Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91831426-a4b6-38e8-8ac7-af6c2395818e.roa
File:                     91831426-a4b6-38e8-8ac7-af6c2395818e.roa (raw, json)
Hash identifier:          dnbxMSWlQ6uNXHECIS0BzK0ZM+Eul4Q7auRZRmuU2W8=
Subject key identifier:   00:C5:3B:0D:7D:42:E7:3E:1C:B4:57:B6:62:BF:25:E9:F1:D7:B5:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BDE3865CA851CC4A8FF983C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91831426-a4b6-38e8-8ac7-af6c2395818e.roa
Signing time:             Tue 01 Aug 2023 15:51:28 +0000
ROA not before:           Tue 01 Aug 2023 15:51:28 +0000
ROA not after:            Mon 30 Oct 2023 15:51:28 +0000
asID:                     834
IP address blocks:        108.165.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:e3:86:5c:a8:51:cc:4a:8f:f9:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  1 15:51:28 2023 GMT
            Not After : Oct 30 15:51:28 2023 GMT
        Subject: CN=f01c13a8-405a-4337-a84a-fc1d31e703d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:d1:be:34:6a:cf:f7:c6:46:bb:19:d5:be:
                    e9:35:f6:5b:74:9d:cb:8a:b2:22:38:55:30:be:cd:
                    f3:56:be:27:e9:3e:f3:f4:a9:0e:be:58:a8:60:05:
                    97:9d:78:6f:1a:48:d5:3c:1b:ed:bb:a9:8c:99:b0:
                    18:1d:73:d4:46:fe:d7:13:a9:6f:13:7b:22:06:02:
                    81:24:07:89:b8:57:7d:fe:4f:b1:5e:78:fe:58:83:
                    ee:36:c0:40:50:ba:14:ab:52:fd:dc:e8:a6:41:da:
                    fc:7e:5c:91:26:a5:02:e5:77:e7:9f:eb:8b:95:0d:
                    46:0d:68:b0:35:26:b6:cd:b1:a3:09:18:9a:48:d9:
                    80:fd:40:7c:da:ca:0a:a0:50:6d:89:6f:ca:37:10:
                    00:2f:5f:33:11:6e:8b:f8:0e:58:84:fe:d2:1f:65:
                    81:04:d8:9d:df:17:9e:2d:7a:ec:d4:0b:e6:dd:db:
                    ec:6b:c4:c1:35:1b:6f:0e:77:c4:08:58:25:57:da:
                    a0:9c:f5:79:9a:44:f1:36:97:5c:26:38:b4:9f:5d:
                    b7:5c:29:4e:39:52:d4:7f:4e:be:1a:95:54:7c:5a:
                    eb:b7:f9:2b:57:17:77:78:7f:00:72:01:bf:42:09:
                    f9:80:e5:7c:0a:fd:9e:20:b9:af:ec:7e:fc:1c:f9:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C5:3B:0D:7D:42:E7:3E:1C:B4:57:B6:62:BF:25:E9:F1:D7:B5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91831426-a4b6-38e8-8ac7-af6c2395818e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:c5:4c:29:2d:de:91:56:5b:ea:c7:47:1f:a6:44:e7:d5:
         cb:32:2e:41:6f:1c:db:fe:bc:e9:74:e1:8d:e4:2f:40:62:eb:
         bb:30:a1:12:28:28:07:2e:33:11:fb:35:fc:05:a6:c2:24:a0:
         38:2b:4d:47:65:3e:3f:02:b8:9d:9b:63:99:c0:25:d2:a1:60:
         4e:f4:fa:d5:00:26:65:d2:2b:01:85:2c:85:4e:79:bf:9c:4f:
         45:99:3a:f1:c1:99:e3:e0:6e:8d:69:66:e6:4c:c6:95:96:2c:
         ee:11:4c:11:69:21:b6:2a:6b:1e:43:1c:b6:4d:02:b7:2d:b8:
         48:ae:a3:3a:d1:00:9a:18:26:a1:a3:f0:45:76:0b:18:58:47:
         44:8c:c8:5f:e9:cf:d4:1b:b1:b5:a5:3d:4c:77:ec:d5:ae:3e:
         b0:90:32:81:e5:ec:11:d2:7a:24:7e:5f:7b:c6:0c:8f:e1:72:
         40:d1:92:a3:93:51:b3:f2:c2:23:11:64:90:f7:72:46:0b:d9:
         6c:ef:4c:58:ce:50:27:fa:72:bd:d0:13:99:2b:a8:15:e4:8b:
         3a:75:33:a6:15:37:17:d4:1e:9f:3c:2b:81:84:f6:ac:52:22:
         5f:2d:b1:09:bf:c5:a6:57:eb:4e:77:e3:c3:60:74:e7:66:e4:
         1d:76:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 06:35:45 2023 by rpki-client on console-fra.rpki-client.org