Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa
File:                     d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa (raw, json)
Hash identifier:          f8K3WZ07ZXd3J0lowHRMIwmzIjNNS7nmrSw/URLn/4s=
Subject key identifier:   82:66:43:09:5B:B2:BD:3B:CE:1D:02:AB:5B:78:D4:86:51:09:3A:32
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F432858442F2A482B4F02B06DBEE1F500
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa
Signing time:             Mon 11 Dec 2023 22:27:19 +0000
ROA not before:           Mon 11 Dec 2023 22:27:19 +0000
ROA not after:            Sun 10 Mar 2024 21:27:19 +0000
asID:                     271
IP address blocks:        204.239.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 20:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2f:2a:48:2b:4f:02:b0:6d:be:e1:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Dec 11 22:27:19 2023 GMT
            Not After : Mar 10 21:27:19 2024 GMT
        Subject: CN=a993e239-baee-42ea-9685-4d3e0192071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:28:6d:3c:dc:11:04:5f:be:ab:af:df:1e:
                    fb:00:73:00:63:12:ba:b1:28:7b:fa:67:eb:a2:c9:
                    c0:a8:fb:a1:5d:8f:3d:37:0f:b3:5d:b0:12:df:5b:
                    2f:60:eb:1e:fa:af:8b:03:a8:e7:88:cc:2d:27:5a:
                    89:ec:30:32:06:ae:a0:60:19:56:aa:de:ec:69:8d:
                    e7:00:b0:3e:11:cc:13:bb:6b:8e:af:f7:34:96:d5:
                    74:da:bf:de:31:fd:d9:58:84:c4:f7:d7:ea:ac:df:
                    6f:0a:6c:78:f8:98:d1:11:42:c3:a1:1d:26:9d:d6:
                    05:b1:07:fc:22:47:79:a7:73:2c:1e:6f:be:1e:14:
                    61:60:b3:28:77:41:d2:66:70:17:18:d6:83:15:95:
                    82:1c:dc:40:31:12:f4:8e:33:21:78:94:c9:bd:ac:
                    b0:f2:e5:c2:d6:f1:d2:3c:a7:a3:f7:bf:27:dd:2b:
                    36:d4:1a:12:20:3e:fb:2d:df:31:ac:60:46:fe:e6:
                    5c:95:80:ed:c5:f4:a6:84:59:11:45:49:fb:92:f4:
                    e9:8b:dd:8a:7c:ab:b3:c2:2c:f3:77:86:83:43:79:
                    43:2a:29:71:1d:22:13:b2:b2:ed:06:ba:4e:15:1f:
                    80:ba:1b:81:d3:a1:86:29:11:39:02:68:d5:ba:ee:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:66:43:09:5B:B2:BD:3B:CE:1D:02:AB:5B:78:D4:86:51:09:3A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/d849adc8-fe1b-3fcb-aa27-4000b959ce7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:30:d6:d5:a6:d7:a3:56:8f:ef:01:11:12:95:5d:86:ed:17:
         2b:19:d2:ec:1d:df:d3:40:c2:92:79:af:94:16:72:bb:73:a9:
         84:53:ca:13:fc:df:0b:8c:77:73:81:48:7d:db:e7:c6:96:a4:
         4a:d4:95:d5:58:85:d3:4b:f5:fc:2e:8e:55:f5:15:71:df:dd:
         5b:53:64:cc:18:3c:e7:fb:12:2c:8b:86:9a:58:6a:5f:08:2f:
         02:5a:b2:f0:99:d1:9b:19:cd:61:58:9c:86:fe:69:15:e4:3a:
         26:92:73:bf:b0:d0:b0:21:fa:0d:f0:80:f9:67:e8:7e:6f:20:
         a2:7d:66:e3:47:1e:0f:a1:d0:6b:9e:db:d7:fa:2a:cc:86:da:
         cf:bf:cc:c1:7b:07:b2:a5:b5:5f:c4:76:5d:00:24:aa:27:c9:
         34:1a:15:a3:fa:b4:3a:8c:b9:80:c8:ce:a5:86:30:3e:32:a8:
         4e:01:a6:ac:79:2a:b5:1f:24:27:fd:99:cb:82:4b:39:00:b5:
         c8:4b:c4:4c:31:ad:01:4c:53:95:75:61:96:2f:22:ec:22:49:
         a7:bb:bb:80:53:ed:f0:4d:44:4b:46:4a:27:a2:32:43:1d:6c:
         a4:09:a3:83:78:00:6d:69:11:1f:f8:98:69:f1:87:23:c2:fa:
         64:e4:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:34 2024 by rpki-client on console-fra.rpki-client.org