Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa
File:                     81f83302-f378-3c04-84b3-a6e88d586690.roa (raw, json)
Hash identifier:          +hlxC48/ufOlvcaiOpMPpxxWCtwyh465HfT0+eEgRV8=
Subject key identifier:   6E:37:0A:3E:76:CA:62:0A:FE:C6:84:38:57:34:96:D2:03:50:54:DE
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584620644B34C001C1788571BD80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa
Signing time:             Fri 07 Jun 2024 01:00:24 +0000
ROA not before:           Fri 07 Jun 2024 01:00:24 +0000
ROA not after:            Thu 05 Sep 2024 01:00:24 +0000
asID:                     53356
IP address blocks:        72.14.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 13:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:20:64:4b:34:c0:01:c1:78:85:71:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun  7 01:00:24 2024 GMT
            Not After : Sep  5 01:00:24 2024 GMT
        Subject: CN=040052bd-dd01-4a39-aa8b-9f2c69817091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:85:4a:b7:26:ea:e6:49:bf:4d:08:93:9e:
                    3d:e2:79:3d:f2:dd:b7:ca:61:81:7d:70:91:ec:90:
                    99:07:c8:88:0e:b6:88:46:b9:02:83:8a:db:d6:33:
                    23:03:bc:17:ec:0f:91:ba:4b:4d:56:19:41:9a:f6:
                    0e:c2:09:d5:ae:a2:8d:96:a4:36:d1:66:6a:fa:8b:
                    70:c1:37:13:5a:31:ee:a4:14:a1:92:c0:1e:2b:2c:
                    2b:9f:17:e7:f8:44:d2:4e:6d:8b:a2:79:06:62:68:
                    a5:b2:c9:95:88:28:c1:b0:62:a2:4e:75:17:47:dc:
                    a1:bf:c3:37:c1:6b:ec:59:ba:40:5a:ec:32:ba:20:
                    a1:5e:5c:6c:24:d5:5f:4f:c8:cf:94:81:33:22:c4:
                    aa:23:5d:31:82:31:b9:ac:24:b7:76:07:cb:12:12:
                    ad:a4:77:6e:3b:cf:9f:00:7e:cd:93:4b:7f:bd:b0:
                    d9:18:f5:3d:3b:1b:02:c3:3a:96:8f:7d:c9:65:e9:
                    55:9f:a9:fd:28:1c:74:79:95:d5:30:55:95:e7:81:
                    9a:e3:75:f2:b8:43:29:60:5b:6d:73:36:db:34:5d:
                    82:56:8b:be:f6:28:d8:0b:5c:0f:f9:81:1f:49:30:
                    e2:14:3a:e0:67:fc:c7:fc:f2:fe:4e:43:c6:c9:7b:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:0A:3E:76:CA:62:0A:FE:C6:84:38:57:34:96:D2:03:50:54:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:62:b3:16:d6:0c:5c:92:19:af:56:40:81:88:57:15:d2:
         f8:6c:34:32:d1:fa:9a:37:8b:e8:3f:c3:1b:a0:00:2c:75:91:
         54:82:06:be:9a:d3:c0:c8:ff:8b:9d:64:35:44:40:d8:22:84:
         a6:aa:45:d9:4a:62:3e:a5:66:a8:7d:54:33:22:5a:31:36:6d:
         5d:d0:20:23:4b:4f:6f:d4:f4:9f:61:fb:03:d4:9d:af:a9:b4:
         65:a0:07:e3:8e:5e:56:30:3a:c2:69:79:80:e3:fe:e6:7e:5a:
         01:83:09:32:0d:0d:a7:63:55:19:a0:d5:9f:3b:26:7d:e2:02:
         c0:67:65:4f:a4:32:4f:ad:2e:34:72:ee:c0:cd:45:df:0b:d4:
         58:6e:43:77:50:97:dc:77:03:17:b7:b4:8a:57:5c:d8:fc:b0:
         e2:35:15:04:3b:d2:dd:5e:7c:2f:d0:2e:00:da:81:c6:61:37:
         69:9b:2c:09:c5:05:8a:93:4a:7c:27:f2:9a:d2:5e:fe:22:13:
         96:3d:65:d3:93:5c:84:64:87:d4:59:11:64:8f:b5:1c:3c:af:
         72:d7:c6:d5:b8:9c:5d:25:d7:7d:87:3a:a8:1e:d0:31:91:e4:
         75:5e:3b:60:dd:8b:a0:2e:c4:a7:77:5d:6f:f7:02:fa:78:62:
         3b:38:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 15:24:57 2024 by rpki-client on console-fra.rpki-client.org