Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8d500d62-1ccf-3e95-b243-997368112242.roa
File:                     8d500d62-1ccf-3e95-b243-997368112242.roa (raw, json)
Hash identifier:          v0MPXJXYssoblaqqNcXT31cQJ7kpXl5ZTnXLoYFO0jw=
Subject key identifier:   BA:B2:E9:C3:48:0F:2B:05:9A:AF:D2:E7:D4:73:FB:65:2C:7A:95:AA
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A15432FC08E9D1E80222E80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8d500d62-1ccf-3e95-b243-997368112242.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:43:2f:c0:8e:9d:1e:80:22:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=143115b2-2fab-4cd1-95ab-468c69c99c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:43:ef:ca:ea:6b:54:04:8d:fd:1d:0c:b8:
                    79:bc:06:6e:9c:1e:3e:01:1f:e6:df:24:c9:07:b9:
                    85:cd:35:3a:17:b0:20:5d:96:82:e0:89:81:21:d6:
                    c1:6c:b0:95:2f:0c:da:f4:e2:2b:cf:16:1c:29:7a:
                    8c:dc:be:27:8e:41:74:3d:71:75:b9:6d:31:47:08:
                    2b:35:d1:1f:08:63:9d:b5:82:89:d9:64:d3:9c:8a:
                    10:69:22:40:d1:00:3c:1d:48:ba:ea:cb:09:b1:c3:
                    2d:8c:a3:ea:00:71:4b:9f:f3:60:9b:40:f3:e0:07:
                    92:b3:db:dd:77:0e:a6:04:8c:97:16:e8:0b:ca:4b:
                    58:67:9c:54:0c:09:cb:bb:20:92:35:8f:46:bc:94:
                    77:d6:ad:e8:35:05:ad:41:28:c1:30:36:69:c7:cc:
                    28:f7:fd:11:9f:11:2d:1f:12:f9:1f:4d:e9:e0:6c:
                    11:bc:07:44:0f:1f:c7:e1:b8:88:e1:aa:05:ee:d6:
                    68:a8:0b:50:bf:26:0e:42:57:de:e6:63:55:1a:54:
                    00:e1:f0:94:70:4c:6f:77:3d:62:9e:e7:b7:b8:df:
                    45:62:e4:f6:7e:a1:72:41:d2:ac:79:57:50:1a:01:
                    39:3b:43:25:92:60:80:8a:29:f0:71:be:75:10:19:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:E9:C3:48:0F:2B:05:9A:AF:D2:E7:D4:73:FB:65:2C:7A:95:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8d500d62-1ccf-3e95-b243-997368112242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:66:6e:c6:62:6c:70:e8:b2:6a:20:c9:da:63:e1:3e:7a:
         de:58:ba:a0:35:d3:f7:01:40:98:a3:0c:53:30:9c:1d:12:2a:
         67:19:8e:0b:85:d4:24:99:f8:0c:56:69:0b:46:9b:96:65:fb:
         36:48:d9:5f:75:1e:fa:b1:bb:fa:a8:d9:22:11:21:8a:cf:e4:
         6f:fc:99:50:19:5a:a4:91:a0:a5:1a:46:82:88:ad:f4:18:67:
         01:0c:d8:58:d9:3b:5a:21:fe:2d:e3:9d:a0:2d:04:45:87:40:
         ba:5c:8d:d8:3a:20:a8:76:f8:0f:e7:4c:46:0e:59:e0:4e:49:
         85:ab:97:9d:0b:fd:a9:a2:a6:03:00:40:6c:f1:a2:ab:e1:b3:
         47:2a:2a:30:00:57:45:e7:81:d3:79:c9:aa:80:35:56:00:f8:
         e6:4a:bd:29:6c:e1:35:d6:24:7e:1f:0f:a8:65:4e:55:3a:fc:
         be:db:99:12:bb:a4:5d:b5:86:9b:e1:c6:c5:6c:13:55:4f:b2:
         ab:40:a1:14:2d:0e:95:fa:81:1b:ea:1f:63:a8:c0:17:af:f0:
         b5:01:aa:78:1e:63:98:93:61:5e:a9:63:7c:6e:c3:ce:b6:e8:
         b5:47:7f:cb:52:31:7f:9f:db:24:93:b5:3d:e7:90:e1:f4:12:
         68:49:31:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org