Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/e8f25791-7f8d-3363-af48-c1f8f5c4b404.roa
File:                     e8f25791-7f8d-3363-af48-c1f8f5c4b404.roa (raw, json)
Hash identifier:          Vy2izEEaHjdDYEEaWZ2fu6wPHU8RsQGMkn32H7asa5g=
Subject key identifier:   99:69:15:C0:EE:CB:FA:7A:B6:A5:6D:72:65:DB:6C:A8:7C:80:53:B6
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285845295295890E52D1E24BBFBBC0
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/e8f25791-7f8d-3363-af48-c1f8f5c4b404.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     26383
IP address blocks:        68.170.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 16:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:95:89:0e:52:d1:e2:4b:bf:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=cf7e5400-5605-44ab-8dee-ea79a5553e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:be:2e:a7:8e:2a:55:e9:d8:df:b1:c8:5c:
                    65:23:5e:f8:b2:e2:14:0e:c4:ff:58:a7:04:c8:94:
                    4d:88:64:52:03:97:3f:9d:4f:92:02:b0:1c:2b:f4:
                    55:9d:2c:c0:8a:ef:a6:05:fb:77:98:35:d7:6f:cd:
                    b7:eb:22:04:15:6c:03:60:e3:ae:0e:7b:5f:60:25:
                    3a:d4:3b:63:af:fa:53:f3:f3:75:5f:ed:d3:25:b9:
                    18:92:71:b8:8f:56:d5:81:2a:a3:76:ff:99:55:02:
                    0f:f1:c4:61:5d:d5:6a:bf:2e:1d:6f:ea:a4:b1:4b:
                    56:f7:27:36:1f:0f:5c:c5:48:82:bb:24:6f:e9:9d:
                    88:6c:9d:81:f2:27:cf:17:e4:f4:65:a3:31:e7:47:
                    94:db:21:15:41:52:10:d4:f7:0b:1f:15:72:05:27:
                    27:af:c6:23:20:03:4c:78:5a:10:c0:77:57:30:b7:
                    76:d5:b4:83:80:25:47:d6:76:84:d1:a7:44:d8:a2:
                    d8:26:e2:d3:76:8c:2c:b5:96:39:fe:c8:5a:03:8d:
                    10:ce:78:ed:c8:00:f5:57:2d:42:71:37:d4:dc:d0:
                    ec:66:02:2c:a9:38:7d:c2:85:aa:3e:e5:a7:2b:ea:
                    fc:c2:a5:5e:d1:f4:d8:7a:79:77:8b:52:9f:3b:8c:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:15:C0:EE:CB:FA:7A:B6:A5:6D:72:65:DB:6C:A8:7C:80:53:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/e8f25791-7f8d-3363-af48-c1f8f5c4b404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:62:a1:91:5e:ae:f8:e1:c9:76:8f:40:ec:56:8d:51:61:03:
         ed:21:98:84:a0:d0:44:ef:b4:5d:aa:b1:79:99:94:f8:91:32:
         c2:db:8d:b6:78:bd:8f:9a:f9:a1:6b:b5:bd:eb:81:33:9c:72:
         98:46:28:db:13:5c:e8:97:cb:92:6d:10:0e:6d:e7:c6:e0:84:
         63:06:18:a7:f3:8f:f3:0b:3e:03:8d:3b:8c:5d:b3:c8:6a:b1:
         4d:12:db:d7:13:40:8c:7d:ee:e3:25:76:46:92:f7:b1:9f:38:
         9b:ad:4f:b8:65:4f:1f:9f:54:8c:f5:ab:f0:cb:f5:28:ad:93:
         4f:6c:8a:d2:02:3a:00:8a:db:03:ac:6c:ee:e8:78:63:ab:f4:
         69:ca:38:0a:95:6d:ca:fb:cb:2e:aa:3a:1a:7a:34:6f:01:95:
         7c:9d:45:cf:cb:56:87:26:b2:b7:ef:5b:43:98:6b:cb:df:5e:
         1e:4d:66:18:c4:7a:e8:93:b3:5c:8a:61:9d:a2:18:82:20:3e:
         cb:c4:78:7c:cf:2e:c1:69:b4:87:87:c0:2e:f6:82:e8:e8:76:
         1d:a7:4a:d0:35:e3:cf:9b:d6:aa:db:a4:4a:6b:dc:04:65:ea:
         19:1f:9f:3a:7c:c1:50:82:65:7b:b8:28:05:6e:fd:81:e4:6b:
         89:8c:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 19:59:46 2024 by rpki-client on console-ams.rpki-client.org