Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c90f942-0fc7-3a66-9432-c098c7402e98.roa
File:                     2c90f942-0fc7-3a66-9432-c098c7402e98.roa (raw, json)
Hash identifier:          LsWdjGiXOevEdTxbXO5C5vR3eUoyHGt+CaKxRXOrzyY=
Subject key identifier:   9A:EF:1A:9C:4E:B7:81:3E:CB:E9:AD:A3:92:B1:32:47:C8:4A:14:6D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F5FB85A9255ED204639298300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c90f942-0fc7-3a66-9432-c098c7402e98.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Sat 28 Dec 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        142.251.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5f:b8:5a:92:55:ed:20:46:39:29:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2024 GMT
        Subject: CN=6d69c637-783f-47c6-bb5f-3ac7df7734fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:93:dc:d6:75:72:de:b2:bd:61:d6:96:ef:
                    9f:57:7b:0e:a8:cb:9d:80:bf:bb:18:27:08:23:07:
                    87:bf:68:fc:1e:0d:1e:2a:4a:1a:e2:28:72:73:85:
                    75:e6:8c:0c:25:ed:4d:3d:5c:61:94:7c:b3:22:cb:
                    dd:0c:18:5f:d5:34:c9:72:05:a9:68:09:cf:49:f4:
                    fb:f7:e6:9c:63:25:cd:ae:51:e3:da:01:7e:de:08:
                    ee:59:25:93:c6:94:4e:2c:fd:ac:9f:cc:74:37:9d:
                    63:12:a8:7a:a5:47:ee:ba:e0:0f:c8:c9:f9:eb:c6:
                    3b:50:5e:4f:76:be:88:97:ac:41:55:b0:da:3d:42:
                    02:ba:05:c4:08:dd:e0:62:0c:4f:94:45:35:10:f4:
                    b9:a2:bd:bf:98:af:e4:93:6f:36:3b:15:f0:2f:a1:
                    86:a1:14:03:c9:67:a5:86:80:46:79:f0:51:97:d5:
                    83:14:3a:78:b5:31:a2:ac:54:22:51:4d:80:c0:ce:
                    c1:a3:90:26:d5:53:80:fc:dd:dd:44:23:fa:b8:1e:
                    20:db:8b:66:eb:5d:66:2a:08:4f:75:04:5a:24:4e:
                    33:1e:c1:99:85:69:e2:99:eb:ac:d2:bb:96:d9:ba:
                    c1:7b:db:f5:11:8b:c0:55:ce:41:3b:63:4f:0a:89:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:1A:9C:4E:B7:81:3E:CB:E9:AD:A3:92:B1:32:47:C8:4A:14:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c90f942-0fc7-3a66-9432-c098c7402e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:b7:e2:85:57:4b:62:1d:24:c0:b4:91:7a:27:30:7b:df:
         19:71:4b:5b:0c:92:59:53:b9:0a:1c:14:ef:e8:f7:b2:86:06:
         2c:6f:14:62:8e:92:28:73:b6:2e:da:c9:43:fd:21:37:dc:03:
         aa:b7:cd:e0:79:c9:ec:ec:77:f8:bf:7e:96:23:70:16:af:f8:
         a4:00:53:ef:6d:0a:88:d5:1a:b2:ca:0b:64:f0:15:42:fc:c7:
         c2:78:2c:88:3f:68:a6:89:c5:8d:ba:6b:27:dd:d9:0e:9b:a2:
         0f:b9:5a:ef:48:e5:c7:d6:18:43:b2:44:3b:14:b7:b0:8a:91:
         17:61:a8:a0:4b:f7:76:5e:b3:c0:8b:73:09:09:76:0b:49:b5:
         3a:58:44:fd:20:17:3b:73:be:d6:59:30:ca:90:f4:5e:c8:f6:
         ab:e1:48:b4:01:f7:b7:36:28:ec:d8:04:21:87:33:5e:dd:b3:
         6e:16:02:54:d4:d6:3b:81:20:34:70:b7:83:a3:3b:3f:7c:b4:
         c5:ac:e2:05:af:ad:2d:6f:25:13:c5:42:98:c3:87:74:7d:ee:
         e2:48:7f:d6:97:88:c1:e3:ae:8c:1f:b0:d4:e1:8f:a2:59:05:
         db:78:20:fe:a4:0f:b9:0a:6a:67:c9:d5:9c:5c:a5:36:ed:37:
         4e:44:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----