Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9bb93edb-b57a-37cf-b4d7-907ffaaa5741.roa
File:                     9bb93edb-b57a-37cf-b4d7-907ffaaa5741.roa (raw, json)
Hash identifier:          or4IGiW4NpwYoMbDFRJG/ZiNI31lano1obCd2Jz2E/A=
Subject key identifier:   83:1A:66:EE:2A:7E:81:33:49:19:AA:81:6E:0B:43:C6:96:EF:90:4B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858454272BDD26DB3ACB005165780
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9bb93edb-b57a-37cf-b4d7-907ffaaa5741.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        170.114.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 21:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:bd:d2:6d:b3:ac:b0:05:16:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=29314c8b-97b0-4897-943d-968f2aa0298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:f6:d3:10:a4:e9:3b:25:50:eb:72:79:73:
                    fa:04:e9:20:24:2b:5d:98:b6:33:f6:56:e1:f0:96:
                    d4:cf:50:c1:1a:e2:e3:47:3b:f5:c5:1d:55:04:dd:
                    29:b7:1b:95:45:61:25:75:40:92:52:6a:f2:c8:9c:
                    f3:4e:94:05:45:06:af:ce:d5:ee:7f:bd:bb:63:e9:
                    75:89:c9:67:7b:f7:54:12:7f:a3:3b:fc:a9:5d:0a:
                    63:90:ee:31:ee:78:4b:6a:98:1f:bb:99:14:3d:f4:
                    5e:ad:06:bb:df:5a:0e:87:20:9c:7a:9c:11:b6:43:
                    ce:b3:0e:99:e7:fe:1b:9e:dc:e8:ed:81:8f:42:42:
                    02:56:19:60:72:18:88:95:35:09:98:68:cf:72:e8:
                    e1:34:58:8f:fe:81:c2:7c:81:b5:05:53:55:ec:f2:
                    36:ea:16:b5:b5:e9:9f:55:13:db:1e:4c:c8:f1:12:
                    d5:f7:0e:53:65:06:3a:5c:48:94:de:62:f4:24:48:
                    09:71:e4:f3:fe:1b:52:9e:91:67:31:80:8d:8b:e2:
                    2a:6f:83:c5:38:89:56:09:3c:31:5a:e6:27:94:be:
                    14:c4:3a:a0:b8:e4:64:3f:a4:52:63:96:32:9d:dc:
                    36:29:a4:70:3c:ca:7b:0d:1a:0a:c9:8a:da:b3:fc:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:66:EE:2A:7E:81:33:49:19:AA:81:6E:0B:43:C6:96:EF:90:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9bb93edb-b57a-37cf-b4d7-907ffaaa5741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:10:3f:eb:a9:1c:d1:83:ba:8c:71:09:86:3d:e6:e4:c1:ae:
         06:d5:e8:16:57:24:e9:b9:09:86:73:2f:2a:54:0f:2a:27:24:
         8b:b0:78:0e:9d:a1:f7:d2:5e:16:d3:a0:6f:65:d8:e7:9a:ed:
         e0:55:6e:b5:08:dd:3e:39:d8:5f:53:4f:4a:e0:8e:4e:ab:51:
         a1:75:6a:29:02:a2:a6:51:66:9e:77:df:0e:c5:e7:d8:6f:83:
         ed:36:f8:af:6f:9a:83:c6:47:78:ec:7d:90:45:0b:e1:7a:3a:
         9e:bb:dc:34:fa:6e:c3:6e:25:55:2e:5f:a0:a9:41:aa:40:84:
         ac:97:d0:bc:9f:21:e9:d2:55:25:20:e8:13:0c:f2:1a:62:00:
         dd:7b:0b:e0:90:8e:0b:76:7f:e1:e6:ea:11:02:3a:42:75:63:
         1e:39:13:03:40:8f:65:c6:12:00:49:05:ec:28:97:0f:96:81:
         78:03:c9:40:0c:cc:75:58:45:93:7f:1b:22:e1:93:c9:6b:f6:
         95:d7:5f:c0:41:99:e6:54:35:a2:d6:4a:be:13:58:71:78:26:
         24:b9:ba:a3:0d:fa:c6:8e:53:72:84:80:46:bb:af:4b:ae:96:
         56:8f:66:b0:19:02:2c:ba:fd:82:4b:9a:7d:aa:2c:6f:a4:db:
         5d:a8:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org