Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/9e91cd33-3511-317b-8da1-d9c31f1518d4.roa
File:                     9e91cd33-3511-317b-8da1-d9c31f1518d4.roa (raw, json)
Hash identifier:          s0RKPDQZ60J5TYLwmVqp9lAhxB66HL+OTSqfhuonJMA=
Subject key identifier:   2F:5F:1E:D6:38:6D:FB:33:87:72:52:71:52:CD:FF:75:9A:C4:1A:31
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328583F8E7C24DF1450984195E47E00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/9e91cd33-3511-317b-8da1-d9c31f1518d4.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 13 Feb 2031 05:00:00 +0000
asID:                     6128
IP address blocks:        24.184.0.0/14 maxlen: 16
                          24.38.192.0/18 maxlen: 18
                          24.44.0.0/14 maxlen: 16
                          24.146.128.0/17 maxlen: 17
                          24.188.0.0/14 maxlen: 16
                          24.228.0.0/16 maxlen: 16
                          67.80.0.0/13 maxlen: 16
                          68.192.0.0/13 maxlen: 16
                          69.112.0.0/12 maxlen: 16
                          47.20.0.0/14 maxlen: 16
                          74.88.0.0/15 maxlen: 16
                          74.90.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 19:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:7c:24:df:14:50:98:41:95:e4:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Feb 13 05:00:00 2031 GMT
        Subject: CN=0280345b-3207-4e07-a6c0-f2f80f05a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:02:f0:ef:c0:1c:b8:70:a0:d6:85:0e:33:
                    fd:ee:6a:40:56:b7:40:4b:5d:82:3a:ab:c2:98:35:
                    1e:cd:9b:af:6f:9f:a3:8b:db:f2:3b:70:7d:a1:0b:
                    9e:74:2e:d7:57:05:81:4f:32:b5:af:9b:bc:ee:6b:
                    37:b3:bf:4d:6a:7c:7f:6f:c1:b1:9d:4c:da:a5:86:
                    88:ce:c8:53:df:60:83:b0:c6:2e:04:ee:b6:c5:b9:
                    24:40:37:34:21:79:61:cc:94:ba:2e:9d:53:27:1c:
                    14:d1:7b:19:eb:bd:de:ae:8c:a1:66:64:d4:c0:7e:
                    c6:ea:44:09:15:03:44:66:9f:e9:d4:04:4d:0b:e7:
                    9f:59:ba:02:2e:71:be:94:2e:60:80:ed:e2:dd:b3:
                    60:a8:65:dd:2c:e1:bf:4f:e7:43:50:68:64:97:5d:
                    a7:e5:0d:ad:54:e5:fc:98:01:95:e3:3e:f2:3e:df:
                    55:ff:68:11:10:f7:45:5f:2d:c1:24:45:41:f6:63:
                    e8:42:42:5f:d3:f1:f8:e0:77:58:4f:89:22:4b:c1:
                    d4:0b:a3:6e:43:fc:62:f6:4e:1c:e9:93:8d:9e:9f:
                    0f:a1:ac:77:b7:21:59:06:68:36:ef:f1:ad:30:1d:
                    28:7c:52:dd:f1:fc:93:30:f6:7c:ea:26:c7:0e:01:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5F:1E:D6:38:6D:FB:33:87:72:52:71:52:CD:FF:75:9A:C4:1A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/9e91cd33-3511-317b-8da1-d9c31f1518d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.192.0/18
                  24.44.0.0/14
                  24.146.128.0/17
                  24.184.0.0/13
                  24.228.0.0/16
                  47.20.0.0/14
                  67.80.0.0/13
                  68.192.0.0/13
                  69.112.0.0/12
                  74.88.0.0-74.90.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:c7:98:57:76:85:7f:4d:78:39:7e:b7:65:2d:25:8c:cf:
         eb:78:76:e6:fb:37:f1:8b:90:2b:23:12:35:63:9c:87:c8:ec:
         f0:55:16:95:47:75:a9:b3:d7:76:d8:03:f3:8b:52:af:fd:b4:
         16:33:e3:8f:5d:8b:84:72:87:86:28:1a:73:92:4a:75:ac:a3:
         0b:26:d9:3e:b4:f5:8f:c4:0d:60:36:29:e5:32:55:2f:c6:59:
         8f:ea:ce:f5:f4:a0:d6:71:58:53:f5:88:7d:20:69:fd:65:93:
         60:fb:47:94:7f:e1:8e:a4:fc:e9:f1:48:cd:11:95:5a:e9:04:
         25:96:34:d6:df:99:fc:42:96:fc:66:ed:9a:21:ff:6d:8c:78:
         44:90:47:30:44:9b:3a:22:e9:93:45:18:88:c7:09:bf:1c:26:
         e2:d8:48:ef:84:62:d9:f2:cb:1c:df:25:78:c9:59:d3:ff:87:
         73:68:81:19:85:7e:76:dc:20:54:4b:b0:10:a6:91:e9:05:4a:
         cd:6f:d3:21:18:69:86:43:56:5d:e2:a8:f5:8c:0f:01:5c:86:
         f0:9c:b6:c1:14:1a:d2:7e:f8:db:6e:e2:80:4e:b1:8d:36:09:
         4e:fd:41:7d:a5:ac:20:1e:f3:2c:40:c8:8d:08:d8:b6:eb:b9:
         4d:85:de:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:50 2024 by rpki-client on console-fra.rpki-client.org