Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f49280dd-8824-3e7e-ba3c-0fa39564a9eb.roa
File:                     f49280dd-8824-3e7e-ba3c-0fa39564a9eb.roa (raw, json)
Hash identifier:          GrkexhOApZLMDB6osK29wi6e5yaq3NiN4e99d9c17RQ=
Subject key identifier:   C0:76:B9:7B:CD:ED:37:40:9C:5B:D3:AC:26:2E:F4:3E:59:3E:C5:E1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EE0656D6E73AFEC1E10E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f49280dd-8824-3e7e-ba3c-0fa39564a9eb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        208.76.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:06:56:d6:e7:3a:fe:c1:e1:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b0e6b849-595e-4f06-a597-11103e708a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:01:2b:59:29:3c:60:c8:9c:1b:7c:7a:89:
                    b1:43:ec:fe:a0:9d:a3:79:8b:ef:23:a0:11:c9:83:
                    a5:02:da:7a:47:6f:73:e6:96:91:53:39:8f:8c:e6:
                    fc:c4:ec:7e:38:1a:29:ea:79:e9:07:ae:b7:0f:40:
                    8f:76:7b:d9:9d:04:81:cb:25:31:53:ce:fd:4a:08:
                    9b:4f:33:ce:3c:3d:0d:a7:00:0f:dc:11:9b:ef:45:
                    f9:b1:54:91:92:6a:9a:80:1e:5e:48:db:17:2a:f0:
                    cb:c3:f6:a5:c4:6b:7c:e2:a8:ed:18:b2:5f:77:d2:
                    f3:c2:d4:90:01:f3:b5:80:28:f0:c9:16:39:4b:14:
                    15:b6:5e:55:44:c2:52:dd:b6:4d:42:c9:80:b3:74:
                    31:0a:de:1b:00:b5:7c:8f:33:f9:e4:f2:7d:85:df:
                    1c:bc:94:34:04:12:a3:e5:09:3b:0d:ab:6c:60:bd:
                    41:a8:9e:9e:5d:e1:37:f5:e2:a3:36:f4:86:b0:65:
                    0b:95:10:c6:3b:a5:b7:47:08:79:8d:f7:5b:bd:17:
                    32:37:bd:04:74:0d:0e:ac:61:01:a9:0f:b8:b0:b9:
                    39:95:d2:0a:1f:07:e2:54:9a:4d:a5:40:65:d7:70:
                    42:0a:8d:5c:d6:be:75:1e:20:df:7e:0b:d5:a5:66:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:B9:7B:CD:ED:37:40:9C:5B:D3:AC:26:2E:F4:3E:59:3E:C5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f49280dd-8824-3e7e-ba3c-0fa39564a9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:97:35:48:82:1f:33:0c:55:d2:b0:1f:f1:29:f7:a2:02:
         b4:48:eb:e9:a7:b3:61:08:d0:62:14:12:f9:cd:dc:ae:ef:ef:
         21:e7:85:17:10:5e:c0:00:20:9a:a1:be:17:d6:87:ca:4a:b8:
         a1:6a:86:bd:90:3a:d2:e0:78:13:fb:e2:58:20:84:6a:ce:ec:
         57:57:2a:1a:04:b0:66:fa:35:95:39:fa:40:8f:cb:81:f6:66:
         ac:c9:28:b8:ec:57:68:aa:e4:dc:b3:e7:83:9a:5b:2b:e4:52:
         02:f2:6e:19:8c:94:07:7a:97:6a:bd:a0:b6:2f:68:d6:d5:dc:
         66:56:c1:e1:ad:38:11:63:76:cb:9a:1a:0a:08:a3:9b:95:e6:
         10:40:35:7f:90:ba:bd:92:28:bb:c1:8c:10:41:62:37:70:77:
         5f:66:b7:a8:ab:57:c6:ad:25:c5:d8:57:72:48:25:44:cb:c1:
         39:c6:54:1e:60:41:da:61:84:4f:d2:7c:64:11:bb:7f:db:56:
         70:ed:88:06:31:93:d1:9a:70:d6:63:ae:54:ae:92:d9:9d:3c:
         49:be:55:1e:88:b8:1b:0f:ce:5d:a1:f4:a1:95:4e:4c:52:1f:
         a3:d6:d0:2f:f8:6b:43:e4:ae:da:76:2f:76:73:5e:f5:ba:c4:
         74:f2:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----