Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6fe85105-5962-32e7-a6fd-0924eb259f88.roa
File:                     6fe85105-5962-32e7-a6fd-0924eb259f88.roa (raw, json)
Hash identifier:          R78Cxxvs5G2anmVYe9HKY/aWRmb1pUlyfBEdl6v6WpY=
Subject key identifier:   93:7D:E4:C2:48:E8:C7:9D:34:06:2C:26:17:69:EA:D2:6A:4A:ED:7A
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285845909DEF38C29BA4636D05E8E0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6fe85105-5962-32e7-a6fd-0924eb259f88.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     23470
IP address blocks:        128.254.145.0/24 maxlen: 24
                          128.254.144.0/24 maxlen: 24
                          128.254.147.0/24 maxlen: 24
                          128.254.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 13:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ef:38:c2:9b:a4:63:6d:05:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=eadecfcf-d1ff-4f75-844a-c50ed49df670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:2b:dc:a8:1e:fd:07:3d:c1:c0:4f:c0:2a:
                    50:b9:6d:44:34:6d:91:c6:b7:2e:af:5e:73:e3:44:
                    03:6e:0e:39:82:9b:15:cb:df:c3:9c:79:aa:b2:4a:
                    f5:9e:5a:f8:99:02:08:15:34:5c:b5:09:2b:d0:88:
                    ea:6f:3d:1a:cd:c8:c3:75:90:d9:32:e6:23:73:ad:
                    38:db:3b:73:f2:d5:34:6b:19:51:9d:92:e2:ed:0b:
                    3b:a4:96:4c:a7:55:1f:bc:42:fa:f0:4e:bf:e6:0f:
                    c9:df:c0:0c:96:0c:62:55:f7:81:72:19:a8:ca:e8:
                    2a:53:4d:5c:61:10:e6:70:29:95:84:f2:3a:70:dd:
                    d6:c8:81:df:2d:15:57:a0:7a:d9:b9:33:e1:2b:e8:
                    7b:cb:b9:62:58:e9:6d:d7:1c:82:c6:09:9e:c5:42:
                    2f:24:8a:f6:4d:0c:43:7e:f9:08:f5:e0:8f:dd:53:
                    b1:76:31:55:75:53:46:b5:ab:9c:ef:52:dd:7e:71:
                    63:0b:60:bd:71:fe:bc:57:54:96:50:f7:fd:32:3b:
                    96:7d:08:58:7c:c9:09:a9:ae:44:98:5e:a6:c9:9a:
                    a3:d7:7f:62:8f:bf:45:e7:58:9e:67:e7:3a:b1:7f:
                    58:79:d7:c9:f2:56:19:36:df:e9:80:90:96:10:a6:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7D:E4:C2:48:E8:C7:9D:34:06:2C:26:17:69:EA:D2:6A:4A:ED:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6fe85105-5962-32e7-a6fd-0924eb259f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:02:60:7e:e5:42:91:ff:67:a7:5d:78:e8:a0:92:6a:83:92:
         c3:fb:4b:19:4e:0f:c9:b2:bd:fe:63:89:93:30:fe:81:35:11:
         44:55:3d:56:b6:6c:35:b3:59:40:f7:30:ef:a0:f3:5f:7b:d7:
         99:fc:ae:96:91:ad:1f:50:34:46:db:4b:ee:85:b9:f1:4f:25:
         f5:ec:29:74:18:d1:a1:c3:d7:17:8f:61:da:4c:ba:55:bc:63:
         d7:0c:a9:94:8b:da:c7:46:7a:f9:e3:bf:aa:32:ef:97:0e:49:
         77:e2:c2:1a:35:38:4f:4d:aa:94:50:9e:af:53:10:c6:fd:28:
         91:6a:7a:7f:45:7b:16:02:f8:4c:65:8e:4f:5a:55:53:f6:7c:
         b6:16:f2:52:74:8b:fc:77:50:36:82:2c:41:01:13:67:ee:15:
         db:c8:5c:7a:a6:19:3f:13:d6:dd:48:72:5a:55:1a:fe:09:e3:
         fa:8d:0e:69:3e:5e:60:7c:bb:32:7d:d1:4b:85:65:99:92:92:
         29:a1:9a:30:fd:dc:3d:0d:78:49:64:25:df:64:d5:fe:a1:5e:
         d9:af:cc:4d:d0:4a:20:9b:23:e7:73:4c:39:0f:c4:39:a7:33:
         92:21:e2:6f:c2:84:18:8a:46:b1:dd:37:10:8a:ab:4f:4f:54:
         3d:70:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:37:48 2024 by rpki-client on console-fra.rpki-client.org