Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0155cc06-235e-3819-9e59-6489ed681cb8.roa
File:                     0155cc06-235e-3819-9e59-6489ed681cb8.roa (raw, json)
Hash identifier:          xTuu2d1LXyzW7Q33JRN3AI79OhKKIuQwbvA5zwKtELk=
Subject key identifier:   45:EC:23:B5:05:D0:D9:0B:48:42:D7:D4:B6:7B:5C:F2:00:A8:B1:D5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0CE8DA96E87C56F1191200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0155cc06-235e-3819-9e59-6489ed681cb8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:e8:da:96:e8:7c:56:f1:19:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=91fec19d-9788-479d-8f78-225430586246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:1f:49:78:1f:e9:b8:ae:cb:75:06:75:2c:
                    83:0b:26:e0:cd:28:57:34:bb:bf:9a:bf:8a:9e:32:
                    6d:05:1a:30:d0:e4:07:ae:87:ba:9a:f3:bf:ea:50:
                    ef:c1:d0:37:74:ab:bf:5a:d1:9c:ae:3f:0e:c7:a8:
                    c7:27:c8:fe:ed:26:0b:8f:0b:a8:30:f5:1c:14:84:
                    14:e7:d6:ab:3c:0a:fc:c1:52:40:41:45:1a:6c:fa:
                    af:17:98:0f:c0:02:2f:86:bc:d7:70:ba:b9:59:ed:
                    68:9a:f5:9c:0e:b8:83:24:ab:2d:36:40:2a:9c:95:
                    09:c6:3a:12:ed:d0:46:0d:ef:7d:b7:eb:87:f2:e3:
                    8c:4d:31:98:40:59:3f:46:89:28:f1:64:9b:36:13:
                    69:a8:26:56:3f:5b:71:44:d2:b9:08:32:d2:b7:af:
                    da:c0:4d:86:54:89:10:3d:65:30:ef:be:a4:6b:a9:
                    48:4e:84:37:4e:d9:93:d1:7f:5c:41:1c:4c:01:a0:
                    89:ec:48:f9:1d:c2:3b:89:a6:2f:e6:74:03:ea:e2:
                    1e:30:61:13:3d:77:1b:40:bb:9d:a3:c7:09:8f:7c:
                    f4:f6:89:fb:29:5d:bd:93:60:4d:60:de:c9:a0:ec:
                    73:ce:e2:08:ad:1e:d1:46:06:d5:8f:e2:7a:3a:9f:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:23:B5:05:D0:D9:0B:48:42:D7:D4:B6:7B:5C:F2:00:A8:B1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0155cc06-235e-3819-9e59-6489ed681cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:cb:dd:a0:6d:69:7f:66:be:5a:d9:c1:35:75:36:40:8c:
         ea:33:33:ac:ff:7e:f5:e7:c0:b3:36:93:b4:50:80:1e:9f:a8:
         1e:46:71:7b:bc:23:83:04:02:52:d4:9d:18:5d:da:cc:44:bd:
         69:3a:9f:c4:c9:eb:5c:52:32:f5:dc:21:11:95:b3:6c:f2:3a:
         c1:b3:59:e6:e7:c3:4d:3b:b6:60:10:d0:b7:4e:54:df:62:ef:
         cc:30:63:76:18:51:a0:5b:bc:e5:ae:19:10:ea:f5:92:c9:4b:
         39:2b:2b:f5:ce:21:9e:63:51:c5:bd:67:0e:59:d5:6c:80:4a:
         7b:d4:2c:74:7f:d9:e7:6b:a5:0d:85:9c:6f:6c:ea:d7:25:ce:
         b8:7a:69:22:ec:cd:7b:90:91:71:1f:1f:f2:93:bd:2b:20:ad:
         b1:d4:ce:09:b5:29:50:11:5a:f1:e9:0b:28:2a:69:1b:82:94:
         51:e4:36:8f:1c:6d:bd:31:72:8a:bd:60:a6:16:87:18:68:e5:
         04:09:16:af:d1:ae:44:d9:83:7f:40:fb:62:e9:68:ef:aa:f4:
         18:41:65:55:62:9c:5e:a2:29:da:22:09:46:12:f2:f5:9a:71:
         30:4d:3d:f9:73:50:9a:62:7a:ec:be:d6:54:36:7f:64:d0:9f:
         b7:05:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:23 2024 by rpki-client on console-ams.rpki-client.org