Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/b428b306-ef8c-31a6-bbef-c09f0a2bfe87.roa
File:                     b428b306-ef8c-31a6-bbef-c09f0a2bfe87.roa (raw, json)
Hash identifier:          x4mRwskFpk5ujbsHZ/kzV5FedCAziRutePFUJXhOvPw=
Subject key identifier:   05:A4:23:27:28:F0:1A:AC:14:37:97:14:CD:EE:13:3C:8A:0F:F7:2C
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F43285845119BB844A3F1E0BBCDDEED00
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/b428b306-ef8c-31a6-bbef-c09f0a2bfe87.roa
Signing time:             Sat 02 Mar 2024 01:08:34 +0000
ROA not before:           Sat 02 Mar 2024 01:08:34 +0000
ROA not after:            Fri 31 May 2024 00:08:34 +0000
asID:                     33296
IP address blocks:        66.187.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 09:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:9b:b8:44:a3:f1:e0:bb:cd:de:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Mar  2 01:08:34 2024 GMT
            Not After : May 31 00:08:34 2024 GMT
        Subject: CN=8f15aa14-2d9d-4c63-864e-35bd007c875f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:d8:e3:21:62:05:cf:5e:53:dc:8f:33:d3:
                    ad:b7:61:06:e7:69:30:22:8f:1b:bd:b3:92:73:1b:
                    f4:ea:8b:77:21:3b:05:0b:49:63:1c:82:2c:a8:0f:
                    5d:88:71:dd:2f:0d:ed:a8:63:5c:ed:e4:56:80:d0:
                    d8:89:5a:c2:54:6d:52:60:5e:22:9f:71:54:ea:f1:
                    6d:ba:01:3c:b6:52:28:81:08:59:b6:f9:44:e8:18:
                    7e:c9:31:58:21:d1:11:9b:31:86:5f:6c:48:15:81:
                    d5:af:ca:9e:bd:52:d1:d9:f5:5c:c7:a4:8e:7c:0d:
                    01:88:02:ca:17:09:cb:99:ec:52:6e:a1:d1:d3:db:
                    e2:05:9d:f5:cc:e0:c7:d0:58:0b:7d:84:9c:21:ec:
                    65:7c:28:35:ab:1d:ee:ae:0e:cd:9a:c0:29:8f:e8:
                    41:5a:9f:33:ca:77:75:a9:85:0a:ad:ea:05:0b:14:
                    c9:dd:2b:20:e6:66:08:c5:6a:64:56:bd:08:df:51:
                    d1:a3:3c:ec:4e:80:07:58:11:04:72:73:59:b0:6f:
                    f5:35:a9:14:d9:92:c6:d6:49:ff:a7:66:39:28:3d:
                    fb:08:7b:cf:2f:85:f7:1d:5c:78:f7:37:46:9e:63:
                    fb:a2:cf:98:96:f0:a3:1a:c2:a5:74:96:56:6e:29:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:23:27:28:F0:1A:AC:14:37:97:14:CD:EE:13:3C:8A:0F:F7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/b428b306-ef8c-31a6-bbef-c09f0a2bfe87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:23:2b:1c:5f:37:b4:41:9f:44:c3:87:65:81:15:86:93:67:
         be:d6:ea:5c:9c:52:32:ca:6d:53:db:ac:7a:76:a6:e7:15:69:
         61:f1:fc:0e:93:c0:ab:47:3a:2a:d9:6d:43:13:38:e4:48:9e:
         b9:6a:6f:59:bc:9a:f3:ea:fc:69:0a:b8:45:29:ee:6b:0d:34:
         26:e9:1d:22:53:c8:a6:8f:e0:29:fa:69:28:16:2c:60:21:b3:
         31:02:c2:b2:04:9c:ef:ea:e7:4f:96:fa:15:77:1e:35:35:e7:
         88:9b:09:af:93:72:75:1c:94:0c:11:3d:f7:2f:72:9d:8e:bd:
         0b:61:69:05:46:8d:07:7c:9c:33:60:ff:75:d3:d7:c2:e4:21:
         c0:5c:2c:03:88:0a:74:9b:1f:8e:2b:56:fc:cd:6f:6b:8d:7e:
         4c:15:38:67:58:3f:20:e0:2b:7f:01:0a:ba:c6:94:6c:e3:3f:
         1f:c2:8d:8b:84:64:f4:89:9c:24:1d:89:65:46:83:ca:40:90:
         d7:44:22:75:68:d2:ab:6d:2b:30:f8:ee:0d:3e:2e:da:7d:1a:
         c7:e3:cf:d2:80:63:ee:03:93:44:7c:aa:d4:b2:eb:51:e5:12:
         d2:a3:df:6b:13:82:75:bb:01:4d:8c:c7:cd:d3:2b:21:24:9d:
         05:46:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:51:55 2024 by rpki-client on console-fra.rpki-client.org