Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/565bd578-f644-3f9f-8871-7c80e978f424.roa
File:                     565bd578-f644-3f9f-8871-7c80e978f424.roa (raw, json)
Hash identifier:          kVAnaroVTsIWdNCKFdWYEvKBslU6R97VpZ1vsnDiMbU=
Subject key identifier:   D5:16:F8:C3:AB:26:6D:63:E1:90:EE:AB:CB:3F:4E:6A:A1:48:6D:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584510D6A7B200F27992B9416700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/565bd578-f644-3f9f-8871-7c80e978f424.roa
Signing time:             Fri 01 Mar 2024 18:31:31 +0000
ROA not before:           Fri 01 Mar 2024 18:31:31 +0000
ROA not after:            Thu 30 May 2024 17:31:31 +0000
asID:                     834
IP address blocks:        108.165.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 16:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d6:a7:b2:00:f2:79:92:b9:41:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 18:31:31 2024 GMT
            Not After : May 30 17:31:31 2024 GMT
        Subject: CN=a515ea56-da3a-4580-937c-81f756050ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:72:40:cc:61:85:bf:0d:87:b4:2f:36:b1:
                    7a:a8:6d:41:8b:aa:38:8d:99:a1:c3:76:aa:7f:a9:
                    50:13:e8:d8:b6:72:d2:7b:b8:d7:e9:9f:17:34:87:
                    f2:64:4d:97:b2:48:f4:ea:46:65:64:f1:fd:53:67:
                    d2:68:2e:a3:0d:79:db:dd:17:94:5a:ad:ce:ef:be:
                    66:91:46:fd:39:ad:c4:6c:b7:46:e7:51:21:23:96:
                    2e:e9:06:b2:f0:6d:99:35:0b:9c:c7:19:41:7a:dd:
                    7b:ff:e3:e8:94:6a:20:2f:57:8e:71:fc:43:ed:2b:
                    91:d9:3f:c4:28:21:c6:90:42:05:62:fe:e9:90:92:
                    ee:86:27:3a:51:f6:ff:50:df:57:ea:4f:e8:28:dc:
                    74:97:cc:0e:3b:11:73:d6:9d:f3:7e:d4:6c:06:8a:
                    22:d5:02:0f:62:3b:22:96:18:76:65:30:69:c7:c3:
                    4a:c3:dc:f9:35:80:a9:e5:e7:bf:1d:31:ec:97:d6:
                    39:7d:2b:ed:b9:c2:d7:b8:42:66:42:81:94:91:96:
                    76:c1:ea:42:98:a6:6e:f8:dc:98:71:0e:7c:51:39:
                    8e:28:cd:b9:c0:da:e8:9b:03:db:d6:37:ac:3c:fe:
                    45:bc:c9:d9:a0:1b:5c:9b:80:c1:6e:52:f6:7d:9b:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:F8:C3:AB:26:6D:63:E1:90:EE:AB:CB:3F:4E:6A:A1:48:6D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/565bd578-f644-3f9f-8871-7c80e978f424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:71:df:44:1b:c6:72:1c:46:c0:cc:f9:a4:69:bf:6d:3d:
         d4:8a:aa:b7:85:70:71:11:a9:14:8e:57:42:52:a0:c1:01:5c:
         28:38:45:64:47:97:e1:2d:05:d5:ea:ef:e4:c5:5a:88:c7:42:
         ab:99:78:e7:78:e5:22:96:85:b4:d4:ed:a6:59:d3:5a:aa:95:
         b4:f8:9e:59:b7:16:fd:0a:f2:25:35:85:d0:42:8f:af:55:77:
         12:74:e4:23:ef:fe:31:56:da:2d:d2:3a:1a:18:69:2c:0b:74:
         ee:96:c2:72:0a:23:39:75:12:4d:2c:5f:45:b3:80:01:1b:68:
         96:33:c1:78:67:3f:22:bb:bc:0c:51:49:52:87:6a:ed:18:9d:
         45:1a:d9:20:66:92:47:22:f5:c7:03:09:e7:13:61:5a:9c:e3:
         7b:2b:1d:44:44:e8:8d:d6:25:0f:08:9d:2c:90:3a:b1:91:76:
         87:3c:28:91:3d:cd:b0:b6:c6:07:60:32:8d:77:6b:08:05:49:
         4a:62:e1:57:e9:c5:ac:7a:11:c4:35:ec:ee:c4:6f:6d:f7:99:
         08:b9:61:74:de:50:3b:1c:5e:2e:72:8e:3e:5d:d4:5d:9a:a2:
         68:ff:2d:62:5d:e3:55:1f:3b:0b:ca:24:84:9a:f6:47:65:02:
         03:28:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 20:35:48 2024 by rpki-client on console-fra.rpki-client.org