Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/afbb4675-158d-3484-929d-78ff296d7ee1.roa
File:                     afbb4675-158d-3484-929d-78ff296d7ee1.roa (raw, json)
Hash identifier:          0xd3d+V4+YowqgEpnkuw48jZBqUL+VZdLYSWE2odeY4=
Subject key identifier:   E6:D7:B0:C4:97:A8:CE:AA:9A:D3:7D:BE:41:BB:31:B1:6E:7F:EA:E7
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583CC746EB9B223C1D1AC214A700
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/afbb4675-158d-3484-929d-78ff296d7ee1.roa
Signing time:             Sat 22 Jan 2022 05:00:00 +0000
ROA not before:           Sat 22 Jan 2022 05:00:00 +0000
ROA not after:            Sun 05 May 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        161.199.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c7:46:eb:9b:22:3c:1d:1a:c2:14:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jan 22 05:00:00 2022 GMT
            Not After : May  5 04:00:00 2024 GMT
        Subject: CN=17a78808-f6cb-4719-83bd-9cd96d1cd751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:e3:58:1d:9e:ff:97:1f:f3:91:4b:62:ad:
                    88:29:58:24:d0:a5:e9:f3:7d:b0:8c:71:e6:6d:c5:
                    3e:66:f2:42:dc:e1:ea:de:48:5f:96:f1:c0:71:dd:
                    8d:e1:6a:9c:58:77:4a:7c:45:ac:ed:8b:05:a3:75:
                    3c:9d:76:90:1b:ac:5b:ce:1c:e1:1a:61:22:93:39:
                    42:16:97:52:eb:37:b7:53:e9:e8:69:65:2b:bd:32:
                    cc:37:3b:44:05:1d:32:d2:18:1d:5f:e7:93:f8:80:
                    97:16:59:e4:3a:59:7a:47:aa:e3:7a:d3:6a:52:31:
                    30:e0:d9:c9:af:d8:9e:36:1a:be:7f:36:31:d0:35:
                    7c:d2:b9:45:05:17:07:dd:22:6e:9b:83:bb:93:bc:
                    88:10:60:55:70:b6:92:fc:44:81:a9:ca:84:2b:0e:
                    94:02:07:76:35:3a:cf:60:1e:18:06:35:fb:75:50:
                    ce:e1:5b:00:0e:71:40:a9:52:0d:2b:8c:93:06:22:
                    57:c5:1c:d4:8c:29:ca:c2:9c:76:14:1c:a6:ac:6d:
                    c9:ae:12:92:9c:63:63:8e:87:6d:53:9a:0d:1c:62:
                    5a:29:50:21:dd:2d:d7:6b:78:cf:9e:c8:ec:82:95:
                    bc:de:68:67:fb:00:2e:3f:4c:45:3a:c9:83:96:17:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:B0:C4:97:A8:CE:AA:9A:D3:7D:BE:41:BB:31:B1:6E:7F:EA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/afbb4675-158d-3484-929d-78ff296d7ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:32:46:3b:82:8d:df:19:f8:de:b1:20:0d:72:ee:2b:1c:8b:
         2e:06:33:4e:ca:03:0e:ee:ef:d1:3f:21:b3:0d:91:1b:d4:1a:
         64:ac:bd:b8:2f:8a:68:02:7d:31:a2:f3:52:d3:4a:93:82:d8:
         51:bc:cd:a7:6d:dc:a9:09:b0:60:d3:26:eb:24:6d:1e:2e:39:
         0b:59:eb:fc:8a:25:58:d2:c6:32:5b:d6:fd:46:16:17:60:fd:
         d3:6c:00:a8:f6:48:a1:aa:e3:95:51:be:6a:f8:c9:ce:52:94:
         a1:8c:07:f5:3f:74:2a:3a:d4:47:0e:26:57:1b:77:51:ec:cf:
         d4:2e:15:79:48:2e:c3:9e:fe:88:c6:ad:b3:84:4b:6a:a4:a0:
         03:52:84:c9:b8:ac:6b:d7:09:16:f4:48:e0:dd:9a:28:0c:79:
         83:6a:d5:61:4d:d9:83:1a:61:47:81:29:bd:ca:8f:08:35:01:
         2e:51:ec:83:1f:87:5a:9f:a2:95:ea:50:01:85:8c:04:94:42:
         a5:23:f5:a0:5c:0d:04:f3:d7:9c:3f:56:fa:28:12:d4:3a:a3:
         cb:19:89:96:b4:c2:e5:ca:b1:c3:5a:82:ca:c7:8e:ad:dc:69:
         6b:d6:8d:80:f7:2f:b1:97:83:91:4e:b0:ac:c6:fd:dd:cb:96:
         e4:d8:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:45 2023 by rpki-client on console-fra.rpki-client.org