Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7f36f193-4f78-3f24-8a38-bf588f766e7e.roa
File:                     7f36f193-4f78-3f24-8a38-bf588f766e7e.roa (raw, json)
Hash identifier:          HWw+tH/rBLX7nKISmhlDzYSv5pDb5LjLQBdFmwpYqIo=
Subject key identifier:   F1:40:9A:17:88:25:65:B2:41:F5:27:A4:40:85:36:1D:BA:D1:42:72
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285845AE1571964613A02C255802C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7f36f193-4f78-3f24-8a38-bf588f766e7e.roa
Signing time:             Sat 27 Apr 2024 02:19:56 +0000
ROA not before:           Sat 27 Apr 2024 02:19:56 +0000
ROA not after:            Fri 26 Jul 2024 02:19:56 +0000
asID:                     834
IP address blocks:        72.14.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ae:15:71:96:46:13:a0:2c:25:58:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Apr 27 02:19:56 2024 GMT
            Not After : Jul 26 02:19:56 2024 GMT
        Subject: CN=b62541b2-5b75-4452-a3c1-d8b908492285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:e8:35:d9:6c:61:de:18:2b:15:46:d6:11:
                    62:8d:4e:2c:d3:0a:50:75:3f:fc:24:85:6a:ab:e4:
                    43:10:de:fc:ae:48:6f:fb:c8:4b:23:54:bc:49:77:
                    a6:1d:8b:a1:cf:af:83:cf:c9:77:29:36:94:eb:ab:
                    e3:3f:d5:23:69:25:28:0e:78:46:f4:84:26:45:03:
                    d7:0d:57:00:97:f7:99:8f:51:3c:d0:a9:7c:5d:e8:
                    a3:8a:ad:b2:3d:13:eb:18:7b:9e:ed:39:46:f1:71:
                    92:ec:10:74:6e:d3:cc:3b:80:4a:f1:a0:fe:6f:44:
                    18:e7:72:75:95:76:80:e0:18:19:7c:f9:06:51:27:
                    b4:cd:e4:e0:1c:47:a0:53:fc:e8:26:b0:39:b0:d5:
                    bb:fc:d0:c4:de:d9:a7:3f:ef:95:46:43:2a:a1:56:
                    94:79:e2:3a:79:d2:1f:5a:e4:ef:8a:c5:ed:0f:98:
                    6b:a8:96:75:92:25:8e:c6:7a:4c:77:68:af:bd:e4:
                    50:cf:4a:75:47:3d:d5:50:dc:bc:7a:04:3a:74:8b:
                    4c:d9:48:c0:d1:c6:b4:4e:b9:ae:8e:c2:08:b3:77:
                    87:ae:ea:50:f3:c1:d6:f5:27:61:7e:e4:eb:1c:6f:
                    fa:6a:90:45:ee:80:4b:49:e9:d0:b1:48:fd:f3:00:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:9A:17:88:25:65:B2:41:F5:27:A4:40:85:36:1D:BA:D1:42:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7f36f193-4f78-3f24-8a38-bf588f766e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:60:7a:e9:a5:f5:b8:31:95:1b:13:4d:9f:e1:8d:fd:9b:a2:
         83:60:78:46:70:9a:bb:a1:0c:30:e5:a2:a7:96:87:db:2e:da:
         ec:db:8a:ad:fa:67:49:2a:a3:1b:7f:f2:7e:51:2a:ad:d4:03:
         cb:d3:2c:01:11:fb:4a:a2:cd:fd:63:91:f2:2d:be:19:8e:61:
         b3:d6:c4:c6:58:e4:3d:7b:3d:af:06:ff:57:2a:ac:91:17:13:
         7f:fe:eb:a2:88:22:a4:73:3c:e1:13:05:d2:d9:c8:63:14:b5:
         c9:b2:6d:3e:ff:4a:a0:5d:e0:a6:b9:5e:6d:f7:54:fc:8a:61:
         96:ec:3a:aa:ea:62:60:8c:e3:a7:4d:14:d0:64:5a:0d:e6:b1:
         5f:cb:38:a1:d8:b0:ec:32:5a:c6:8c:b0:ee:04:4c:26:b8:51:
         1d:56:c5:fd:ce:a8:81:81:43:f4:86:d8:00:63:55:0f:61:7c:
         2a:01:30:c1:b6:18:8a:a2:84:96:41:35:3d:a3:6c:b7:47:8f:
         34:79:02:4d:da:a7:34:f1:d0:93:aa:56:f7:b0:b2:be:93:4b:
         c8:9d:4d:78:58:a9:ba:84:80:f4:32:fe:3d:e3:ba:85:09:1e:
         8a:e0:be:14:ff:c2:03:a2:89:6c:b5:44:b5:d4:bd:94:45:5e:
         b4:a1:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:18 2024 by rpki-client on console-fra.rpki-client.org