Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fba2ef-6fa1-363c-bb4e-1adbfec24598.roa
File:                     f8fba2ef-6fa1-363c-bb4e-1adbfec24598.roa (raw, json)
Hash identifier:          QvHtKdHk8IaGUpdiVfUTVM4aTRT+ZjdVev9n3mTLvBY=
Subject key identifier:   B9:6B:CE:67:40:3B:33:34:DC:A4:78:D8:47:27:AB:5D:88:A7:34:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584518B03E9295000A4D90F814E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fba2ef-6fa1-363c-bb4e-1adbfec24598.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     31916
IP address blocks:        108.165.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:3e:92:95:00:0a:4d:90:f8:14:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=e7975211-8907-45bc-9958-1c62115f7f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:d9:78:41:54:79:69:24:e4:dc:53:08:df:
                    84:43:8d:ff:62:dd:6e:bc:48:07:3b:d2:e2:68:c9:
                    77:b2:44:70:7c:54:32:63:ce:84:4e:15:ee:18:e4:
                    30:25:9e:e7:f6:e8:ce:c7:22:34:86:24:2c:da:58:
                    07:e6:97:bd:b1:d5:bf:50:f5:bd:aa:84:ae:ca:6c:
                    45:98:ba:a2:c0:a1:1e:69:2e:9e:a4:8c:12:65:71:
                    a4:e9:7e:74:b0:5f:38:05:a1:4f:19:63:02:2b:38:
                    0a:11:26:df:24:81:4f:7f:dc:f4:e4:00:89:f4:dd:
                    42:db:e0:c8:94:89:ae:37:ad:b3:9e:89:cb:eb:b5:
                    0f:da:5d:6f:28:73:26:88:76:3d:4c:33:df:e2:a1:
                    33:14:71:e9:4c:9f:b1:10:d4:ae:01:38:bb:21:9a:
                    6f:88:4f:5d:14:28:32:0e:32:63:87:69:2c:3e:d7:
                    fd:55:0f:b2:f6:8e:18:9a:90:0f:3d:7b:5b:28:e9:
                    fa:c8:c3:a5:2f:a5:69:f5:6c:9e:92:af:da:da:18:
                    cb:21:0d:32:68:14:a1:ef:eb:8a:a6:ee:a7:6f:93:
                    76:6a:f2:dc:4e:f7:1d:df:80:c7:c2:7a:d3:f5:c5:
                    c8:46:2a:d1:d1:15:58:b6:73:cf:47:0d:ff:a3:a0:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:CE:67:40:3B:33:34:DC:A4:78:D8:47:27:AB:5D:88:A7:34:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fba2ef-6fa1-363c-bb4e-1adbfec24598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:93:83:83:9d:8d:84:51:d7:1e:7a:4e:de:8d:30:04:c7:
         22:57:5c:c6:9d:86:f6:51:f1:69:89:34:0d:6a:b8:32:f8:7d:
         8a:c5:8f:41:ff:f9:07:60:75:33:6b:b3:28:14:4d:2c:48:99:
         a1:ab:cb:ae:88:49:bd:1d:0b:2b:3d:0f:dc:14:61:18:35:f1:
         7b:1c:e6:f6:63:a5:c2:c3:e6:08:5b:45:68:5e:b3:a0:ad:f5:
         23:48:de:40:75:18:59:a1:e0:31:1a:7c:3e:bc:c9:7d:47:cc:
         6e:4d:ef:47:a0:88:c4:1f:28:c8:5f:66:ff:53:42:b5:f8:c9:
         f6:a2:7b:a3:77:2f:b1:55:5b:fe:38:6b:1f:ac:58:ce:ba:6f:
         e6:cd:b0:2e:dc:ea:66:c4:1b:42:e3:3c:9d:3c:c7:cc:b0:21:
         da:13:f5:e2:84:90:0a:54:10:45:4d:c7:66:47:d7:92:12:75:
         25:da:70:c7:fe:81:c3:50:d9:c4:f1:f3:9b:9b:1d:3d:e5:40:
         24:26:c7:a5:20:e9:f3:72:92:91:e4:8a:34:a0:31:22:5d:d9:
         c0:2f:07:f9:ae:0b:e0:29:16:15:c2:81:39:40:e2:a1:a7:e2:
         bd:7d:0e:54:73:44:48:10:92:6e:d1:51:1c:b8:8d:e1:1c:cc:
         91:44:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 18:58:35 2024 by rpki-client on console-fra.rpki-client.org