Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/aa1f9e30-700c-39a3-a357-42bf48a05b32.roa
File:                     aa1f9e30-700c-39a3-a357-42bf48a05b32.roa (raw, json)
Hash identifier:          9MFbszEp20DDTzbEtI7qCXVw/vY0FhHsqypmGv/hiHQ=
Subject key identifier:   BD:0E:3B:0B:9C:55:49:E2:FE:C3:FC:42:67:1B:11:79:E3:DE:8E:28
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F4328584523DAF71B4F678ED16B1C4B00
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/aa1f9e30-700c-39a3-a357-42bf48a05b32.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     174
IP address blocks:        172.110.176.0/22 maxlen: 22
                          208.81.16.0/22 maxlen: 22
                          216.73.176.0/22 maxlen: 22
                          2606:9340::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 02:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f7:1b:4f:67:8e:d1:6b:1c:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=709ef2b8-0f36-4628-bef3-deebaf06264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:6e:a3:6f:50:50:7d:db:de:d7:4e:6e:48:
                    7b:37:fa:e0:cc:e3:3d:6b:67:83:1d:52:68:77:d4:
                    2b:07:28:97:f8:98:36:8e:62:4e:b3:92:37:62:b7:
                    6f:21:f6:5a:6f:06:d6:a0:24:77:b8:d5:03:81:e0:
                    ec:6a:f6:45:f0:a2:9b:fc:3d:8c:3b:e8:da:e4:23:
                    9e:5b:d1:10:b5:0f:23:ef:36:04:80:85:64:4c:ad:
                    93:a0:b1:17:51:da:3e:5c:be:48:40:fa:04:58:aa:
                    c6:71:46:ab:cb:cd:55:55:88:6e:f5:55:a7:2d:d4:
                    e9:71:5e:df:3d:78:b0:b6:ec:87:84:3e:6a:48:06:
                    e3:5d:38:93:30:31:df:12:82:08:44:94:5a:ed:61:
                    dc:c6:e4:0c:91:f9:de:74:ea:b2:5c:dd:a9:d7:05:
                    02:53:ee:c9:a1:81:1b:44:35:56:3b:00:94:6d:6b:
                    7a:fc:db:b4:33:e1:ee:1f:aa:71:96:67:97:43:22:
                    61:d0:1c:5d:a3:05:71:3d:bf:c0:ed:06:82:98:54:
                    d6:4f:2b:1c:d5:b7:20:5e:46:85:24:60:51:3c:df:
                    7d:50:4c:f7:7d:f7:8b:fb:a9:f7:48:8c:d1:8a:71:
                    13:52:22:9a:4e:6e:d2:83:b3:e5:af:b7:83:db:a0:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:3B:0B:9C:55:49:E2:FE:C3:FC:42:67:1B:11:79:E3:DE:8E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/aa1f9e30-700c-39a3-a357-42bf48a05b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.176.0/22
                  208.81.16.0/22
                  216.73.176.0/22
                IPv6:
                  2606:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:31:f7:65:91:d9:5a:ae:11:69:c4:fd:4e:fd:9f:5d:2c:
         01:80:98:eb:0f:11:b3:50:89:5b:19:c1:35:0e:76:75:91:2b:
         25:f8:da:2d:4b:72:ee:74:0d:ca:b8:b9:59:3d:78:2d:d5:7d:
         c2:5f:41:0d:40:b3:2c:59:c5:05:aa:54:7c:e5:04:09:62:d0:
         6c:27:b8:68:ce:7d:5f:a3:24:74:76:84:47:f1:3a:90:65:84:
         f8:c0:ea:f5:88:92:13:0d:3b:4e:89:29:73:e7:83:18:6d:ae:
         6e:92:38:1c:a2:44:34:a2:1b:ad:28:da:a3:63:3f:ce:a0:5f:
         b4:0a:5c:1f:39:c8:43:61:7b:cb:e1:9d:9b:04:1b:cb:e2:91:
         6d:2b:29:7e:19:0b:a1:7e:b8:fc:af:80:6b:b5:c5:fa:2e:44:
         9b:7d:62:be:e7:c4:ff:80:13:e7:50:54:24:1a:e1:17:89:c2:
         df:0c:0c:32:6b:27:03:d3:db:10:d4:0e:a1:6c:6b:03:df:6e:
         17:03:ad:45:06:ec:93:0f:d8:0b:46:66:ec:22:be:9e:63:36:
         55:00:14:c1:68:c5:45:46:e4:92:0d:c9:f1:5c:4d:f2:dc:96:
         01:c0:d7:92:5d:fa:20:d4:4a:83:ec:1d:47:d1:e8:07:9c:0d:
         39:3c:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 03:35:21 2024 by rpki-client on console-ams.rpki-client.org