Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa
File:                     2d52876f-d752-3d03-958a-59f9f3b98382.roa (raw, json)
Hash identifier:          7kZ5EPH9xA5ZQLe/i99m+XGFXRRHkZzN2XN5vjQZt3w=
Subject key identifier:   F7:F8:56:69:69:05:C0:02:BD:D2:07:6D:90:FF:F7:E2:56:D7:27:4B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FF61395824E7F05F3BC280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:61:39:58:24:e7:f0:5f:3b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2f47d064-0efe-46f0-ba2a-46c4ed958fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:89:f2:c6:ff:bd:05:90:eb:e2:5e:83:24:
                    b0:8a:60:cf:d5:08:36:73:36:1c:04:e0:8e:12:0f:
                    9c:f0:5e:72:f4:f3:36:98:1f:ed:ec:1f:91:c4:17:
                    f1:72:e9:ce:b0:52:53:24:9b:56:f4:07:a9:a8:8f:
                    23:58:bf:c8:66:0e:03:ed:19:f9:0a:95:0e:55:3a:
                    45:0e:d9:1c:32:f1:8d:0a:bb:fe:11:50:31:ca:2d:
                    3a:06:b2:21:e3:08:ed:7a:f3:ce:fe:23:8d:99:29:
                    b4:73:00:c6:8b:8d:ad:f1:19:75:83:70:dc:43:f5:
                    f5:d4:2e:45:20:63:c5:5e:e9:1a:77:c5:32:19:8b:
                    a2:75:85:68:1d:b5:8d:96:e1:51:f6:6a:34:ca:b2:
                    14:fd:3a:f4:aa:77:42:1a:77:e8:05:e5:27:59:77:
                    09:5e:ee:b7:6c:ed:ad:b1:8a:4f:e0:d7:24:0a:f3:
                    b7:4c:98:16:e9:d7:4f:23:d2:d8:40:d3:13:ab:b8:
                    8d:73:a6:6d:35:ca:21:d0:87:09:59:8b:38:7b:7a:
                    07:3d:7d:20:53:78:f3:e0:9a:7b:1a:3d:fa:f4:88:
                    5e:1b:7a:41:ea:68:24:28:f8:03:77:d7:b2:6e:9d:
                    96:34:7d:43:fa:6f:6f:fa:c5:9c:6e:e1:00:1a:9e:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:56:69:69:05:C0:02:BD:D2:07:6D:90:FF:F7:E2:56:D7:27:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:3d:d8:12:05:4e:36:19:d3:b3:45:4a:93:c0:e5:0e:cd:
         96:5a:36:fe:e9:d1:e8:ce:e6:c7:0a:47:c5:0f:aa:9f:28:ff:
         a3:8f:60:a7:f3:f7:b2:21:59:8c:58:a7:29:b5:b3:3d:75:68:
         7e:1c:c6:3a:56:39:48:68:81:c4:86:85:32:72:68:ed:08:90:
         47:46:27:b6:a8:5e:0e:b8:58:83:4a:8e:73:22:88:75:0d:f1:
         97:da:98:fe:9b:db:ee:26:97:45:9b:f2:20:6d:97:c7:44:3f:
         87:3e:86:7a:c3:aa:2a:ab:e8:56:07:d5:7a:f6:ca:ba:d3:93:
         52:42:d3:a5:39:c3:f3:61:32:38:96:12:e3:a5:9c:b4:b7:dd:
         0a:dd:40:76:57:ad:79:f4:fb:70:0e:19:e4:64:02:57:76:1a:
         97:99:8c:38:d4:57:71:46:81:8a:7a:60:29:a1:d3:77:44:5b:
         3a:9a:a6:4f:87:cc:4e:91:0a:26:4a:fa:bc:56:e4:1e:4c:50:
         da:39:14:4c:07:96:fc:d1:7d:7f:54:51:bc:c7:ec:37:8d:27:
         f3:32:3d:cb:8f:36:4f:4c:36:35:88:17:84:72:98:ec:d2:29:
         78:ae:43:82:a3:4f:38:06:2f:7c:73:06:17:29:14:5a:1f:c1:
         e6:c5:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----