Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef3f8f3d-7bb3-3841-9d50-414de318ae25.roa
File:                     ef3f8f3d-7bb3-3841-9d50-414de318ae25.roa (raw, json)
Hash identifier:          PRzo3/XEFGswlAx3086tSnN+0W8NP4AlnSIyiWUMnpM=
Subject key identifier:   8B:7D:3F:57:B9:5C:84:13:0C:DD:5F:62:31:54:1F:88:A0:E5:66:7F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FDE8D61A56348BF787CD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef3f8f3d-7bb3-3841-9d50-414de318ae25.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:e8:d6:1a:56:34:8b:f7:87:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5346f15f-22a9-48aa-b6a4-5012cc3dfe47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:91:49:f4:93:54:23:dc:9a:9f:80:c8:02:
                    1e:77:33:49:91:59:4f:5d:9f:76:28:26:df:ff:92:
                    cb:f9:07:bd:27:10:fa:ce:15:2a:a8:a7:3b:43:d7:
                    17:e2:d6:6d:45:b2:7b:e4:9a:58:e1:15:93:16:1f:
                    c9:af:c8:81:51:3b:48:02:ea:44:5d:36:e0:de:cd:
                    f0:10:a5:58:35:6a:a6:2f:67:fa:28:09:49:74:d7:
                    42:a6:b0:d3:3b:58:29:f0:cb:0e:c3:83:10:9e:2e:
                    2c:20:d3:6d:0d:e5:5a:b4:42:b6:97:3c:05:42:b0:
                    02:3b:e2:3c:61:70:16:cc:1c:d1:e3:7c:0f:d5:62:
                    9c:83:d4:23:6d:38:65:13:a9:52:3d:2b:92:48:27:
                    07:b2:82:f6:29:b7:07:2a:65:6f:d6:35:dd:9b:00:
                    3a:05:96:a4:82:8b:b5:09:5e:fa:69:05:51:51:31:
                    df:dd:99:6e:19:98:f4:46:30:57:68:fd:6a:2f:bd:
                    7f:e0:2b:28:79:b4:23:17:34:bd:da:45:95:fd:03:
                    14:a5:79:cb:80:39:3b:61:8c:69:91:aa:ba:35:5b:
                    a0:9d:4d:8c:2b:98:92:ac:f6:90:f4:69:3d:a1:27:
                    43:f1:f3:90:6b:3b:66:10:8d:b3:3d:1c:87:7f:2a:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:3F:57:B9:5C:84:13:0C:DD:5F:62:31:54:1F:88:A0:E5:66:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef3f8f3d-7bb3-3841-9d50-414de318ae25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:00:17:bc:07:81:d4:ff:65:44:67:fa:1d:53:ce:5c:fa:de:
         bb:d5:36:3f:b3:9c:9d:49:27:c6:79:4d:20:41:0c:36:00:6f:
         e5:bc:28:0c:fd:ec:60:1c:c7:c4:64:00:a3:c0:b5:d4:e4:61:
         ea:0a:14:40:a9:c5:3f:b8:a1:3c:29:72:3a:78:f7:ec:61:56:
         2a:06:28:b4:3e:d1:89:14:75:f8:46:22:31:19:00:88:04:70:
         93:78:68:44:d0:cc:58:33:c4:d6:21:ac:21:20:34:97:8e:80:
         fb:68:fa:d2:18:ad:ce:68:35:c0:7b:45:af:c6:88:7e:fa:7f:
         28:5e:fb:85:d8:db:72:12:82:90:1d:33:31:99:2e:28:e8:d0:
         a2:be:10:85:cd:b2:a8:ac:89:ec:02:5f:0b:87:f5:96:09:15:
         5e:1f:10:6d:35:d2:6f:1e:8e:75:9a:e7:1d:5f:a4:a9:ee:d9:
         25:71:44:a8:a1:8e:6b:ae:7d:1e:bb:d2:26:fb:8c:0f:57:ba:
         dc:01:66:eb:e4:fb:77:18:c2:e7:e9:99:e0:0d:e5:c3:06:14:
         24:eb:02:94:00:f8:0a:f9:28:0c:46:30:a9:6a:98:48:f7:cf:
         0e:07:d9:6b:e1:18:d1:b2:b9:13:00:57:0e:36:ba:46:f0:64:
         34:b2:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:35 2024 by rpki-client on console-ams.rpki-client.org