Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc72f8b-ec7e-367f-91ae-2851f0a0e0bf.roa
File:                     adc72f8b-ec7e-367f-91ae-2851f0a0e0bf.roa (raw, json)
Hash identifier:          AJ5VxR1BPIBA9Hi39QtFvCAW5uLAIONJshRqBTwh7Y0=
Subject key identifier:   36:07:32:AD:30:E7:31:05:84:E6:18:A3:01:84:F2:69:AC:7F:61:BF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FF7CAB7C9DC5530ACA0800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc72f8b-ec7e-367f-91ae-2851f0a0e0bf.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:7c:ab:7c:9d:c5:53:0a:ca:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6ddc0af2-dd3b-4e5e-9c0e-472c68c3f996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:8d:30:e0:2c:20:37:3a:1d:79:f5:47:d6:
                    1a:bb:a1:4d:36:f5:8f:27:b0:39:77:9e:02:0c:38:
                    50:83:f6:99:9c:dd:08:ab:08:24:a8:ad:6d:fe:29:
                    7c:a7:d4:e9:43:75:23:8a:83:d9:70:76:ff:47:5b:
                    93:69:71:e9:58:9e:09:57:8b:a5:2b:9d:16:f9:b0:
                    d4:ae:be:e2:02:6e:86:87:d1:0b:f6:6b:10:82:30:
                    dd:43:74:a7:bf:83:61:b9:31:b7:2a:db:ff:40:71:
                    f4:28:cc:13:3d:54:30:34:3a:78:cc:d9:cd:a6:4b:
                    49:0f:68:3c:5f:a0:da:e2:b2:74:4c:e1:27:0d:c8:
                    94:d5:e7:12:21:6a:a5:12:c5:31:2a:3a:ac:53:bc:
                    b8:30:6c:ea:fe:0e:27:40:fc:fe:be:96:5d:79:f2:
                    c9:9c:2e:17:de:82:cb:be:aa:0b:5b:42:c1:fa:95:
                    ee:28:44:a9:48:d2:c5:95:a8:07:59:73:e8:9a:21:
                    8b:1a:6c:b2:f3:4e:92:df:ef:d2:8d:2f:56:9d:9c:
                    3c:69:bb:7f:fb:c0:aa:3f:35:e6:a8:24:65:34:92:
                    51:a4:1a:29:93:63:ca:89:7a:f5:69:33:45:e7:90:
                    3e:23:67:7e:76:dc:e3:68:32:72:f3:88:87:19:fb:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:07:32:AD:30:E7:31:05:84:E6:18:A3:01:84:F2:69:AC:7F:61:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc72f8b-ec7e-367f-91ae-2851f0a0e0bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:97:0a:a2:59:27:2a:73:53:78:ca:cb:1b:c5:e5:57:4c:0e:
         05:f8:de:5b:3f:8e:4d:9a:de:6a:26:4b:e7:38:9d:9f:91:23:
         5a:85:83:74:7c:54:5b:70:b2:2e:ae:3b:34:c4:05:8d:ee:b8:
         c2:85:98:7f:9f:cf:15:4f:28:0d:74:c3:c1:ea:98:c8:46:ec:
         38:70:55:b4:da:2e:88:75:a8:15:2a:77:d3:47:00:75:49:ae:
         47:9b:96:2f:7f:6b:ef:1e:e5:e5:de:64:dc:56:6f:3c:8a:b9:
         21:9d:3d:f9:8e:d7:ad:12:38:58:26:e1:f4:76:68:44:e1:91:
         f5:4c:f1:5a:ba:ea:6e:94:f4:55:73:3e:2d:5f:82:27:5b:49:
         6e:08:c7:34:a7:9e:99:c5:ce:68:f3:63:6f:14:cb:68:49:98:
         09:a2:19:7a:af:31:6b:e8:5e:c2:82:a9:1f:6a:31:20:ac:a3:
         84:85:52:a8:e6:22:ad:77:dd:f0:26:f7:8c:0a:aa:09:d6:fe:
         af:02:ff:12:2a:d9:57:17:d8:56:77:c2:01:1b:45:6c:c1:8d:
         cf:1d:27:a8:ad:3a:cc:7f:58:a2:70:77:80:d0:af:32:9c:9a:
         6f:e7:d5:ac:ab:38:db:61:e9:66:fc:76:30:ae:59:e9:70:10:
         10:fd:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:31 2024 by rpki-client on console-fra.rpki-client.org