Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/5a9c9d91-4b11-3b72-af5c-3ddd328f2afc.roa
File:                     5a9c9d91-4b11-3b72-af5c-3ddd328f2afc.roa (raw, json)
Hash identifier:          o+lwBS1pQjhQlFRUsX1jAeQb8zeka6G5h/NxctLntFw=
Subject key identifier:   DB:C7:4A:78:B6:55:CF:A2:12:CF:DC:00:D9:4A:01:26:D3:F9:D5:EC
Certificate issuer:       /CN=3433304a-051c-4bc3-82ed-2cb81d0fdd53
Certificate serial:       010D0C9F43285844A4D4E2BE95A910523F3E3080
Authority key identifier: 17:FD:F6:8E:AA:59:56:49:8E:DA:AE:7B:49:72:11:49:E2:1E:AB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/5a9c9d91-4b11-3b72-af5c-3ddd328f2afc.roa
Signing time:             Tue 23 Jan 2024 02:00:25 +0000
ROA not before:           Tue 23 Jan 2024 02:00:25 +0000
ROA not after:            Mon 22 Apr 2024 01:00:25 +0000
asID:                     397103
IP address blocks:        23.167.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 19:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a4:d4:e2:be:95:a9:10:52:3f:3e:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3433304a-051c-4bc3-82ed-2cb81d0fdd53
        Validity
            Not Before: Jan 23 02:00:25 2024 GMT
            Not After : Apr 22 01:00:25 2024 GMT
        Subject: CN=11da363e-7c7d-4953-a6ff-008c60050c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:d4:27:9b:e1:99:a2:12:d0:50:4b:b2:29:
                    d7:d3:9f:2b:d2:17:c8:fa:97:f3:be:8f:ea:c9:1e:
                    49:73:09:7f:5a:a1:eb:ac:e1:eb:45:27:6a:58:76:
                    99:30:c6:18:2e:f4:9e:73:d4:26:61:e9:3c:c0:9f:
                    66:34:90:0c:f1:4d:44:1d:eb:56:e4:2a:8a:72:99:
                    f4:c3:98:7e:af:8b:17:9a:87:59:4a:71:12:59:ea:
                    7a:09:2e:6f:ff:38:2b:40:88:66:9c:6e:92:aa:25:
                    f1:24:53:7a:47:b4:b2:3c:e6:19:64:c5:87:3e:4c:
                    1a:3c:f7:1f:80:9a:2d:f3:5b:69:bb:67:d1:49:12:
                    6d:05:8e:15:ef:95:8b:8d:19:ec:cb:35:ad:20:35:
                    a0:9d:9b:77:a5:05:09:f9:14:b1:63:bf:41:50:49:
                    25:f7:f9:a6:78:d7:97:67:28:de:bc:d9:eb:84:77:
                    dd:04:e6:29:bc:e8:88:67:1e:22:d6:75:d4:6d:b1:
                    9e:74:a7:40:b4:9c:e1:77:d0:c4:1b:06:bd:82:f3:
                    74:aa:f4:e4:8b:00:10:39:62:b0:e9:15:72:c3:d7:
                    1e:0b:8f:93:63:0a:61:f9:c4:a7:5c:e0:78:38:8c:
                    c0:58:38:4a:c9:78:4d:1f:a7:d5:ad:b0:1d:0d:1e:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:4A:78:B6:55:CF:A2:12:CF:DC:00:D9:4A:01:26:D3:F9:D5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/5a9c9d91-4b11-3b72-af5c-3ddd328f2afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/3433304a-051c-4bc3-82ed-2cb81d0fdd53.crl

            X509v3 Authority Key Identifier:
                keyid:17:FD:F6:8E:AA:59:56:49:8E:DA:AE:7B:49:72:11:49:E2:1E:AB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:48:8d:1b:fb:5a:dd:13:6e:4e:ab:53:54:9b:c4:f4:f0:
         67:df:0e:7a:bf:9a:ea:1f:9c:ef:43:ab:db:9a:69:17:64:03:
         c4:1f:1a:5a:c1:6a:f1:0d:8e:15:45:fc:01:87:74:e7:18:4b:
         47:ca:91:4a:52:8b:ba:20:64:c2:73:65:80:0c:98:1d:3e:56:
         7d:2e:82:bc:f7:cd:2d:5a:23:6e:d0:6d:01:46:f1:c1:9d:a1:
         68:24:83:d4:76:3d:85:2e:12:4e:b7:f4:44:24:ea:05:6d:45:
         14:ac:5e:95:b6:1c:49:24:e0:8e:c4:3a:02:57:05:5c:83:cf:
         36:72:12:f0:a1:9c:49:6a:3b:ae:b0:25:74:1c:c1:e5:47:83:
         3f:8c:16:95:db:0e:7a:cf:eb:49:cd:89:6c:ce:3b:9b:9c:35:
         0b:4b:aa:8b:96:0d:6d:6b:a4:9f:84:42:e2:a2:f6:1d:59:58:
         d8:08:07:b5:52:fb:75:f5:f9:a3:b1:47:af:98:c9:8c:23:5f:
         1d:98:65:f5:25:8a:cd:e7:13:19:f9:e1:ec:bf:2b:f2:4a:e8:
         12:11:4b:17:79:bc:68:66:bb:90:76:e3:0b:8c:07:c6:c5:0f:
         77:43:16:32:01:90:e7:e0:ab:35:f1:d3:40:25:8c:6b:d4:f2:
         09:a5:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:33:31 2024 by rpki-client on console-fra.rpki-client.org