Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/8c7cf02a-2489-3d44-86a7-47fda10eecd7.roa
File:                     8c7cf02a-2489-3d44-86a7-47fda10eecd7.roa (raw, json)
Hash identifier:          av5rqxgkWhOYMfCDLtgqZC+xvCMcvYLyiR8r7nO8BVo=
Subject key identifier:   E2:FF:60:2D:06:3C:63:49:01:FB:BF:74:9F:AF:1E:4D:D2:72:7A:D9
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F43285844743063F9833AC75434F59B00
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/8c7cf02a-2489-3d44-86a7-47fda10eecd7.roa
Signing time:             Fri 05 Jan 2024 15:50:24 +0000
ROA not before:           Fri 05 Jan 2024 15:50:24 +0000
ROA not after:            Thu 04 Apr 2024 14:50:24 +0000
asID:                     60117
IP address blocks:        104.193.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 07:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:74:30:63:f9:83:3a:c7:54:34:f5:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Jan  5 15:50:24 2024 GMT
            Not After : Apr  4 14:50:24 2024 GMT
        Subject: CN=75ebe8ad-9127-4067-935f-0e97fa25e91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:fc:8a:ac:c0:37:40:87:9b:9a:07:0f:79:
                    64:9b:79:a4:de:30:00:9b:8a:c6:b0:53:56:b1:88:
                    e4:bf:00:bb:a3:82:ea:ed:83:c4:55:2f:6f:13:9a:
                    56:78:51:8f:0f:5d:43:db:10:c3:2e:6b:66:9c:dd:
                    a2:63:90:a9:94:c6:a0:07:23:c0:89:2d:71:cd:7f:
                    9a:dc:f7:d8:e2:48:79:90:46:64:e7:85:5d:fd:a1:
                    e0:e1:8c:65:a1:84:78:dc:05:9c:f0:ce:20:87:c5:
                    d8:58:e1:26:88:f0:97:89:22:bf:53:97:ad:38:31:
                    27:49:c8:f2:89:e6:8d:e9:8a:f5:e5:4d:3f:3e:ab:
                    c5:96:0a:77:73:e0:1e:0e:5c:b3:a8:29:1e:6c:85:
                    fd:6f:b2:d1:ba:49:ee:5c:51:10:27:10:67:83:b6:
                    31:d3:d2:a4:7e:d3:da:ae:c2:c0:03:37:1d:b1:9d:
                    d2:ef:42:12:7a:b2:59:64:1f:ce:79:70:94:a7:48:
                    44:0d:dc:e9:a3:1a:4d:32:39:ec:e5:ed:d0:e2:2d:
                    bc:80:86:7a:3f:13:2a:31:26:f2:14:54:7c:41:bf:
                    f8:0f:ef:81:e4:1b:03:b8:1b:8f:7c:e1:50:5c:ab:
                    66:56:0c:81:b6:71:e6:ca:ae:2c:43:af:a4:64:29:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FF:60:2D:06:3C:63:49:01:FB:BF:74:9F:AF:1E:4D:D2:72:7A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/8c7cf02a-2489-3d44-86a7-47fda10eecd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:30:91:d9:4f:94:e6:69:9c:74:18:72:2e:55:56:7b:6d:1c:
         d1:99:14:fb:cf:51:e8:08:f7:dc:ea:7d:c3:b4:15:36:a1:b7:
         e0:b8:bc:5c:5a:18:6c:e0:34:df:ce:a3:58:fc:21:88:58:ad:
         d9:0d:85:a9:82:97:23:d8:a4:76:df:4c:c2:f1:c1:2e:6a:89:
         3b:41:ad:84:e2:34:b5:41:16:bb:da:88:f2:a4:00:5e:8b:7b:
         86:2b:2b:89:9a:95:ca:18:8d:8b:78:e2:70:22:d2:c1:2f:e0:
         68:db:a1:a4:38:7f:63:5b:03:59:b9:ad:70:3e:07:4f:37:6c:
         f3:63:f9:61:e5:ea:8c:94:63:b9:3e:60:d6:3a:56:45:c3:7e:
         4e:e8:16:36:37:e8:2f:9c:1e:02:44:53:50:e1:d1:36:24:a0:
         df:78:04:fe:71:af:1c:5b:07:89:05:ae:59:35:96:1a:eb:7b:
         ac:17:9b:0a:26:79:eb:21:cb:8d:96:ba:73:74:a3:19:36:be:
         8a:08:de:1e:dc:27:ec:9b:af:c4:db:ad:35:3c:d6:6e:ea:5b:
         85:2c:d7:f4:b4:50:e1:1b:d3:f0:1b:57:81:fe:43:20:cf:67:
         c4:d3:d5:c1:cc:fe:7e:df:63:dc:83:52:60:a2:c1:5d:2f:a7:
         f1:d9:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:48:31 2024 by rpki-client on console-fra.rpki-client.org