Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9fea971-77b4-380a-8245-cab9ebd96ade.roa
File:                     e9fea971-77b4-380a-8245-cab9ebd96ade.roa (raw, json)
Hash identifier:          kjUhNi7XNUCQn+T7Mef/QmoxpBRDl0mM68elIZHtXjw=
Subject key identifier:   24:79:0D:9B:B5:03:B4:D7:66:EE:95:98:34:15:E0:5E:A6:BE:63:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858480B19E06400B0F3D3908D7F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9fea971-77b4-380a-8245-cab9ebd96ade.roa
Signing time:             Fri 29 Nov 2024 19:32:55 +0000
ROA not before:           Fri 29 Nov 2024 19:32:55 +0000
ROA not after:            Thu 27 Feb 2025 19:32:55 +0000
asID:                     834
IP address blocks:        50.114.208.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 17:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:19:e0:64:00:b0:f3:d3:90:8d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 29 19:32:55 2024 GMT
            Not After : Feb 27 19:32:55 2025 GMT
        Subject: CN=159f5d39-798c-4f5f-aa7f-cde42f903277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:b5:2e:cb:47:86:6e:34:fb:41:b1:27:fb:
                    56:6c:e8:18:3c:15:4f:7f:11:48:af:2f:24:5e:52:
                    ef:c3:ed:53:66:fd:4a:89:58:5e:58:09:46:e5:c7:
                    1f:14:63:ee:e5:4d:e1:fc:13:9f:6c:e7:03:82:7f:
                    25:a5:89:e0:bb:0f:86:38:28:82:39:3b:43:89:0b:
                    f5:61:81:28:c0:eb:d1:7c:f2:c8:2b:34:63:fe:88:
                    e0:01:6c:46:f9:34:bc:de:df:2c:ab:b9:12:9b:b8:
                    a0:39:ae:a5:5e:74:47:1b:70:5c:d3:8a:87:1e:9d:
                    76:31:4c:fe:12:7c:29:70:b9:b3:15:30:ab:be:20:
                    2f:3d:16:5d:2a:8c:9e:40:78:24:1d:16:46:38:47:
                    19:3b:f1:55:ec:e8:62:f6:c2:90:bb:ff:f4:01:2f:
                    2a:db:55:2f:1b:5a:3b:26:b3:b3:01:5f:bb:8e:74:
                    61:58:33:56:20:91:c0:91:c4:1c:85:27:3d:95:8b:
                    f1:ae:97:ee:4e:27:c0:a1:41:c7:5f:fa:b3:3f:0d:
                    ce:39:84:72:47:a6:f9:24:8c:e5:36:dd:de:e4:e4:
                    34:8a:8e:1c:6d:f9:32:b0:fd:51:95:25:81:c7:f5:
                    9f:ec:fe:ec:5c:b5:c8:72:a7:44:b2:11:cc:a4:15:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:0D:9B:B5:03:B4:D7:66:EE:95:98:34:15:E0:5E:A6:BE:63:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9fea971-77b4-380a-8245-cab9ebd96ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4b:75:45:fb:d9:51:c8:66:ee:ce:73:13:3f:e9:ab:b4:b6:
         c6:9e:b0:b4:0e:41:5f:1a:64:f5:0f:58:4b:8d:ed:7d:c1:78:
         1e:80:43:a4:80:8d:e6:d9:48:ee:2c:89:e2:74:4d:1d:d2:c1:
         cb:fc:99:e7:a7:01:ae:47:85:3d:8f:dc:1e:28:91:f3:25:6b:
         d7:62:90:a4:fb:3a:06:ca:82:2a:0f:48:90:15:d7:67:bd:ff:
         74:69:66:16:34:aa:27:b9:08:44:9f:cb:44:5e:e3:c5:dc:f9:
         54:c7:5c:51:90:3a:03:60:0a:7a:93:77:70:fc:73:bd:a0:44:
         28:54:98:97:7b:eb:dd:cd:5e:75:d7:31:fe:a3:bf:49:58:24:
         db:83:95:c4:0c:b3:df:d3:86:e9:8d:f0:83:32:ca:c6:ee:f6:
         20:4d:16:7a:fc:e0:e8:74:3f:9b:de:31:51:d4:99:f9:bc:09:
         de:6e:0d:61:81:1e:34:9d:41:a4:83:dd:77:2e:c6:e2:0c:0e:
         84:87:27:5d:9c:58:01:14:b8:87:93:18:e9:cf:f2:a9:f6:bd:
         c9:75:4c:17:fd:04:d0:6c:46:0a:6f:76:43:50:7c:66:7c:33:
         74:59:8d:5b:2b:4e:9d:9e:2d:4c:33:f7:f7:be:c7:f5:ba:c8:
         dd:e1:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client