Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/351e3748-b958-3104-8251-179425010f99.roa
File:                     351e3748-b958-3104-8251-179425010f99.roa (raw, json)
Hash identifier:          Oq7B1eCWWTwR+lMLR2jJ/pFfH7E0PBQ9nwcppp3q2Nk=
Subject key identifier:   91:3E:F0:B5:A7:ED:7E:31:9E:94:91:24:37:46:58:36:68:45:EC:2C
Certificate issuer:       /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial:       010D0C9F43285846BE1FF0CADD4E9BF120151A40
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/351e3748-b958-3104-8251-179425010f99.roa
Signing time:             Fri 02 Aug 2024 13:00:39 +0000
ROA not before:           Fri 02 Aug 2024 13:00:39 +0000
ROA not after:            Thu 31 Oct 2024 13:00:39 +0000
asID:                     150698
IP address blocks:        23.142.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 16:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:be:1f:f0:ca:dd:4e:9b:f1:20:15:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
        Validity
            Not Before: Aug  2 13:00:39 2024 GMT
            Not After : Oct 31 13:00:39 2024 GMT
        Subject: CN=b2da6e1a-0d6b-4124-b817-d6cac59abac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:44:a1:6e:5d:0f:f8:dd:f7:7c:ec:71:b9:
                    ff:ec:8b:b5:47:be:53:a7:07:a9:a8:f6:c6:bb:c8:
                    97:bf:4f:52:fe:31:8a:88:32:5f:35:8d:d4:d8:95:
                    0c:09:71:fa:ad:5d:7a:f3:33:55:b0:df:d3:07:f4:
                    36:d5:7c:ca:46:1e:04:06:d8:a4:72:fe:be:40:87:
                    4d:af:3d:8f:21:ff:89:44:55:85:2a:d0:a2:f8:ea:
                    8f:68:6c:14:86:8b:d6:c5:eb:12:00:43:ef:dd:f5:
                    7d:db:31:03:db:78:b0:c1:9c:9e:dd:4b:d1:d9:7e:
                    fa:22:7d:4c:24:9f:d9:ff:d1:d1:c3:3d:2b:15:63:
                    f1:13:f3:40:d2:d0:b3:36:8c:b7:fa:04:da:35:4a:
                    fa:29:9d:09:81:c0:1e:f1:99:c8:fe:dd:a2:95:56:
                    17:c7:89:f0:0d:f8:97:d5:03:64:61:d7:e0:92:2a:
                    2d:22:95:b5:66:67:ea:67:9c:40:73:69:ab:4a:51:
                    20:bd:ee:22:d6:72:64:ef:17:28:1f:95:01:56:db:
                    2a:f8:b0:00:1b:80:f5:a6:06:83:dc:1d:e2:ad:c8:
                    b7:a7:67:20:8f:be:0c:2d:94:89:75:33:bd:b6:fd:
                    4d:ac:07:e7:34:8e:c2:b8:0f:01:5c:36:fa:b7:f6:
                    43:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3E:F0:B5:A7:ED:7E:31:9E:94:91:24:37:46:58:36:68:45:EC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/351e3748-b958-3104-8251-179425010f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl

            X509v3 Authority Key Identifier:
                keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:87:e7:13:73:a4:54:e0:1f:41:1d:3a:d4:b2:fe:7f:c9:51:
         7c:cd:a9:ff:e0:d2:a0:cd:ee:98:bf:64:a3:67:db:98:57:ab:
         2f:dc:2d:aa:8a:9e:3f:89:d3:f0:32:d0:37:82:71:bf:7d:02:
         af:0c:19:20:3a:64:7a:af:5b:02:55:22:ca:2a:a7:fe:30:9d:
         d6:59:c3:de:d7:d3:bd:4b:1d:84:54:10:85:62:bf:93:0c:48:
         9b:aa:25:c6:e0:28:87:34:3f:49:6d:3c:2e:21:bd:f3:6c:4a:
         9b:e0:7b:81:8c:9b:ef:20:60:f4:ae:9e:7c:f3:28:84:f2:53:
         52:91:a2:0d:84:e8:1a:53:b6:0d:36:2b:5d:98:0d:80:5f:ed:
         9b:11:08:9b:7d:4d:03:64:9b:b5:40:1d:22:47:88:3e:e0:7f:
         56:d4:a1:0a:ef:b4:4a:31:fb:2a:bf:ec:00:e8:88:b7:a2:ad:
         da:07:93:ca:c6:a9:27:71:2f:16:ba:f4:1b:36:c3:5b:69:59:
         1b:c0:4a:c2:c0:92:3c:32:3a:1c:bb:af:60:5f:e6:17:7e:72:
         8e:de:63:0e:ec:f1:a8:57:5b:05:0b:d7:01:ce:fe:ff:ec:4c:
         6c:ca:ff:43:bd:9d:31:cd:4a:f8:11:39:80:15:94:07:95:19:
         4b:34:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 19:52:41 2024 by rpki-client on console-ams.rpki-client.org