Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30212a7d-4422-3f6f-a733-a6f0445cef46.roa
File:                     30212a7d-4422-3f6f-a733-a6f0445cef46.roa (raw, json)
Hash identifier:          VKia9VZIcyT8e8YI7hyg7VbQz2GjOfD1SMV0SghjzNg=
Subject key identifier:   DD:60:CE:FF:21:7C:C3:05:1B:C6:CA:51:2B:1D:1D:11:32:4B:4D:AC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A253C52994E206214A06FC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30212a7d-4422-3f6f-a733-a6f0445cef46.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:3c:52:99:4e:20:62:14:a0:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2c3a14b7-26d9-43aa-a87e-c45553543f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:08:1f:7d:af:60:a9:dd:0b:8b:34:ce:66:
                    0e:17:3f:71:ff:47:99:46:f8:76:28:5d:f3:64:80:
                    d1:10:52:39:67:14:3b:cd:03:d8:48:b5:17:b0:ca:
                    10:30:52:1b:dd:f7:3b:ce:b3:06:8e:f3:1e:be:f8:
                    95:58:31:3f:f6:d4:be:b7:80:35:fd:4f:15:b0:78:
                    ed:90:81:da:19:4c:b1:c6:24:bc:b8:0f:2c:c0:f1:
                    a5:97:86:11:e9:54:8e:89:43:1b:0a:e4:6b:ce:85:
                    b7:a2:d7:07:7e:e9:ee:57:74:41:2c:45:e8:33:cf:
                    91:0e:c9:85:d0:29:d1:9a:d1:1c:47:10:b2:49:35:
                    43:84:66:50:0b:40:fa:cf:d5:f6:8d:58:80:07:14:
                    ef:9c:9b:7d:d0:e7:ee:9a:e5:8f:2f:be:8b:eb:6e:
                    9b:16:df:a6:0b:1c:62:95:a7:9b:16:5e:7f:bc:3f:
                    46:15:e2:ef:88:ec:5a:96:8f:62:d1:69:79:61:93:
                    e4:b0:47:89:28:fd:bc:6a:f0:8a:c3:0a:b7:01:47:
                    49:70:b0:cf:56:d4:76:c5:74:c7:61:2e:e5:b9:2e:
                    da:7c:12:25:22:41:55:e6:7b:28:15:95:66:1e:ba:
                    b0:f6:c2:83:c6:d5:d4:ae:55:1b:bc:f4:c2:95:9f:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:CE:FF:21:7C:C3:05:1B:C6:CA:51:2B:1D:1D:11:32:4B:4D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30212a7d-4422-3f6f-a733-a6f0445cef46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:21:ef:bf:8c:dd:d5:3f:2b:df:b6:0a:44:05:39:e7:9b:ed:
         42:4c:b9:c9:a6:3e:d0:14:d0:e9:31:1b:45:e8:eb:fc:f3:9b:
         b1:4b:a5:17:4e:15:30:9b:a4:1d:42:25:8c:66:08:7b:17:7c:
         b7:26:c1:63:ff:69:49:47:e5:16:d9:e9:55:ce:12:4a:bf:a6:
         33:31:b6:6a:ca:1b:8f:42:d6:39:07:e7:d9:b9:21:4b:37:de:
         fc:60:fe:85:92:df:2a:6e:12:be:2a:bb:be:29:71:b3:78:d1:
         e4:b5:ba:42:2f:d0:de:a1:81:a4:10:b0:5c:b2:43:20:b0:b3:
         c1:da:b4:75:65:e3:76:ec:9a:ca:fa:c6:d4:49:74:3d:49:67:
         03:d9:64:01:10:d6:08:3b:5a:6c:cb:ee:38:ab:af:28:e6:bf:
         49:0d:3b:50:c2:c0:30:e9:96:97:c3:a7:c8:27:4e:e0:6f:8d:
         ee:e0:bd:66:c0:18:e4:54:be:91:ec:65:95:83:05:e7:52:f5:
         5f:bb:25:02:b7:35:ec:b5:b9:e4:89:ff:2c:38:45:ad:da:ee:
         b5:24:85:16:53:94:b4:4a:e8:b3:9c:e7:01:78:f5:cb:ca:77:
         46:d4:d6:6c:02:a5:1b:56:6c:6e:19:62:0b:0b:bb:4d:34:ab:
         e3:84:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----