Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa
File:                     c5289444-cba9-3230-818c-d6a45e65470d.roa (raw, json)
Hash identifier:          7jGq6Rf3YVTfsbBZEn/Du8rn/Muj8SVSUmbJziE8Bd0=
Subject key identifier:   CE:15:35:ED:97:C8:15:81:BE:AC:09:33:89:9E:09:F0:B5:CE:E2:C8
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584476C472FB5365FBE83857EE00
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa
Signing time:             Sat 06 Jan 2024 14:00:20 +0000
ROA not before:           Sat 06 Jan 2024 14:00:20 +0000
ROA not after:            Fri 05 Apr 2024 13:00:20 +0000
asID:                     48581
IP address blocks:        128.254.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 21:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:76:c4:72:fb:53:65:fb:e8:38:57:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Jan  6 14:00:20 2024 GMT
            Not After : Apr  5 13:00:20 2024 GMT
        Subject: CN=4f06ad60-d1ff-4136-904e-b21296cc91e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:ed:e4:cf:f8:42:a8:27:00:8f:42:60:18:
                    9b:63:db:88:1d:cc:49:08:56:fb:a2:19:e9:6a:c6:
                    ed:b9:fa:4a:3c:5f:32:6c:38:d3:ab:aa:ff:58:90:
                    1f:50:ab:20:72:6b:24:e5:50:02:1b:e7:4c:ed:50:
                    25:85:97:2e:ba:3c:fe:d3:8b:6f:c5:65:1b:f2:2d:
                    bb:c7:b7:27:2b:e8:d8:06:30:e9:d8:26:61:8a:04:
                    30:16:36:33:45:dc:cd:46:43:c0:71:9f:b9:b6:ed:
                    ab:bd:57:03:72:94:14:54:e7:2a:d8:d7:bf:ec:6b:
                    4c:2c:07:df:0a:80:be:2c:c0:cf:c9:18:e7:0f:8f:
                    2a:dc:f0:d7:64:71:4b:76:3c:ac:94:70:4e:f0:08:
                    44:2b:4a:83:55:00:1a:ef:5d:fa:5e:46:7b:9b:cc:
                    82:d6:f9:53:4f:c6:97:4e:9c:84:58:80:b0:93:c3:
                    54:77:45:a0:f0:f2:62:2b:ca:03:82:0e:3d:97:e4:
                    c3:1a:97:1d:56:a1:a4:fa:70:8e:2d:7b:31:95:ef:
                    3a:64:a5:5a:e9:1c:f5:78:36:8e:80:bf:74:60:40:
                    86:54:4b:42:52:8f:5d:50:ec:74:63:ba:d6:e2:87:
                    99:17:38:6a:d9:11:bc:bf:8d:b3:5a:31:8d:4a:7c:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:35:ED:97:C8:15:81:BE:AC:09:33:89:9E:09:F0:B5:CE:E2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:80:6e:ec:8b:6b:a8:39:4d:88:6d:2f:ee:72:40:fb:72:f9:
         f1:91:0c:f8:7a:e9:0d:18:ee:1d:9a:13:a4:3e:d6:53:dc:ac:
         71:80:41:e7:9f:79:b0:75:ea:52:76:9a:cf:77:72:9e:bb:bb:
         44:31:f6:66:dc:89:a7:2b:67:ab:73:08:5d:ac:42:18:44:43:
         95:dd:78:2b:91:63:6a:d5:44:4c:ae:fe:4c:39:06:f2:27:53:
         02:6c:32:43:c0:13:52:f4:9c:e3:ea:4f:d8:4f:31:6d:24:e1:
         f7:96:ba:f3:7b:c6:ea:49:47:bd:88:f8:08:54:1c:5a:87:e9:
         a7:ce:43:fb:0c:32:24:83:23:e2:38:d7:28:78:9f:f6:5b:e1:
         47:ad:a4:22:6a:78:d0:cb:1c:ff:4f:01:21:ea:0d:e8:aa:a4:
         ed:1d:b1:0c:c7:0f:8f:ac:47:95:68:20:f1:c8:90:c6:e4:e0:
         a1:c5:b5:99:9b:ba:62:b4:a8:e8:11:4a:52:09:5a:be:92:7c:
         87:6c:f0:f6:1d:6c:b4:2e:28:04:d3:e1:fe:54:e5:a4:d6:5e:
         cb:da:44:7d:c2:e4:75:17:9e:14:c5:c1:07:4e:ed:64:2c:37:
         d3:1d:69:95:61:18:0c:10:0a:54:81:84:e4:40:65:6f:cd:de:
         d3:84:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 00:16:51 2024 by rpki-client on console-ams.rpki-client.org