Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f11ee38-149e-391e-90be-bd96ee48c591.roa
File:                     2f11ee38-149e-391e-90be-bd96ee48c591.roa (raw, json)
Hash identifier:          rlaEQSCr9EzkDcoOmYMMgmOylg5fsapFJPo4fU1YNQs=
Subject key identifier:   35:6F:96:E7:F4:E0:78:17:AA:AA:1A:02:30:3B:E3:E5:46:34:4F:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A269C811015B33CF2DB8540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f11ee38-149e-391e-90be-bd96ee48c591.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:26:9c:81:10:15:b3:3c:f2:db:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=96802bb6-81c1-4666-acfe-61a4deeed0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:c3:95:6a:57:0f:c6:07:d9:ad:bc:ed:81:
                    24:63:53:98:58:c6:6e:c9:8f:96:f3:3f:55:0a:ed:
                    70:f9:98:e7:72:9d:8c:5c:12:20:56:f4:7a:fa:5f:
                    5a:ed:09:42:f9:36:38:9d:8d:28:b3:db:8f:5c:17:
                    0e:a4:44:62:f2:38:a3:2b:d8:f6:b1:2c:50:2f:57:
                    38:1f:65:a9:9d:95:90:50:ae:78:2d:a9:4b:0d:dc:
                    9f:2c:43:bd:6a:88:a5:f7:49:5d:86:58:e6:01:63:
                    cd:88:2d:82:ba:1c:41:cd:40:fd:8e:6d:73:48:16:
                    5d:91:99:fa:c9:3e:d9:c1:09:cd:51:d5:ef:5f:a5:
                    2a:6f:b5:5c:89:13:89:9a:57:9d:80:80:96:88:46:
                    b4:ff:53:9b:1f:b2:3b:63:a8:31:b4:ac:59:1a:7a:
                    c9:36:37:b5:1c:39:32:af:36:21:1b:9c:92:30:5d:
                    c6:e2:ea:05:ec:1a:6a:08:31:67:c7:54:7c:66:39:
                    24:cd:10:35:80:5f:35:96:c2:6f:76:a2:76:5d:f2:
                    84:e9:50:bc:67:38:99:73:5f:e8:69:fb:02:83:ab:
                    c2:f5:b4:82:a3:ec:15:23:89:d1:a8:4f:53:3a:42:
                    94:de:e3:1a:86:58:d1:87:6e:d1:e2:a1:08:4a:22:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:96:E7:F4:E0:78:17:AA:AA:1A:02:30:3B:E3:E5:46:34:4F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f11ee38-149e-391e-90be-bd96ee48c591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:85:1a:59:c4:97:ed:d5:28:51:c8:16:05:45:d4:19:bc:e6:
         71:46:69:2d:72:d4:65:a1:9e:62:d9:af:52:33:c0:7b:90:16:
         f8:ce:ad:1f:0f:d8:34:8a:87:2e:27:d4:26:d9:35:04:72:95:
         84:3a:bd:ef:91:7f:0a:3d:63:38:76:04:fe:9f:23:e7:10:5c:
         56:f3:4e:94:fe:29:7e:fc:1a:d7:78:33:bb:c3:2e:6f:77:83:
         5d:61:d2:df:22:37:a3:f2:fc:18:fe:c3:e2:14:b4:b8:85:f5:
         94:ea:c8:17:c4:0b:70:98:05:40:57:ab:31:e8:a3:e0:7f:2f:
         cf:4d:b6:93:4e:99:cb:d5:59:d3:8f:18:56:b7:80:f0:ea:ac:
         98:16:06:09:34:6e:5a:a0:d0:22:57:b1:ea:45:23:58:fb:8b:
         4f:ea:82:e1:33:52:42:30:97:64:5b:8e:09:e0:c6:8a:84:d1:
         70:74:e4:64:c8:74:33:40:ca:2d:65:06:87:c1:92:d9:bf:29:
         ea:59:b9:5f:27:0b:a7:b4:8b:29:48:ce:6e:b1:e8:69:1a:b7:
         d9:4d:6c:b2:06:0c:2d:ab:95:4d:b8:a1:08:be:19:4c:34:2c:
         ab:3b:88:87:1f:88:e1:3f:a4:59:10:45:6c:84:fe:ee:fa:bd:
         33:0b:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:24 2024 by rpki-client on console-fra.rpki-client.org