Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/034b510e-f8bc-356a-a11d-58302fd57cda.roa
File:                     034b510e-f8bc-356a-a11d-58302fd57cda.roa (raw, json)
Hash identifier:          sRoUSOmKFOai7Dn+8khFv6Q3+wivqEtDHh9Y76WYix4=
Subject key identifier:   03:9A:28:DE:96:3E:05:BD:AB:41:F6:3C:25:6B:9A:FE:CA:68:F3:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A11B960C0E7E258FE8CD980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/034b510e-f8bc-356a-a11d-58302fd57cda.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:b9:60:c0:e7:e2:58:fe:8c:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c47d581b-1207-49ff-af15-5c6edfa0e1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:76:d7:84:ee:dd:24:ea:bd:db:bb:42:2f:
                    c3:c8:05:7e:9a:a2:36:ac:11:23:8b:b9:ed:61:0c:
                    1c:d3:36:8a:0f:05:f0:91:42:6a:39:97:22:3f:af:
                    79:ea:e9:67:27:15:dc:ac:c8:02:51:a6:19:3e:d0:
                    33:75:1e:43:49:19:73:90:cc:33:c7:44:ae:7f:56:
                    29:7b:1f:e6:7f:5b:2b:8f:b3:d2:92:e6:0d:7d:41:
                    75:6f:de:8c:55:7e:ed:58:60:c5:91:80:e2:c0:d1:
                    2d:23:ae:bf:19:90:da:48:9b:b7:de:bd:f9:54:8e:
                    c2:bb:8e:9f:78:8d:1e:3c:2a:9a:78:42:10:d0:61:
                    fe:ad:91:a1:86:f7:19:33:82:a3:20:5a:e4:2b:fd:
                    6f:84:4f:dc:34:61:5c:df:18:77:d1:e6:e2:96:55:
                    b0:3b:8a:d2:c2:87:d4:1a:7c:92:fe:b0:52:e0:b8:
                    98:7c:72:e1:cc:21:19:77:36:3c:7a:1f:75:dd:d6:
                    0e:10:c5:d9:50:77:2c:f7:3c:33:04:ba:c1:db:fa:
                    0d:1a:08:86:e4:1b:07:31:0e:41:1d:1e:72:65:14:
                    8a:02:90:a7:2c:92:a6:0c:69:f3:1e:d6:51:33:b5:
                    bb:4a:39:37:c1:9e:06:2f:1b:c9:a3:3d:ba:1c:12:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:28:DE:96:3E:05:BD:AB:41:F6:3C:25:6B:9A:FE:CA:68:F3:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/034b510e-f8bc-356a-a11d-58302fd57cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:2e:67:21:62:ef:d2:21:ea:9c:58:3c:d8:66:8b:28:3d:
         8b:9b:10:c0:e3:d9:34:87:18:86:fa:b4:a8:b3:37:4c:a4:fb:
         26:36:27:69:12:e1:69:cd:cf:75:f4:90:91:df:4f:a7:14:ff:
         57:1c:a4:68:2e:8b:9b:5a:e4:1e:a7:7e:59:e6:b6:ea:fa:20:
         3b:0b:5f:ec:b0:e9:b2:ea:29:a6:30:b4:46:6d:17:3a:90:9a:
         41:1a:2e:ad:a8:0d:fa:7b:e9:79:f0:25:ce:d2:b6:9b:ce:e1:
         b0:26:d4:a9:3c:58:c3:03:dc:27:92:72:8c:f0:cf:4a:5a:2c:
         f3:83:b2:3f:14:38:9c:fc:da:92:aa:fa:42:74:0f:46:74:16:
         cd:78:e7:52:f2:01:30:6c:8b:fd:53:36:a2:3c:79:89:75:96:
         f9:41:a2:5c:38:39:11:45:a2:e2:47:ab:a8:54:75:98:94:37:
         04:4a:6e:ee:42:d8:50:d5:85:0c:f8:fd:06:16:a7:37:4d:75:
         9a:eb:ad:34:96:2a:c5:09:de:bf:24:c8:ad:f2:51:b7:f8:a7:
         00:2e:71:ef:9d:9c:6d:6e:eb:85:38:02:62:87:22:be:c1:40:
         f1:b7:b0:ef:16:46:31:74:9a:43:74:4a:7f:e6:77:a3:25:2e:
         e7:66:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:22 2024 by rpki-client on console-fra.rpki-client.org