Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/1212718a-0063-354e-91ee-440cb2137e32.roa
File:                     1212718a-0063-354e-91ee-440cb2137e32.roa (raw, json)
Hash identifier:          +w3fJyi3YI2Ki0rGqk40Pmdjl77vogZwVQxFS4Q1ohk=
Subject key identifier:   ED:98:48:E5:92:BE:42:0E:C2:5C:E9:8F:BF:3E:14:78:74:36:39:0C
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285845249E8B550EC3820179315980
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/1212718a-0063-354e-91ee-440cb2137e32.roa
Signing time:             Fri 08 Mar 2024 20:34:37 +0000
ROA not before:           Fri 08 Mar 2024 20:34:37 +0000
ROA not after:            Thu 06 Jun 2024 19:34:37 +0000
asID:                     33548
IP address blocks:        104.200.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 03:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:9e:8b:55:0e:c3:82:01:79:31:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Mar  8 20:34:37 2024 GMT
            Not After : Jun  6 19:34:37 2024 GMT
        Subject: CN=44516b05-d1d5-4a7d-b784-e7d5cccbd674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:8e:9e:5a:e8:4c:ce:80:f1:37:a0:2b:13:
                    de:94:7d:ca:fe:28:79:45:11:42:67:af:c6:14:28:
                    f8:b8:78:8e:8e:71:24:b7:c6:fc:ae:fe:b0:50:df:
                    c7:0d:2f:1d:78:e3:74:97:45:bd:19:6e:8f:99:5c:
                    fe:f1:4d:11:aa:49:80:7c:59:e9:02:16:6f:05:a7:
                    fc:d3:e2:17:74:02:06:e6:fe:6e:35:1b:43:1a:30:
                    47:b0:9d:44:37:0f:30:bf:cd:d5:3e:af:a3:c8:78:
                    c5:c7:19:f5:0f:ac:69:e5:29:21:50:8a:af:33:f3:
                    7a:4f:7c:58:98:1e:8a:d8:e6:3e:4a:8c:a5:cb:a9:
                    ae:2f:a7:ac:f2:62:57:63:7e:40:68:12:5c:23:4d:
                    ed:49:b3:2f:df:3b:f8:ac:f2:06:7d:17:83:42:d9:
                    ba:9f:dc:97:f4:43:83:60:8f:5e:cf:7e:ea:89:7e:
                    35:88:ba:3e:95:be:10:f8:54:65:1f:46:b1:ae:0b:
                    8c:dc:c8:38:9d:1e:d1:d7:76:7c:ed:d6:3d:d6:00:
                    54:3c:6a:b9:67:ec:b4:de:dd:76:ec:c3:db:b2:4a:
                    9e:44:b7:fb:52:19:28:a7:0d:e4:8d:5c:54:1b:cd:
                    8a:50:4b:4c:1c:98:f3:8c:94:05:71:b4:21:1a:98:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:48:E5:92:BE:42:0E:C2:5C:E9:8F:BF:3E:14:78:74:36:39:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/1212718a-0063-354e-91ee-440cb2137e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:66:40:cb:69:cc:b5:f2:ef:56:ad:de:be:49:48:f9:1d:
         4c:49:d6:37:16:e9:9a:26:9c:9b:b8:52:1d:a6:d2:70:06:8b:
         2f:a7:46:8c:9c:bc:31:18:ed:b2:9e:ce:8f:4d:a2:ba:d0:db:
         c6:07:99:27:84:42:75:89:7d:b6:4a:91:46:63:f2:3a:ea:8c:
         8d:87:56:62:14:d3:27:41:92:6c:a6:07:34:40:24:ee:22:c2:
         ac:f2:fb:3d:46:e0:98:92:c0:12:d1:29:45:12:3d:03:0b:31:
         9c:e4:c5:11:84:65:c1:fe:05:87:df:47:a6:2c:5b:e6:35:ed:
         cd:0e:cc:1c:be:11:25:65:29:f0:1c:73:ca:c5:95:63:01:5b:
         8f:99:e5:19:23:d9:4f:d8:43:e1:3d:bc:12:b8:21:47:85:71:
         44:6c:c8:e1:20:cd:96:a0:64:cb:10:9e:f9:d3:41:12:d9:3d:
         45:20:f8:9a:6e:98:a5:02:53:b7:47:ae:6d:82:42:1d:5b:69:
         cb:75:56:39:66:a9:cc:43:50:e7:3c:b8:e0:7d:c5:f5:2e:89:
         44:e2:3e:11:88:d9:71:30:02:a2:c9:82:3b:9f:ed:d9:d2:c1:
         b1:f3:8a:80:71:1d:f0:df:f9:fb:d5:09:5f:51:18:cf:95:f0:
         2b:f7:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 04:53:45 2024 by rpki-client on console-fra.rpki-client.org