Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78cdfa61-6c26-362a-ac80-1742842081a9.roa
File:                     78cdfa61-6c26-362a-ac80-1742842081a9.roa (raw, json)
Hash identifier:          s6p6Sy6zpygN3otlD2fSdnCvNRqJAQXvusB3ef3nZrE=
Subject key identifier:   07:AF:54:5E:87:80:E5:1E:E9:D1:B4:A9:35:E4:32:78:7E:8E:FE:BB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A1B192DC7F65E6615638040
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78cdfa61-6c26-362a-ac80-1742842081a9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1b:19:2d:c7:f6:5e:66:15:63:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=130e3e1c-b70c-4602-8039-566bc554a7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:c5:8b:09:4d:0c:ff:3d:5e:20:10:40:47:
                    66:ef:a3:95:d6:10:a8:a9:be:43:55:5c:1b:9a:2f:
                    8e:af:13:b4:22:ab:b2:9f:d3:0e:58:ab:9b:a0:a4:
                    52:94:e4:93:e3:e6:ae:70:2e:59:16:7a:e5:1e:6b:
                    b1:e6:21:f2:ef:e4:db:eb:dd:a2:46:36:58:8c:9e:
                    66:38:d6:38:72:5d:14:5f:af:8a:4a:58:7d:cc:ef:
                    5b:14:c5:ae:94:bb:1c:61:60:ca:35:e4:51:dc:cf:
                    6d:ec:ab:f0:9b:5f:ea:4b:b8:ef:79:70:28:aa:e7:
                    ad:e7:4d:7f:24:be:b6:e0:8a:33:c9:df:c8:ca:92:
                    34:cc:e8:d7:88:5d:eb:4f:25:a6:1a:51:69:14:a9:
                    a9:ee:fd:01:e7:dd:e1:ff:ec:a1:b8:02:fb:82:f8:
                    65:0d:63:ec:ba:af:45:ec:87:93:b7:d8:87:a1:14:
                    a3:bb:cd:e0:7d:51:2c:4a:b7:39:5f:c4:c4:f6:78:
                    db:0e:e8:5a:06:66:36:03:cc:10:d5:f1:23:b1:d1:
                    cd:85:b8:b9:58:61:43:21:c4:19:60:8f:d3:c2:90:
                    33:77:93:74:a9:e5:c1:f9:2c:85:b5:fe:da:bb:cf:
                    3a:a9:65:d2:11:72:14:f6:86:7c:e8:1d:ad:72:85:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AF:54:5E:87:80:E5:1E:E9:D1:B4:A9:35:E4:32:78:7E:8E:FE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78cdfa61-6c26-362a-ac80-1742842081a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:0f:f1:1a:4c:aa:52:af:f8:64:85:f7:a0:17:54:42:85:88:
         0f:54:b3:be:3a:d3:20:00:07:c7:7e:7c:22:75:40:eb:6f:c7:
         be:b4:e8:21:57:23:b9:c5:8c:2b:0f:1a:80:79:10:40:69:a3:
         a0:f4:15:71:42:7d:59:15:9f:27:ef:1e:50:cd:ec:38:04:56:
         15:85:d6:ac:ea:b5:6e:86:fb:5b:c6:bd:90:4b:57:35:ef:06:
         fc:b3:bc:0a:86:81:55:14:91:44:29:73:c7:2a:94:17:cd:80:
         d2:71:2a:33:98:cb:39:c3:cc:8f:6b:c8:a9:6c:84:97:49:cf:
         b8:7e:03:7f:5c:c4:45:5e:aa:5d:36:b6:a3:50:9a:99:8b:26:
         7a:ef:b5:c6:b5:05:dd:00:0e:31:d8:c9:c7:32:66:58:ca:38:
         21:00:7b:e0:c6:c7:0b:94:c1:e0:69:31:c2:25:dd:d8:4d:85:
         26:37:f9:59:60:02:31:81:bf:41:c8:3c:36:6d:0d:18:68:2f:
         b2:af:14:5a:75:b0:76:f1:ca:37:2f:81:03:f6:92:8f:88:bb:
         c8:39:00:dd:86:5b:d9:c6:be:ce:9b:06:84:2b:98:8e:71:a2:
         6f:2d:eb:03:91:a0:e0:dd:29:b8:eb:20:fd:1e:8e:c3:66:91:
         d8:1e:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:46 2024 by rpki-client on console-fra.rpki-client.org