Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0f452de4-c620-35a2-a444-a4c3e9b6f661.roa
File:                     0f452de4-c620-35a2-a444-a4c3e9b6f661.roa (raw, json)
Hash identifier:          2gU05ERNnlPj2+IakZvbRCFqKbC58uEn5jtMyCG9l3o=
Subject key identifier:   F9:58:1C:D9:94:F0:F9:9E:27:7B:06:FE:FC:1B:27:26:D5:73:33:2D
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858441185252284F68BF896F93680
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0f452de4-c620-35a2-a444-a4c3e9b6f661.roa
Signing time:             Fri 01 Dec 2023 07:36:09 +0000
ROA not before:           Fri 01 Dec 2023 07:36:09 +0000
ROA not after:            Thu 29 Feb 2024 07:36:09 +0000
asID:                     400536
IP address blocks:        163.123.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 08:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:11:85:25:22:84:f6:8b:f8:96:f9:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Dec  1 07:36:09 2023 GMT
            Not After : Feb 29 07:36:09 2024 GMT
        Subject: CN=5309de29-bad3-4fd0-bc3e-4d2909261f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:6a:a5:7f:19:a7:e5:e8:18:34:a0:d5:40:
                    d4:9c:87:0a:5e:82:d6:8f:ef:d7:50:f0:cb:b6:c4:
                    77:cb:c0:a2:83:75:97:33:be:a6:0e:fa:15:b5:50:
                    41:70:34:24:9a:68:d4:df:28:92:c5:e5:fa:bf:6c:
                    fe:a7:06:5c:35:d1:7c:58:f4:9c:d6:31:da:40:2d:
                    c5:f6:10:a1:0e:45:3e:b6:98:80:39:46:fd:ef:43:
                    c4:07:ff:fc:d9:37:a6:fa:b3:95:38:7c:9f:89:16:
                    df:ea:64:5e:2c:ac:2b:ab:2e:8d:58:62:43:ab:c9:
                    69:43:5d:e2:45:17:ce:f2:39:75:1e:54:10:7d:7b:
                    a5:57:d1:82:32:c7:7c:cf:4f:42:41:f8:b8:a6:1f:
                    ff:d8:95:8b:77:68:9c:eb:f0:9a:a5:7c:73:6a:3d:
                    c1:15:b1:e1:67:5d:94:b3:42:d6:a2:1b:3f:80:16:
                    93:c4:42:9c:eb:f4:f6:34:03:52:cf:0d:d2:4c:0a:
                    31:19:f4:a8:e9:1e:0b:68:fb:39:ae:5a:50:54:0f:
                    5b:be:c4:3f:7f:0e:98:a1:ed:9e:4b:2f:c6:b7:fd:
                    8a:e0:7e:0e:60:ca:be:d0:9b:11:eb:24:81:4e:68:
                    00:18:94:b0:c1:f3:9c:63:25:0e:5e:e0:e5:69:6a:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:1C:D9:94:F0:F9:9E:27:7B:06:FE:FC:1B:27:26:D5:73:33:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0f452de4-c620-35a2-a444-a4c3e9b6f661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:e9:4a:d0:6e:e8:c4:63:31:b7:34:28:78:96:bd:f1:a0:
         8d:a3:09:a6:39:84:34:8c:cc:9e:6f:14:35:1e:e0:ea:b5:00:
         75:7f:e0:f6:af:b0:44:ac:46:20:37:00:bb:36:1d:3e:90:04:
         6a:11:dd:06:37:cc:31:0a:08:b1:da:d6:a0:15:b4:bb:f4:f6:
         7d:87:37:d1:47:9f:76:ac:19:dc:f2:c7:26:69:30:34:d7:1e:
         b6:c0:76:a2:1d:20:cf:fd:7f:b4:72:67:0c:4d:d3:5c:99:69:
         8e:21:16:fe:35:92:f8:85:18:47:26:8d:80:98:b0:80:10:e3:
         e3:af:a0:20:4b:9d:61:cc:ff:c7:b5:7f:c0:90:87:70:85:24:
         f3:82:2c:fe:94:6b:4a:e3:6f:e0:7a:9f:19:d5:88:a9:b6:62:
         c9:46:c6:9c:43:cf:84:d2:53:32:8f:5e:8a:2c:e1:fe:87:6f:
         a3:a6:2d:bc:c2:2a:54:3d:65:53:07:3f:01:c1:99:08:af:f5:
         ee:56:6d:2c:3f:59:e3:fe:3d:b1:d8:a0:3b:4c:25:d2:68:2d:
         0c:08:ba:1a:2b:f8:db:72:09:07:19:51:40:4e:a9:17:89:ed:
         d1:92:c5:96:1d:1f:17:14:1a:85:3b:74:ea:89:a2:76:8c:f8:
         a1:b2:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 10:43:25 2024 by rpki-client on console-fra.rpki-client.org