Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82b059ca-0a75-3449-a4ce-8524bfc3e3c0.roa
File:                     82b059ca-0a75-3449-a4ce-8524bfc3e3c0.roa (raw, json)
Hash identifier:          BVewmUi3OeKI/9V8fOKevfFcZV6y3SaAYAACqNHciUA=
Subject key identifier:   85:22:0F:6A:86:C1:8D:BF:D9:EE:C7:E4:25:02:45:62:85:6B:CF:B6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0484D6FBB4E3051A7A7600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82b059ca-0a75-3449-a4ce-8524bfc3e3c0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:84:d6:fb:b4:e3:05:1a:7a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8ab7a674-c8c4-4ff4-bf34-37a3f6ee3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:9a:8c:c2:9c:ee:84:ef:26:42:a4:a0:3a:
                    8c:bd:4a:e9:b2:18:46:39:2b:7e:a0:d3:d3:58:5a:
                    72:d2:a6:88:35:78:bb:c6:5a:13:77:b3:c3:dc:47:
                    f6:62:b3:d3:72:93:b3:cb:f3:63:1b:b1:2b:7b:b7:
                    c5:45:5a:15:72:03:a8:0b:fc:55:50:a7:f3:cd:45:
                    92:cc:6e:ce:16:69:4f:77:d0:2a:d2:97:ee:59:ee:
                    7a:c9:2a:45:ba:59:bb:3f:f3:12:2e:bc:1d:69:49:
                    ba:23:4d:ca:25:d2:c0:77:5c:5a:0d:6d:18:b3:03:
                    f5:43:c9:18:2c:5a:80:58:07:ed:98:a2:e1:0e:af:
                    19:ef:51:b4:27:b3:46:70:9c:57:46:61:f7:be:58:
                    75:c7:d3:41:f8:06:a9:fc:b4:f6:a5:61:e3:4a:73:
                    3d:b5:29:fa:fd:f8:08:65:5b:7e:99:cb:e8:39:93:
                    57:70:35:ef:73:a1:70:8e:b8:05:93:e9:7a:cb:d2:
                    1a:ab:21:89:be:0f:97:85:4e:2d:2d:d4:fc:87:c9:
                    ef:02:b2:6e:be:25:10:ab:3b:55:30:45:40:1a:80:
                    27:23:32:1e:d4:89:d0:7b:52:1d:c6:e6:a7:f7:a1:
                    79:bf:23:5b:02:dd:ac:18:0a:44:b7:e6:ac:b9:3f:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:22:0F:6A:86:C1:8D:BF:D9:EE:C7:E4:25:02:45:62:85:6B:CF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82b059ca-0a75-3449-a4ce-8524bfc3e3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:20:54:45:73:86:8b:01:04:ed:d9:f4:93:e4:a0:bd:63:cc:
         f7:e7:52:ee:99:aa:02:d3:c9:4d:85:2e:a6:37:2f:02:7c:aa:
         e2:df:b4:ae:fa:c0:6e:ca:ce:6b:a4:ee:2a:0c:2e:6c:a4:f3:
         f7:c2:aa:f3:d8:e6:76:c2:03:3b:d7:13:b9:54:23:03:d3:3f:
         6c:1c:da:aa:ce:cb:ef:22:f8:36:b9:ed:de:60:77:80:9e:69:
         41:1e:8e:1c:cf:8b:74:84:87:d9:ba:90:8b:b4:cd:36:b6:7f:
         d5:0c:96:b8:95:d0:78:e5:d5:d5:54:34:ff:39:26:37:83:ea:
         a4:4e:39:db:94:a5:15:7b:c6:2b:66:fa:05:2e:4b:03:d9:a6:
         94:59:c3:cc:52:79:b2:c9:89:3f:97:cb:5e:7f:a1:5b:3e:74:
         59:7f:f7:01:80:08:10:56:6f:65:56:ff:fa:9a:9a:8b:de:11:
         de:96:99:99:5a:4d:c5:8a:88:3c:20:ee:fd:6c:38:8f:8a:21:
         10:0c:10:62:60:07:a4:d4:4e:3a:f6:22:7a:46:19:dc:44:00:
         ba:71:13:29:a2:92:93:b1:a5:65:18:4f:b8:9c:c4:62:27:8e:
         b1:2d:c8:a9:1c:5c:4d:57:c4:6c:ab:79:b3:f4:bc:c0:03:07:
         53:3c:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org