Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9432d3f7-f6ae-31f8-8660-03197f5876f2.roa
File:                     9432d3f7-f6ae-31f8-8660-03197f5876f2.roa (raw, json)
Hash identifier:          zpNGcGQZJcJUhv6jXzsIwKNda71UbIQNPY0IxWZOWkE=
Subject key identifier:   51:56:EC:70:2C:B4:E1:97:BB:0D:B6:B4:0C:7E:72:8A:7A:2C:4B:46
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FEA3416F486C156A962540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9432d3f7-f6ae-31f8-8660-03197f5876f2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:a3:41:6f:48:6c:15:6a:96:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cdb13a6e-50d6-401e-acc8-2ba11143eee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:33:05:9a:ad:de:36:4f:31:bb:7f:e2:ac:
                    ee:b6:8c:db:a0:d8:13:8a:bf:92:05:02:94:9c:1f:
                    8a:7f:8e:cd:cf:4a:89:6e:0c:bb:f6:81:33:da:33:
                    f2:24:03:51:f5:f0:0a:46:f5:3b:e8:5d:1b:87:da:
                    a0:7a:e3:2a:5d:ed:2d:17:d0:74:65:24:6b:9f:7e:
                    68:88:b7:67:05:b8:10:2e:95:48:6e:f1:9d:46:27:
                    b2:5b:0b:6f:cb:bf:a7:b6:77:47:40:58:74:d8:5d:
                    be:a2:fa:4e:bc:87:a1:c8:bd:45:dd:6e:f4:a2:3b:
                    57:a7:40:b0:b4:90:6f:63:b1:1a:d6:6d:67:4b:49:
                    a2:4e:b2:51:fb:2c:4b:3a:e8:f0:c1:97:44:06:1a:
                    0a:97:58:4a:f0:8c:a3:c9:3d:b3:42:dd:12:be:53:
                    ae:1c:5f:4b:cb:4e:d8:1a:e4:af:93:30:6e:a5:81:
                    15:0b:b1:11:25:d7:22:d5:ee:33:93:2d:d5:cc:c0:
                    f5:97:1d:3f:d5:6f:eb:4a:b7:91:5e:1f:3b:4e:cd:
                    ac:82:f9:58:85:64:f5:4f:9a:e5:0b:e2:2b:fd:bd:
                    d7:5d:88:30:db:1d:60:d9:a0:c4:a9:89:28:5b:f6:
                    6a:31:f8:8a:c8:6d:7c:f7:fe:55:8a:1c:cc:0b:da:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:EC:70:2C:B4:E1:97:BB:0D:B6:B4:0C:7E:72:8A:7A:2C:4B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9432d3f7-f6ae-31f8-8660-03197f5876f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:da:29:2f:80:d5:5b:25:39:02:c2:6a:3d:ea:d3:df:8a:21:
         5e:21:52:c2:73:45:23:44:8c:8d:38:80:14:bb:52:13:2f:7d:
         f3:3e:b6:ef:6e:73:f6:e2:42:01:2c:79:47:c0:3c:79:07:ff:
         6e:90:01:cf:32:07:29:f2:45:da:c8:5f:ce:e6:b6:0c:4b:72:
         82:99:bc:76:d0:66:d4:ce:26:4a:32:ac:1d:2f:4e:f9:17:73:
         65:cc:47:60:12:32:b4:52:df:9f:eb:ad:0c:9c:2d:40:3a:fa:
         54:91:4f:01:a1:77:c4:5c:ba:0a:1c:74:5f:76:e2:08:5a:97:
         4b:e0:4e:b3:63:c0:90:95:93:92:8d:72:e7:30:f3:88:c1:18:
         13:59:8f:d8:6e:58:3e:88:f2:b2:9f:c6:53:a1:13:76:ee:d1:
         62:c5:a3:a9:aa:32:62:f9:39:61:b5:e3:0d:4c:7d:3f:e1:e0:
         65:28:79:af:b6:c1:6d:fc:ae:b5:82:6b:61:e9:67:cb:6b:c7:
         15:6c:8e:58:59:2f:ab:9b:dc:60:db:10:8f:ec:a4:7d:4c:f6:
         40:20:25:6b:54:60:f2:ed:2a:84:d5:6a:c8:24:27:c1:81:fc:
         34:db:c6:b1:a0:b5:29:e8:42:12:32:25:4f:95:fc:a0:f8:65:
         a1:ae:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org