Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/3eba5993-3654-3144-980e-f1be8d45c709.roa
File:                     3eba5993-3654-3144-980e-f1be8d45c709.roa (raw, json)
Hash identifier:          jnoPn+XWa8WaADbS9B5IkmuVcUYCbC35PneudcepqwE=
Subject key identifier:   A6:9F:8F:CF:EE:41:55:03:94:4E:85:C0:0E:8B:BA:D3:AE:3D:BF:C3
Certificate issuer:       /CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
Certificate serial:       010D0C9F43285843EB2E4B098680A8DE7733F634
Authority key identifier: 69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/3eba5993-3654-3144-980e-f1be8d45c709.roa
Signing time:             Fri 17 Nov 2023 14:00:20 +0000
ROA not before:           Fri 17 Nov 2023 14:00:20 +0000
ROA not after:            Thu 15 Feb 2024 14:00:20 +0000
asID:                     4785
IP address blocks:        167.88.184.0/24 maxlen: 24
                          167.88.183.0/24 maxlen: 24
                          167.88.186.0/24 maxlen: 24
                          167.88.185.0/24 maxlen: 24
                          167.88.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:eb:2e:4b:09:86:80:a8:de:77:33:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
        Validity
            Not Before: Nov 17 14:00:20 2023 GMT
            Not After : Feb 15 14:00:20 2024 GMT
        Subject: CN=aa80021c-4506-4698-bbc8-696e8ce65a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:58:98:4a:51:37:a1:9c:91:2b:14:20:42:
                    75:92:b3:e5:ae:f7:ff:71:76:b1:7f:c0:9e:28:79:
                    8c:3e:2a:59:a1:e6:46:4c:89:a9:9b:c1:bb:c2:7e:
                    42:aa:76:f7:70:7a:fc:bf:1c:5b:66:b9:66:2b:4c:
                    8c:7a:3e:19:0e:78:45:5c:97:1d:23:a4:02:5b:64:
                    d9:f5:37:7b:f5:d3:c0:35:10:60:29:76:d7:41:e7:
                    64:49:8d:5e:5b:a6:4b:05:9d:26:84:f5:4f:89:56:
                    0c:b0:cf:1a:f9:c1:1b:f5:8b:a2:d5:94:f3:ff:9e:
                    df:07:8e:51:53:88:f3:d4:63:e0:4e:fb:a3:78:23:
                    2a:b9:6f:c7:fa:8a:44:d1:c8:62:48:b4:73:dc:c9:
                    b3:a1:a1:a9:f6:2e:f2:c7:dd:8d:37:34:66:35:6b:
                    de:d6:ab:d1:01:cb:9b:69:f4:f5:c7:3e:ad:e2:fa:
                    f9:25:11:ed:84:63:46:af:dc:df:e8:c6:3d:f0:af:
                    70:d3:fc:5d:0c:a8:7c:41:8c:ce:7c:46:3a:53:27:
                    42:12:7b:fd:73:6e:67:49:92:fe:65:b8:52:5c:3c:
                    61:57:85:5b:92:16:8f:97:7a:f3:67:ea:a5:30:8b:
                    ae:eb:e7:50:7a:bd:95:06:e5:40:66:21:da:c1:1a:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:8F:CF:EE:41:55:03:94:4E:85:C0:0E:8B:BA:D3:AE:3D:BF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/3eba5993-3654-3144-980e-f1be8d45c709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl

            X509v3 Authority Key Identifier:
                keyid:69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.182.0-167.88.186.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:ba:0d:ea:45:32:54:12:cc:0b:fc:8d:fd:c4:01:24:75:
         3d:12:d7:19:ae:ec:db:28:10:8e:8a:d3:a6:c7:88:7e:8c:53:
         bc:56:a6:1c:86:0e:53:11:4f:ed:43:5c:84:47:9d:16:0e:3b:
         08:ea:70:11:c4:10:26:23:c3:2e:78:a6:bb:db:b4:27:cb:79:
         57:10:be:0b:8f:2d:52:68:dd:8f:8b:4a:dc:cd:9c:ba:0e:08:
         42:81:c4:29:61:ba:77:fe:4b:83:f3:9a:2e:fb:f4:78:d0:5f:
         cf:62:14:a9:e7:5a:66:74:56:50:23:e2:57:77:cd:7b:a9:20:
         fd:6a:ee:53:f3:80:be:29:ee:7a:ce:cc:52:9e:7f:3e:65:3b:
         0f:06:29:ee:cc:8d:01:6c:63:5e:2c:44:62:66:41:b6:db:4f:
         88:06:65:0d:d2:64:2c:d8:74:9d:4a:f8:f2:dd:a6:a3:7a:a9:
         fb:a8:2d:9b:ca:2c:0a:a3:e2:8c:a2:e8:26:bb:1d:0a:ce:3d:
         47:83:48:13:6d:a2:03:7f:51:39:80:21:91:93:32:5a:6d:39:
         d9:52:92:d3:7d:4d:85:30:e7:88:b6:85:2a:87:27:68:74:93:
         a1:23:6d:b3:25:74:bf:c6:4f:81:39:c7:19:e0:a3:13:18:92:
         2f:86:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 07:09:45 2023 by rpki-client on console-fra.rpki-client.org