Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/cc07a60c-9f6e-3d6a-a2e4-7d70222193ec.roa
File:                     cc07a60c-9f6e-3d6a-a2e4-7d70222193ec.roa (raw, json)
Hash identifier:          9svERsbZwj7h0+H2fTIGBaveUAzx8FQug1KHH42XGY4=
Subject key identifier:   29:4A:28:01:6C:70:1C:3F:B8:68:6F:22:AC:F9:E3:04:F0:EF:9D:19
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F43285844742FE644C46BB56B46528880
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/cc07a60c-9f6e-3d6a-a2e4-7d70222193ec.roa
Signing time:             Fri 05 Jan 2024 15:49:25 +0000
ROA not before:           Fri 05 Jan 2024 15:49:25 +0000
ROA not after:            Thu 04 Apr 2024 14:49:25 +0000
asID:                     60117
IP address blocks:        104.193.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 07:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:74:2f:e6:44:c4:6b:b5:6b:46:52:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Jan  5 15:49:25 2024 GMT
            Not After : Apr  4 14:49:25 2024 GMT
        Subject: CN=baf50776-a6a3-4f70-84fe-e15bb40bcd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:4b:a9:e3:6f:51:2a:1b:c4:e8:bc:2c:9f:
                    6e:5a:72:4a:13:5f:1f:cd:06:e1:5a:dc:e0:7d:9b:
                    db:9a:df:4b:b2:78:54:87:ed:13:e6:91:4a:3c:1d:
                    c7:f6:56:13:ad:ec:ac:e0:d7:3c:36:94:be:54:7d:
                    56:32:8b:80:9e:a8:28:1a:0e:10:0d:39:0d:df:3c:
                    ba:e6:41:e0:32:3e:22:0f:72:2f:f3:9c:ee:00:66:
                    2f:e2:21:dd:ef:5a:85:0b:79:af:e1:3e:76:9c:5a:
                    2e:7c:ef:6f:40:24:00:e6:45:54:65:8f:ee:b9:e0:
                    37:c3:5a:e0:30:6e:73:6b:d2:0c:59:51:6d:ad:63:
                    96:46:cd:0f:37:f7:29:f3:17:d4:52:cd:60:b0:7e:
                    8b:32:2d:65:61:21:1a:b3:9b:bc:c1:09:64:65:d3:
                    76:b8:16:a1:a7:c8:8c:02:56:45:e2:29:60:6a:c2:
                    ec:89:fc:65:ab:2d:73:68:f9:0a:95:39:67:ea:82:
                    06:3e:6d:7c:2f:7c:fa:01:52:07:b2:3a:b0:75:af:
                    d6:0a:73:37:80:bd:a8:cc:89:67:62:8e:95:ad:c1:
                    23:7a:07:c6:8f:c8:29:8b:5f:5b:f0:d7:9b:6c:08:
                    7c:39:f7:1e:da:7f:99:d6:3e:c9:b2:7c:be:36:3e:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:28:01:6C:70:1C:3F:B8:68:6F:22:AC:F9:E3:04:F0:EF:9D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/cc07a60c-9f6e-3d6a-a2e4-7d70222193ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:06:8b:ee:80:4c:36:ec:6d:dd:00:32:0c:00:f5:6d:79:
         dd:0f:ba:0b:b6:66:a5:cd:20:25:cd:40:13:6a:4e:15:c5:24:
         8f:0a:7d:f5:81:e0:68:a4:05:47:14:95:bd:06:e9:c0:7f:ae:
         7c:f4:b3:93:e7:e3:0b:c6:4c:ae:07:c4:35:08:40:29:a1:7b:
         0e:08:00:99:bc:82:93:ba:bf:79:4b:78:e5:ff:9a:7e:f2:89:
         97:8a:17:4b:29:a2:b0:39:c6:df:eb:db:e5:57:d6:60:2f:86:
         46:5e:8e:a9:8e:61:56:08:8c:97:2d:03:01:c4:14:46:82:ce:
         99:fb:e2:6a:60:23:2f:0c:a1:bd:df:09:3c:f1:d1:67:af:d9:
         eb:e5:b6:9d:56:1d:1c:c7:15:6a:b2:90:bb:7c:1a:e0:85:12:
         9a:37:43:09:7c:91:87:26:f7:16:9e:73:9e:ab:00:85:b3:70:
         b2:4f:9a:f5:74:b9:09:d3:cd:d4:71:8c:0b:a8:5c:4d:9c:53:
         eb:fa:29:d4:be:4f:44:87:f1:40:d3:63:21:cc:61:a7:6d:e5:
         d5:6e:3e:0a:8f:65:ae:19:82:09:06:29:6a:47:0b:12:57:f5:
         5b:34:f8:6f:c9:82:0b:7e:cd:02:7b:55:ca:00:f5:85:77:2b:
         d1:85:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:12 2024 by rpki-client on console-ams.rpki-client.org