Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3e75ce84-3ab4-36ac-aa08-a07bb0621034.roa
File:                     3e75ce84-3ab4-36ac-aa08-a07bb0621034.roa (raw, json)
Hash identifier:          qhsyvLekphVf7woLDttQNxLsYa/voRkzcd0rKB2UwV8=
Subject key identifier:   92:CE:A4:FC:84:A6:F3:BA:49:0B:85:60:0A:BC:A4:6E:28:BC:37:24
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F4328584450723C16F9979DE205700600
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3e75ce84-3ab4-36ac-aa08-a07bb0621034.roa
Signing time:             Sat 23 Dec 2023 20:33:58 +0000
ROA not before:           Sat 23 Dec 2023 20:33:58 +0000
ROA not after:            Fri 22 Mar 2024 19:33:58 +0000
asID:                     212238
IP address blocks:        64.84.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 15:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:50:72:3c:16:f9:97:9d:e2:05:70:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Dec 23 20:33:58 2023 GMT
            Not After : Mar 22 19:33:58 2024 GMT
        Subject: CN=c1321248-a74e-416e-836d-3f2c77075abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:8d:d5:0e:af:53:f8:94:cf:4b:db:44:ea:
                    dd:e7:bc:ba:26:bd:1d:2d:4c:1b:2c:bc:c0:86:5f:
                    5e:a1:19:1c:5c:c8:e6:8a:04:fd:72:e2:34:da:ff:
                    e4:40:e5:1c:d3:17:cd:95:56:14:c9:27:d3:20:44:
                    a9:b3:77:65:b5:70:36:56:2f:67:be:2f:3c:9a:a4:
                    af:8d:ea:30:fd:77:52:b3:fd:0e:0a:af:b1:85:58:
                    19:fb:92:e1:78:a3:d5:1a:06:96:09:9e:cf:82:48:
                    32:2d:bd:0e:ec:d0:f9:f6:94:05:6c:be:50:e3:52:
                    73:7d:d7:95:88:07:57:51:98:b0:c8:13:6e:a9:a7:
                    65:e8:96:b2:cd:de:d4:66:8e:e5:87:fd:31:9d:1a:
                    e2:f0:f8:96:fe:a5:13:ea:a0:9b:9e:60:9e:4f:8c:
                    23:48:67:18:e9:21:97:67:3c:d3:cb:ca:26:f7:d1:
                    df:02:ef:24:c8:5a:f2:93:89:52:24:6a:41:41:04:
                    76:46:cd:a6:81:01:17:4e:74:02:52:15:ac:9d:29:
                    cf:a4:c9:7f:65:b4:40:da:bb:a3:1b:3c:39:9a:78:
                    f9:28:30:41:62:ee:99:53:e0:9c:47:48:9b:c9:55:
                    61:37:e6:cf:b2:84:03:43:48:03:95:a5:9f:c5:71:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CE:A4:FC:84:A6:F3:BA:49:0B:85:60:0A:BC:A4:6E:28:BC:37:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/3e75ce84-3ab4-36ac-aa08-a07bb0621034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:75:fe:ae:e2:f0:84:cb:67:a5:c0:5d:98:af:c7:aa:b6:
         81:02:3b:2d:64:6a:48:49:6f:d0:ca:e9:1c:5c:40:7a:2f:1b:
         44:e6:fc:63:df:1a:3d:29:26:82:e4:1c:1b:ab:e8:2b:94:fc:
         7d:56:a2:36:40:73:31:72:6e:5b:f0:d8:fd:51:64:d2:0e:49:
         cd:42:a3:87:b6:49:c3:8d:4d:b4:db:bd:44:11:00:78:2f:bc:
         84:43:a3:5a:6b:86:ca:83:d2:dd:31:d0:81:cb:a3:b4:e8:1d:
         f9:68:bf:31:e1:24:3b:8b:b7:2c:0b:ca:fd:4e:58:5a:17:c6:
         de:df:52:f0:2d:6f:25:ea:79:d9:35:bb:0c:d0:15:78:fa:42:
         99:60:f4:df:2a:a7:2c:89:2e:81:a8:ae:51:7f:7a:05:91:ea:
         03:fb:62:aa:59:c2:70:99:43:d9:f4:34:81:20:3c:e7:e0:1f:
         67:50:47:8a:7f:01:94:f6:f6:3c:bd:0e:f5:23:4a:aa:80:8f:
         1e:83:66:06:b4:64:7a:cf:ae:6a:e8:12:e2:cf:cc:7f:ba:b3:
         64:8c:5d:54:12:3e:14:22:f9:90:16:03:9a:33:29:3d:8b:21:
         ac:c7:75:69:6f:31:9a:cc:c7:e7:27:af:b6:b0:6a:a1:40:4b:
         5f:b6:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:26:25 2024 by rpki-client on console-fra.rpki-client.org