Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58a16812-ee2e-3a2a-a51b-e6b05032cb1f.roa
File:                     58a16812-ee2e-3a2a-a51b-e6b05032cb1f.roa (raw, json)
Hash identifier:          oJuDCMQYqODCg6PBt0ol8/frPbH9SdIe17jFZkKSGIw=
Subject key identifier:   E8:47:D7:B3:53:C5:B9:A9:0E:10:21:E7:B9:5E:3B:95:13:F1:73:EB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EAE8751E82DD93B72F6380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58a16812-ee2e-3a2a-a51b-e6b05032cb1f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ea:e8:75:1e:82:dd:93:b7:2f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cc81cd38-35a3-4aa5-949c-e7b8cc86ba21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:54:dd:fd:0f:bd:11:56:1b:e7:ec:e0:52:
                    65:c8:81:3a:36:9a:eb:81:13:49:7f:1c:60:c3:0f:
                    73:d9:47:31:90:59:5e:1c:c9:9a:87:7f:53:91:6d:
                    33:61:00:8c:f6:d8:2c:ae:62:77:85:f5:13:f8:df:
                    b8:9b:8f:97:03:46:ce:77:a0:4f:e0:81:08:89:0a:
                    12:a0:97:ea:31:c8:9b:93:22:10:07:e0:42:89:13:
                    18:8a:76:2c:5e:e8:15:1b:01:b0:c5:d2:18:e2:91:
                    55:1d:a1:88:70:8e:3d:ac:20:92:19:a0:c5:73:4e:
                    8a:fe:95:90:4c:04:df:ce:dd:ee:51:28:96:cf:1b:
                    8a:dc:c6:89:41:57:01:b8:79:35:18:42:7d:bd:07:
                    69:03:3b:b3:43:f4:cc:d9:f0:9c:b3:74:12:92:bf:
                    ca:97:0c:73:d3:a2:21:90:8e:1d:38:d9:58:6e:0f:
                    a8:c7:8c:d0:00:e5:55:fa:52:95:b9:2b:42:db:76:
                    58:e1:09:bc:e1:f1:b3:19:e0:07:96:d1:63:47:e9:
                    d0:65:64:e8:8c:07:fc:e3:14:9c:ca:37:f8:b8:6a:
                    04:79:55:cc:ef:63:d7:f7:0a:c2:ac:b7:13:5e:94:
                    d8:b9:d5:1b:ef:cc:87:af:b2:45:98:23:ad:77:c2:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:47:D7:B3:53:C5:B9:A9:0E:10:21:E7:B9:5E:3B:95:13:F1:73:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58a16812-ee2e-3a2a-a51b-e6b05032cb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:14:61:c8:02:77:ec:f2:53:c4:4d:e8:fe:a9:ba:e0:21:a7:
         76:7c:f7:c7:3f:68:5d:6c:77:48:5f:9c:3b:4c:ce:8b:35:c7:
         78:b0:83:43:d7:74:95:ba:0e:03:97:b6:20:14:69:9f:0e:06:
         de:13:eb:f8:be:90:93:24:cd:6b:cf:73:87:cf:4e:1a:0c:8d:
         b5:3f:98:01:5f:b4:9b:09:a1:9e:35:8b:57:40:c2:2d:8f:fa:
         71:67:4f:6b:0a:3f:1a:bf:a8:01:67:80:7b:fc:e9:9e:74:8b:
         81:86:0e:70:3e:fb:a5:b7:ce:87:28:f2:96:34:4b:8c:2e:3c:
         98:ee:97:b3:43:53:5c:7b:15:0c:89:bb:a8:35:ad:92:ef:6a:
         5a:40:6d:4c:69:c9:ae:1e:60:67:4f:b0:11:8f:71:c2:cc:0a:
         82:b4:eb:3a:cf:29:be:69:2e:fa:22:92:66:c1:13:71:7b:28:
         cb:66:31:a6:58:77:4b:e2:7e:fe:dd:09:5c:c2:d1:b8:d6:55:
         f3:2a:d0:c8:12:d2:3d:96:ad:bc:6c:1a:b6:4a:52:02:47:6d:
         e3:30:71:da:30:e0:27:a0:df:a2:40:75:11:35:5c:4f:f2:d0:
         a6:a7:e4:37:d2:fc:d4:84:83:a1:9b:48:94:13:5a:da:c2:6c:
         2b:49:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org