Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4b390f10-286a-353f-95f5-461a255bb4b5.roa
File:                     4b390f10-286a-353f-95f5-461a255bb4b5.roa (raw, json)
Hash identifier:          nPO7vtW4Qsj+JiGcUypC3xIyZUgFCKvlVd8y4b6Y4r8=
Subject key identifier:   87:58:5E:4A:28:45:4E:57:58:B3:7D:BE:44:F8:81:C9:10:BF:32:B6
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285846408F040D5970EC30439E6E40
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4b390f10-286a-353f-95f5-461a255bb4b5.roa
Signing time:             Tue 18 Jun 2024 13:32:54 +0000
ROA not before:           Tue 18 Jun 2024 13:32:54 +0000
ROA not after:            Mon 16 Sep 2024 13:32:54 +0000
asID:                     19905
IP address blocks:        160.129.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 21:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:40:8f:04:0d:59:70:ec:30:43:9e:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Jun 18 13:32:54 2024 GMT
            Not After : Sep 16 13:32:54 2024 GMT
        Subject: CN=47580f6c-4704-45c4-b2e2-bad7c5bb8fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:fa:3b:5a:4c:57:14:b4:e9:a7:3f:db:80:
                    89:46:b6:e8:1c:c2:60:08:62:53:fe:0f:ca:2c:e5:
                    3b:7c:7c:ce:9f:69:10:87:d2:6a:77:b0:35:ca:17:
                    82:1e:b3:f0:30:c0:05:ec:70:a4:f9:60:a6:ea:38:
                    ae:cf:20:8a:83:2a:03:dc:8e:47:68:c9:99:14:32:
                    86:8d:d6:32:35:e9:d6:b3:eb:0f:7a:11:2f:90:44:
                    43:cb:e9:e6:3d:b2:bf:eb:46:76:6a:70:3b:69:64:
                    a1:ee:89:3b:b1:bd:97:2e:3c:91:8b:87:b4:91:fa:
                    38:1a:a9:77:97:aa:8c:86:70:d4:e2:b7:3d:33:0b:
                    65:09:56:6f:8e:c0:c1:44:9c:40:21:16:1d:58:c3:
                    2b:8b:8f:07:e4:a5:69:38:94:e9:30:00:cb:d5:86:
                    ce:0c:2e:80:30:20:88:45:bb:fa:2a:fa:ad:34:1f:
                    28:8e:66:e6:7b:72:d1:84:5a:94:c1:c7:d9:c0:67:
                    49:f1:6d:2d:5d:dd:f2:56:2d:91:5f:24:6a:5d:e9:
                    0f:d3:57:b3:1d:3f:92:4e:a3:ae:91:2d:cf:74:68:
                    df:22:f2:82:a5:b4:15:c5:87:aa:8e:ac:39:0f:5e:
                    9c:85:26:16:fb:d2:b6:49:3f:77:ad:5e:0e:47:04:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:5E:4A:28:45:4E:57:58:B3:7D:BE:44:F8:81:C9:10:BF:32:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/4b390f10-286a-353f-95f5-461a255bb4b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:52:ae:d2:07:24:fb:67:53:95:16:4f:74:3e:84:f3:17:
         b1:c5:37:24:f7:8a:8a:e0:67:7f:70:2b:1e:fd:08:f0:00:e0:
         9f:6e:7c:70:b0:92:a6:51:ba:eb:08:55:e3:e3:ac:60:1b:e5:
         83:42:13:6b:40:9e:2d:ea:ba:ea:32:90:9c:37:71:8b:cc:02:
         ca:42:d9:db:cb:91:94:ac:f6:af:46:c6:40:78:d7:65:5b:5f:
         f0:c1:d5:5a:e1:0a:3e:99:d4:09:2b:d9:f3:78:32:cd:57:10:
         3f:63:74:3a:f0:81:85:d1:b2:ec:87:58:9d:ca:ca:77:6e:de:
         dd:01:34:d3:b1:f3:4b:6f:41:71:ae:ae:c6:73:98:cc:e5:10:
         2e:28:01:97:80:69:7d:1d:a8:2f:ad:f5:77:06:7a:15:e9:84:
         e1:7e:5c:4e:ca:a5:70:f6:48:91:73:d0:11:68:80:11:a0:86:
         7a:d7:27:f4:03:64:29:83:63:db:de:7d:d8:6a:97:21:fc:89:
         c6:ee:5e:b0:5f:f0:17:56:a9:16:24:41:e0:4e:9e:0f:54:ef:
         28:2c:bb:58:c9:d0:3e:ac:bc:91:0d:de:57:77:dc:78:b1:e1:
         d1:41:9f:6e:fa:ea:36:28:af:0b:14:d8:c3:01:32:2e:51:8f:
         c4:e3:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 23:12:46 2024 by rpki-client on console-fra.rpki-client.org