Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203631333137.roa
File:                     3139322e3230382e352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          tr3W2PY8qApEoLTE2t7EsjdBry5+oV8LDDZTgV9r/sA=
Subject key identifier:   3E:DD:49:03:03:1D:B3:FD:E1:78:A1:3D:59:36:A4:56:C8:05:67:10
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6F57B4C6A7882748C76DA2F4E5CE90DF41E9C512
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 16 Aug 2024 10:09:28 +0000
ROA not before:           Fri 16 Aug 2024 10:04:28 +0000
ROA not after:            Fri 15 Aug 2025 10:09:28 +0000
asID:                     61317
IP address blocks:        192.208.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:57:b4:c6:a7:88:27:48:c7:6d:a2:f4:e5:ce:90:df:41:e9:c5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 16 10:04:28 2024 GMT
            Not After : Aug 15 10:09:28 2025 GMT
        Subject: CN=3EDD4903031DB3FDE178A13D5936A456C8056710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:f4:01:37:a0:bf:04:f8:71:4e:35:e2:14:
                    99:d5:be:bf:87:78:34:13:fc:e6:db:65:a4:56:58:
                    b6:e4:27:e9:da:26:cf:a7:93:d2:37:bd:11:ab:e0:
                    a1:6e:73:25:07:4e:c8:3c:2d:73:a3:d8:7e:b9:f0:
                    f7:8c:57:79:65:96:3e:f5:22:54:42:1b:6d:50:3e:
                    77:15:59:6e:5d:d1:d5:4a:00:78:13:c2:ee:91:1e:
                    0a:a6:44:49:66:89:4a:9a:51:82:5e:8e:06:1c:31:
                    66:47:a4:9b:95:1d:6e:6d:75:61:41:be:29:e1:40:
                    e9:bf:78:e2:de:95:05:32:fa:e0:98:75:73:87:8c:
                    6e:c3:3f:fc:94:79:fb:5d:b3:61:5f:0f:63:57:50:
                    6b:85:63:c4:8e:42:17:eb:de:b0:81:d7:bf:1c:fe:
                    82:ef:74:46:aa:35:5d:69:52:d0:7d:83:35:32:70:
                    fa:e6:eb:62:0b:90:e3:30:3b:62:6c:e3:4b:ca:d9:
                    29:34:f5:ef:23:ea:c5:07:fb:53:cb:4f:3a:a5:c6:
                    8c:bd:06:e2:12:f2:c3:95:af:4b:aa:7d:ed:8c:1a:
                    bb:0e:ef:a0:c8:a9:33:4a:5b:1b:6e:48:16:51:20:
                    58:52:03:53:ee:a2:04:e9:5a:fa:ec:81:82:a0:43:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DD:49:03:03:1D:B3:FD:E1:78:A1:3D:59:36:A4:56:C8:05:67:10
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:17:a6:5a:81:23:e3:b4:e3:4e:77:03:8b:44:17:ca:05:01:
         9b:04:eb:a0:65:f2:af:d9:c9:8a:0a:57:69:23:a7:9c:3d:08:
         34:e4:3c:1d:51:42:51:be:c5:20:15:15:b6:0f:b9:58:99:7f:
         0b:3f:32:e8:20:18:61:70:77:ee:d5:24:24:15:14:71:55:eb:
         97:5e:2c:ef:1c:71:2c:9f:c9:fd:26:05:9d:75:ed:64:58:8b:
         65:46:0f:8f:be:c0:2d:16:4a:f0:f8:f3:27:7c:e3:bf:26:0f:
         60:31:f2:91:f6:6d:64:70:9f:9e:62:4d:e1:48:33:62:95:7b:
         52:43:a1:29:d3:c8:db:b4:7e:1d:7e:9e:39:0c:d4:fe:84:83:
         41:90:d7:11:a6:1b:b3:73:83:27:a7:eb:db:a2:be:54:c5:03:
         00:42:f4:13:6b:c0:67:17:58:47:4b:5f:31:43:82:73:fe:d9:
         8b:d0:00:bd:b7:b1:38:f0:72:3a:a9:66:35:3f:a1:80:31:08:
         10:be:21:9a:29:e9:97:58:86:31:0a:b2:b4:48:75:de:94:22:
         b3:b1:f5:66:b5:18:9d:86:8e:46:3b:3a:c9:9f:25:8d:32:35:
         f2:8f:5b:45:f4:60:71:ae:82:34:15:64:5a:c6:81:ae:24:06:
         46:d6:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 02:27:45 2024 by rpki-client on console-fra.rpki-client.org