Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f77afa9-0c70-3c6e-9b97-e1bc374083fb.roa
File:                     0f77afa9-0c70-3c6e-9b97-e1bc374083fb.roa (raw, json)
Hash identifier:          NjHPmXAcedIUOQsQ6sCeQo5EaNXtQz/m7BNRWRyuBCo=
Subject key identifier:   E8:06:AD:47:A1:66:9F:38:87:41:C1:F8:C9:A8:18:1F:E6:E7:98:28
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1D6710BF7637235710AC80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f77afa9-0c70-3c6e-9b97-e1bc374083fb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1d:67:10:bf:76:37:23:57:10:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cad8954b-fe0b-4ea7-a11a-9f99c133bdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:4f:72:28:d8:df:12:18:cd:6f:bf:cf:58:
                    b7:13:38:26:9e:a7:27:85:53:6a:d2:c7:41:ea:2a:
                    1b:b7:7d:bb:e7:7a:89:a8:20:1a:dd:63:12:74:6a:
                    02:87:89:fa:1f:01:5f:2a:ad:4c:49:50:fe:38:47:
                    55:76:38:1c:a3:58:b1:d2:0d:4b:b3:3c:36:55:12:
                    45:18:3c:4b:34:ea:70:15:45:cc:a8:5b:a9:1d:99:
                    a2:8c:76:ad:3a:a8:20:ff:47:64:b6:83:c5:3b:cf:
                    3e:56:8c:da:89:66:5a:d7:b7:58:56:a6:ac:f3:49:
                    06:92:c2:1b:02:8b:d2:04:e1:30:9c:8e:7f:48:18:
                    24:c9:e5:64:b6:44:44:ae:7e:ac:e0:da:58:9c:53:
                    a9:15:df:74:17:b3:14:eb:e0:d6:6b:14:4a:a5:06:
                    cb:ba:77:bd:57:62:8b:a1:ed:f9:35:ff:f1:dd:67:
                    7e:23:eb:88:22:ce:3e:22:cc:1b:bd:42:50:5b:ca:
                    d9:55:93:7a:d5:ea:39:00:5b:7b:d1:8a:a1:6b:a4:
                    2f:3d:26:c8:10:31:e1:2a:04:c7:49:fb:6d:df:cc:
                    9e:f2:ef:7b:c6:6d:29:b8:83:9d:8e:a6:ea:e9:cf:
                    13:07:11:1e:92:01:90:8c:bf:7e:75:cb:18:86:6d:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:AD:47:A1:66:9F:38:87:41:C1:F8:C9:A8:18:1F:E6:E7:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0f77afa9-0c70-3c6e-9b97-e1bc374083fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:55:5a:63:51:5c:38:c0:f8:42:e5:61:4c:d2:fb:08:1c:be:
         f4:f1:a2:73:5a:36:99:29:4a:94:b8:eb:16:9b:ab:1a:97:c9:
         26:78:ad:de:5f:64:a4:05:45:ab:b7:8c:f7:31:b7:48:1f:64:
         77:2c:1e:3e:0a:e6:e1:54:dd:ff:f5:dd:4a:8e:9b:0e:50:9f:
         b9:64:58:de:aa:29:33:28:2b:39:31:ca:c4:76:3f:3d:35:c3:
         3e:2c:0b:2d:fb:20:07:73:1e:e5:8c:79:a5:4c:db:a0:7f:76:
         d8:a9:06:c3:b9:00:64:1e:66:5d:8e:f6:ab:d0:69:5b:26:91:
         fe:f8:75:a7:99:33:13:7a:93:05:e3:39:af:89:9c:b6:20:b4:
         35:40:8e:5b:2a:87:76:b0:67:3c:16:c3:c9:37:c1:7d:10:b8:
         c2:e5:01:73:a3:39:ef:b5:e8:a1:59:ff:3f:96:f1:59:13:15:
         63:5a:aa:00:55:3e:cc:b4:4f:e7:d2:19:50:aa:3c:75:42:f6:
         d3:2c:e1:f8:e5:e8:45:64:c2:0d:f5:da:0d:74:89:71:0b:52:
         b9:ce:42:c2:ba:10:d6:a1:e3:df:77:23:6a:19:4c:f6:b1:fb:
         84:70:7a:5b:7f:75:11:af:27:a8:3d:fc:e9:6a:ae:22:74:4a:
         8a:38:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:23 2024 by rpki-client on console-fra.rpki-client.org