Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/518cc741-1cad-3fb7-864d-c612aaa484ce.roa
File:                     518cc741-1cad-3fb7-864d-c612aaa484ce.roa (raw, json)
Hash identifier:          Tewm8aykXJY940pDQPvWZubWoSMN9RvD5FUCZdSXc98=
Subject key identifier:   FF:82:AB:0E:10:67:19:B9:9D:CD:D2:AF:B3:67:60:D7:11:26:92:2A
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F43285844205522D32F5B46C5FEF3A340
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/518cc741-1cad-3fb7-864d-c612aaa484ce.roa
Signing time:             Wed 06 Dec 2023 14:56:33 +0000
ROA not before:           Wed 06 Dec 2023 14:56:33 +0000
ROA not after:            Tue 05 Mar 2024 14:56:33 +0000
asID:                     211849
IP address blocks:        66.245.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 21:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:20:55:22:d3:2f:5b:46:c5:fe:f3:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Dec  6 14:56:33 2023 GMT
            Not After : Mar  5 14:56:33 2024 GMT
        Subject: CN=41e29517-0e23-4cbd-93a6-934c75f1ba89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:83:3e:c9:b5:50:ca:1b:35:ed:d0:bc:e6:
                    26:b5:1d:ba:af:54:39:ff:87:00:b4:c5:e7:34:8e:
                    e3:74:e5:48:c8:6b:13:3c:32:10:9f:fa:6d:db:76:
                    cf:1b:41:5b:be:7a:d2:c3:81:7d:68:4d:b1:39:a6:
                    43:e4:85:6e:b1:c4:67:0b:f0:00:3a:1b:5b:78:15:
                    fb:b1:0f:12:bc:ae:f7:64:24:04:08:9c:5c:e9:d8:
                    94:cb:a4:f4:8e:e8:7e:1b:75:0e:c3:bb:00:45:8e:
                    25:80:60:6f:c4:bf:6d:82:61:23:8a:bd:a4:3e:9d:
                    47:cd:71:50:40:e7:43:b3:49:27:f2:6f:12:18:db:
                    55:60:b1:ba:f4:44:a7:0e:2a:e4:1c:28:de:f5:10:
                    34:52:00:de:10:70:a6:90:f5:bd:8e:66:99:56:76:
                    f3:c5:ba:f0:b6:e7:44:b9:5c:3d:52:df:5a:06:3b:
                    17:30:f6:0e:71:bd:eb:31:9f:43:89:d4:6c:4a:79:
                    2f:5e:f7:e6:d2:ba:00:88:2a:13:b1:3f:a4:f3:c4:
                    bb:74:ba:ae:8b:b5:3b:48:96:f1:cc:6e:b9:b8:81:
                    9e:9d:1f:bf:46:08:00:b3:4f:e1:a9:ad:ae:10:54:
                    c8:03:e7:97:05:0d:4b:1f:23:32:8f:57:22:bb:14:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:82:AB:0E:10:67:19:B9:9D:CD:D2:AF:B3:67:60:D7:11:26:92:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/518cc741-1cad-3fb7-864d-c612aaa484ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:52:eb:df:18:9a:88:46:aa:16:e3:4a:cf:6b:c2:f2:f4:
         32:d9:21:52:20:97:36:7b:4b:12:eb:78:17:f0:f9:73:01:85:
         0b:4e:53:8b:65:b4:f9:70:ac:3d:bd:c6:96:a8:bd:45:db:2f:
         b8:83:1c:b8:6d:0b:f8:7c:4a:78:dc:f4:b0:1f:8b:13:cb:7b:
         e0:38:68:fc:7f:f8:22:3a:96:d4:78:56:ac:e8:de:9a:5a:09:
         80:61:87:0d:4c:16:49:f5:db:93:6e:ab:e7:ec:90:8d:bc:b4:
         b8:d5:6e:b2:ab:13:e7:96:99:69:47:6b:24:26:ea:59:22:bc:
         45:b1:c4:5b:51:51:86:a3:17:7c:d3:e6:4b:48:1f:28:0b:ca:
         4a:e7:87:e9:cb:7c:b9:da:41:5e:97:86:0b:2e:6d:c0:75:27:
         f2:7e:c5:f7:10:3d:72:76:72:4c:56:18:15:83:7c:96:8a:46:
         75:9f:be:32:b9:af:22:7c:f3:99:80:62:7a:cc:d4:33:4b:7e:
         4d:4b:27:27:42:e3:82:e5:5d:49:da:73:0c:d6:f5:6d:48:ab:
         a2:e3:a8:97:c5:7c:48:f6:24:7c:2b:90:28:da:25:5b:bc:a2:
         f3:58:c1:83:4b:21:9d:d1:84:a8:27:50:04:a5:3c:29:54:fe:
         0a:c2:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 00:16:51 2024 by rpki-client on console-ams.rpki-client.org