Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/065189d0-fc4a-3346-b9cb-deacc9c73c87.roa
File:                     065189d0-fc4a-3346-b9cb-deacc9c73c87.roa (raw, json)
Hash identifier:          vZ2DU9av06Ke6xNBSvUPYXXJdHD5Hhl8SDJ9xZue94E=
Subject key identifier:   58:45:B7:C4:E8:7E:23:83:4C:AB:E4:A3:9C:9A:7B:32:D8:CD:C0:44
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F432858429D73BCD096B1709D9DAB0200
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/065189d0-fc4a-3346-b9cb-deacc9c73c87.roa
Signing time:             Fri 21 Jul 2023 01:00:17 +0000
ROA not before:           Fri 21 Jul 2023 01:00:17 +0000
ROA not after:            Thu 19 Oct 2023 01:00:17 +0000
asID:                     35913
IP address blocks:        23.133.0.0/24 maxlen: 24
                          202.5.29.0/24 maxlen: 24
                          202.5.27.0/24 maxlen: 24
                          162.245.221.0/24 maxlen: 24
                          202.5.24.0/24 maxlen: 24
                          104.128.232.0/24 maxlen: 24
                          45.58.59.0/24 maxlen: 24
                          23.133.3.0/24 maxlen: 24
                          23.133.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9d:73:bc:d0:96:b1:70:9d:9d:ab:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jul 21 01:00:17 2023 GMT
            Not After : Oct 19 01:00:17 2023 GMT
        Subject: CN=e6aab847-1ea1-42ea-904a-09fabd6a822d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:b4:fd:89:d0:a3:3e:22:69:ee:83:da:c0:
                    a1:94:e4:fe:25:05:86:ed:91:48:4b:98:b6:38:a1:
                    6d:56:a9:5e:77:c8:33:7f:fb:59:38:13:8c:26:4a:
                    35:5c:e4:c0:18:29:fb:d6:d4:90:85:f5:ed:0f:0d:
                    7d:30:11:59:ed:0a:1f:c8:fc:6e:bd:c9:39:44:79:
                    eb:5e:02:f2:55:15:d1:bc:12:63:f3:11:22:04:12:
                    10:22:5f:0e:94:8b:45:78:46:00:3b:62:36:c7:22:
                    9b:cc:ac:3e:e2:ca:22:5d:34:32:6e:9c:4b:26:8b:
                    d5:0f:6b:6f:db:af:3b:c3:d0:88:5a:0b:eb:5d:a6:
                    99:43:3d:03:04:11:dc:fa:bd:3b:46:90:71:53:ce:
                    79:90:f7:7d:f8:75:cb:ea:6c:3a:55:92:7f:bf:ad:
                    11:1a:34:3a:36:9b:52:9a:da:82:a2:c8:5b:bf:dd:
                    64:6e:ba:ce:f3:cf:a9:35:74:e4:f9:10:1f:89:7a:
                    b8:e7:f7:23:91:63:f9:75:48:69:22:c9:01:ec:46:
                    e5:f3:e6:17:15:37:ed:9e:b0:ec:b7:83:be:d3:cb:
                    42:b1:eb:bf:93:2c:12:48:6f:97:a9:a8:22:31:a7:
                    1c:16:d1:d6:5e:c5:56:55:2d:8a:a6:87:ac:dd:09:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:B7:C4:E8:7E:23:83:4C:AB:E4:A3:9C:9A:7B:32:D8:CD:C0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/065189d0-fc4a-3346-b9cb-deacc9c73c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.0.0/24
                  23.133.2.0/23
                  45.58.59.0/24
                  104.128.232.0/24
                  162.245.221.0/24
                  202.5.24.0/24
                  202.5.27.0/24
                  202.5.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:a5:89:54:fb:4d:8c:ba:de:31:d9:31:b3:c2:24:91:f1:
         8f:d2:05:43:fb:6c:97:c9:c7:99:7e:57:4c:d9:2e:34:d2:8f:
         2f:fb:7e:c6:25:bc:68:4b:03:14:9c:3d:cc:cf:e7:32:fb:2a:
         7d:2f:0b:3e:29:43:0c:a2:a5:e0:4d:24:09:75:9b:b8:f2:8a:
         fe:c9:06:29:26:0f:ae:26:e5:d5:10:62:f3:e6:a1:e0:6f:ea:
         85:fb:93:c8:9e:6b:ba:f0:e8:c3:a1:65:bc:3b:d4:88:ce:06:
         b1:ce:3d:58:9a:db:2a:82:2d:98:ca:0d:2d:a4:6a:e0:7c:74:
         0d:ee:da:75:fa:ce:e1:d9:b0:40:fb:89:ca:39:c1:5d:a2:6e:
         68:8b:c9:89:c9:0d:e4:a5:79:ea:7d:2c:f0:07:8a:15:32:d5:
         08:59:eb:e8:bd:03:88:f6:6a:60:a6:6a:8a:8c:be:f8:77:10:
         c1:3b:b8:b6:dc:cc:32:07:a5:33:c2:90:f6:d7:5d:ba:a0:f2:
         2d:e1:47:03:b2:df:61:7c:42:ff:96:5c:6b:d6:b7:7c:57:ef:
         3d:4f:bc:56:b6:0d:58:11:c8:ab:83:16:9a:fc:b0:cc:a9:3b:
         cc:40:3c:4c:ee:13:8a:59:eb:70:8f:79:d6:8c:80:0d:b6:b0:
         59:49:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 18:00:06 2023 by rpki-client on console-fra.rpki-client.org