:0b:dc:e6:44:70:9f:4d:95:02:f5:7e:6c:
         a7:e6:3e:fa:6f:27:91:99:21:13:8a:b0:a9:8a:fb:03:4b:2e:
         f7:f3:b5:05:47:9b:90:e8:1e:3b:a1:91:a6:47:9c:d8:2b:82:
         bc:2a:d0:cc:42:97:4a:97:3f:05:33:e2:4c:3b:23:27:9e:ff:
         a8:25:39:e2:51:2c:e0:f1:0a:ba:ef:13:22:4c:67:d6:6a:d9:
         b1:a2:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----