Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1667629c-354d-3cb9-b447-50a8dc3152ad.roa
File:                     1667629c-354d-3cb9-b447-50a8dc3152ad.roa (raw, json)
Hash identifier:          BSsoJAiXuRXzT8EMJCmC60HfTx7t0UWK1LiezW/dQpo=
Subject key identifier:   79:99:87:13:A3:96:16:B3:DC:34:CC:CE:96:EB:CF:88:B7:59:DD:4C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309EEE071A3B148169A2ECB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1667629c-354d-3cb9-b447-50a8dc3152ad.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:e0:71:a3:b1:48:16:9a:2e:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=561286ba-83ab-44c8-982b-841abe7b72b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:5d:1d:2e:87:8f:09:6f:93:1e:75:7b:5d:
                    51:eb:31:02:58:57:0c:38:b1:2c:5d:53:de:be:e3:
                    c7:5c:8a:14:53:8a:90:d8:f9:d6:19:32:cf:fa:1e:
                    9d:cf:83:e6:02:87:77:bc:94:81:0c:27:77:5c:06:
                    99:95:8e:83:74:67:2e:05:12:42:9c:cb:0c:97:fa:
                    eb:ec:72:1c:86:f6:dd:42:b6:b8:8b:fa:df:61:1d:
                    ff:53:b2:94:1c:ec:fb:ce:7d:5d:9d:e6:f7:61:34:
                    cc:9a:f7:1d:77:5e:d0:81:7c:90:df:b8:a3:50:7c:
                    4f:24:43:c3:1a:f1:67:bd:09:ec:1c:07:f0:9d:fe:
                    cb:47:40:9a:be:45:1e:f8:9c:9b:f4:d0:89:59:4c:
                    b2:ce:da:68:9e:36:91:91:9c:18:2d:ef:9d:d5:71:
                    24:52:76:9f:60:10:27:ac:fa:ea:c6:65:8d:9d:97:
                    1e:25:0d:fb:5a:11:ed:ae:dc:f2:29:62:e8:e5:02:
                    5a:9c:05:d2:88:28:78:4a:62:3d:48:d0:2f:46:86:
                    70:7a:03:01:17:c3:59:d5:24:67:77:d2:e1:42:14:
                    40:cc:1b:e7:dd:42:c0:e6:75:7e:65:aa:d9:04:90:
                    24:a7:38:f6:f4:88:d7:d9:ae:8c:32:b2:cb:1f:de:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:87:13:A3:96:16:B3:DC:34:CC:CE:96:EB:CF:88:B7:59:DD:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1667629c-354d-3cb9-b447-50a8dc3152ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:f3:3e:b7:a1:f7:e7:39:29:79:9f:d9:22:bb:bd:8a:a3:
         f1:9e:33:fd:16:02:3c:4f:3f:1c:9b:ed:e5:89:74:aa:50:56:
         d7:40:59:93:36:11:6f:55:39:3d:e5:e2:17:9f:a2:45:50:06:
         c8:31:0e:94:06:0b:fe:21:22:12:fb:ce:94:a5:00:5b:3f:1a:
         83:d4:35:16:4a:1c:28:79:0f:47:ad:4a:54:b2:c5:2c:b6:20:
         2b:40:25:a7:00:2f:57:db:13:e5:d8:58:7c:89:dd:28:46:2f:
         2e:14:86:af:08:fa:95:19:16:e2:11:96:1a:11:ad:c7:6b:f1:
         4e:0a:32:39:5d:cf:1e:13:30:63:e7:ae:22:2d:70:33:61:9f:
         9a:4a:94:35:d1:58:9e:39:5c:31:a8:50:57:0a:6a:8c:e2:92:
         0e:2a:55:9c:c7:40:0b:7b:12:8f:70:f2:7b:58:98:47:fc:79:
         e1:af:62:e4:d2:e2:20:8b:b9:be:a4:2e:c7:e3:61:50:7c:14:
         02:bf:71:e5:ca:83:7c:ee:12:60:f3:9c:65:a5:dc:06:60:e4:
         a8:d3:d8:37:f6:35:6e:76:e4:56:45:1f:4e:9c:61:3b:19:a8:
         5b:ec:d2:9a:c5:df:66:13:8d:8d:52:63:0c:92:ae:e8:0d:14:
         9e:5d:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:23 2024 by rpki-client on console-fra.rpki-client.org