Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0b5b383f-6c6a-34f1-915f-2ce47c06b169.roa
File:                     0b5b383f-6c6a-34f1-915f-2ce47c06b169.roa (raw, json)
Hash identifier:          hc31K0sVhVxw9iMRUQNqiZIVTyMm3UNu2GtgYcmCFaI=
Subject key identifier:   79:38:5B:59:FB:5E:29:DD:8E:57:97:0F:01:B1:29:3B:0A:1F:15:B1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858451A18DF350CC2C413C6FB7780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0b5b383f-6c6a-34f1-915f-2ce47c06b169.roa
Signing time:             Tue 05 Mar 2024 02:07:12 +0000
ROA not before:           Tue 05 Mar 2024 02:07:12 +0000
ROA not after:            Mon 03 Jun 2024 01:07:12 +0000
asID:                     834
IP address blocks:        67.227.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 19:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:18:df:35:0c:c2:c4:13:c6:fb:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 02:07:12 2024 GMT
            Not After : Jun  3 01:07:12 2024 GMT
        Subject: CN=bae2e3be-bdfa-4f98-8e16-d1883dc4b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:3a:6c:af:a1:f1:95:72:72:78:02:d3:32:
                    72:b0:e9:2e:eb:62:2d:94:29:8d:21:7f:6d:19:33:
                    e5:78:61:78:2b:77:dd:35:53:04:18:0c:ed:d6:67:
                    f8:98:3a:9d:f2:d0:cc:4f:63:60:fc:fb:c5:e1:c5:
                    a1:7f:25:cf:e4:65:50:67:30:2d:19:f2:4a:95:ff:
                    4d:d3:95:37:98:83:75:69:9b:fc:2e:b7:92:ac:e0:
                    91:ce:14:54:3b:5f:07:e8:4d:ed:d6:ab:fa:49:24:
                    5f:26:d4:62:0c:cc:9e:8f:e1:7a:14:e9:99:6d:f3:
                    9a:5a:6b:20:6a:f0:68:22:2b:0d:f2:fd:89:60:8a:
                    ed:d1:4d:3a:b6:35:f8:ab:60:98:35:bf:ce:ce:3f:
                    7f:a7:f3:8a:0b:0c:01:7d:66:8b:e6:02:59:99:9b:
                    3c:8f:a0:40:74:69:35:ce:9f:ac:6f:14:c4:94:7f:
                    b6:4b:bc:c7:89:62:18:1d:4e:f4:3b:15:2d:c1:82:
                    f2:ff:19:64:a8:c5:08:46:3c:70:43:8a:07:2e:64:
                    c7:d3:b9:b5:66:42:c0:ed:34:c7:3a:24:e4:ac:2f:
                    0a:03:71:8b:6f:8b:31:51:50:fa:46:39:6c:e7:b0:
                    5c:d9:94:7a:b7:5e:da:60:70:19:56:ab:60:8f:37:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:5B:59:FB:5E:29:DD:8E:57:97:0F:01:B1:29:3B:0A:1F:15:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0b5b383f-6c6a-34f1-915f-2ce47c06b169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:23:89:fa:c0:83:f2:6a:47:1a:13:ae:d4:b7:f8:92:00:
         20:07:a4:1f:4f:ed:35:5f:25:b0:e1:6d:f1:58:c4:af:55:65:
         2b:56:4c:2e:d4:be:6b:6b:67:f8:19:1d:b6:04:bf:3a:6a:0f:
         3c:18:fb:d9:5c:b9:77:c8:6e:42:f4:e6:f1:2e:d2:d5:21:b4:
         a4:84:6a:15:3d:85:99:cc:8c:cb:d7:4f:26:a8:e0:59:de:bb:
         a1:09:37:4a:10:8f:a2:5f:e3:3b:91:20:00:72:72:6b:11:a4:
         9d:3c:b0:8f:ac:7c:a9:ce:d7:ca:b4:44:7a:e7:c9:c6:fe:ea:
         5d:00:b7:d8:d5:c2:54:9b:d1:1b:40:57:9e:24:1e:47:86:74:
         db:ac:78:b2:c9:29:b9:c4:b4:67:3b:ee:c6:87:7e:16:43:a9:
         b5:0a:f3:da:6e:73:6b:14:07:c8:2f:87:f6:20:87:0a:30:c5:
         0d:34:dd:6b:61:74:e1:68:df:6c:6b:9b:f9:d9:8c:60:70:63:
         90:d4:f6:17:fd:cc:3e:8f:61:40:59:ed:f7:43:2a:0a:bb:46:
         a6:aa:47:2c:2f:b0:a8:96:7a:97:e1:28:94:93:32:14:97:73:
         62:33:4e:20:6c:97:cb:3e:af:2e:d8:47:7c:6d:ed:a5:94:f1:
         1f:21:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 20:51:45 2024 by rpki-client on console-fra.rpki-client.org