Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efec46d2-6a9d-3415-8d37-a1b4dbe169ed.roa
File:                     efec46d2-6a9d-3415-8d37-a1b4dbe169ed.roa (raw, json)
Hash identifier:          CybUF5llLEL+D90T74x/teDAf4U0EgWNu4V1K/n8c1U=
Subject key identifier:   44:EB:B5:BE:97:72:12:76:A7:77:0B:B0:D0:13:41:BB:D6:31:59:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A178EF5159FE31E16441620
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efec46d2-6a9d-3415-8d37-a1b4dbe169ed.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:8e:f5:15:9f:e3:1e:16:44:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4dc43f84-2c2f-4240-b85b-018e357fc9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:e2:c0:d8:9a:b5:82:c5:f6:ab:57:bd:92:
                    7c:98:cb:9c:a6:7f:d6:0a:3f:c0:6d:76:e9:87:4a:
                    05:3d:5f:07:32:85:03:1b:fb:72:25:72:95:f5:55:
                    90:61:78:2f:16:f1:3b:42:7c:0d:c2:01:67:88:33:
                    78:24:5d:97:86:71:68:31:32:96:63:22:68:39:7d:
                    a2:7a:cf:88:70:ba:58:40:f4:3c:1d:24:96:0d:10:
                    b1:23:88:8e:da:2e:cb:65:71:17:b3:72:e5:2b:cb:
                    25:91:0f:01:2a:20:f3:f6:d6:43:50:85:73:7d:06:
                    a1:ad:d6:45:71:af:e4:4b:8f:46:f7:c3:3e:32:b4:
                    33:ed:d0:0d:32:1b:07:3a:14:4c:d9:4e:15:70:df:
                    5f:ca:67:a3:8a:99:f9:15:77:d5:b1:62:be:89:44:
                    49:b1:5e:11:e2:b8:15:6c:59:98:9d:d5:ac:4b:e1:
                    4d:bf:a2:44:34:00:7c:4f:ba:f7:5f:fe:a7:3c:6e:
                    ab:ba:70:09:a2:a2:a6:c1:ec:bc:61:0e:43:43:65:
                    d5:d9:01:d8:ec:8a:6b:3e:26:72:39:d6:f4:d0:6f:
                    9f:e3:25:14:5c:63:6a:3b:62:8a:ba:cf:8a:21:38:
                    a7:3b:8c:c3:58:3e:0f:82:b9:70:1b:88:62:01:87:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EB:B5:BE:97:72:12:76:A7:77:0B:B0:D0:13:41:BB:D6:31:59:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efec46d2-6a9d-3415-8d37-a1b4dbe169ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:00:07:60:df:56:6f:92:85:39:43:f4:a9:ef:80:b2:1b:e5:
         9b:fe:7b:78:b6:a7:c3:2a:75:d1:92:0e:8a:9c:d9:53:14:e0:
         89:0f:c6:18:4a:eb:b2:5e:4b:d2:e5:b3:4c:3e:d8:13:8d:2e:
         81:0c:fa:dc:f0:38:d0:36:84:04:38:16:40:d4:e6:8a:63:36:
         07:a4:aa:46:b0:a2:28:ec:0b:73:4a:5e:84:30:b2:e2:ed:6a:
         ae:60:f6:e0:61:e2:8c:21:82:3c:5d:fe:76:52:b3:c3:29:ca:
         62:27:c1:c8:42:0a:e0:9b:72:c4:1b:96:55:a1:be:e3:ad:c4:
         33:44:45:be:99:94:f1:b6:ab:4b:a5:ac:44:29:e3:4f:b5:10:
         d9:b1:53:3a:ba:97:90:ec:39:6b:b8:c0:2d:11:fa:80:19:c7:
         4e:eb:0f:00:fe:0e:d7:3c:0b:5b:dc:77:f2:22:c4:62:2a:a6:
         62:8e:dc:43:c9:61:63:5d:88:94:26:1e:f5:7c:65:3b:45:c7:
         c0:64:51:26:35:19:24:d2:51:52:4f:b3:27:4e:13:12:b5:37:
         cc:65:19:5d:ae:36:81:2c:41:8a:01:53:b8:c6:d9:50:12:54:
         d0:da:50:51:90:dc:46:f4:33:9c:7b:57:14:0d:42:74:25:bb:
         f6:ae:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:35 2024 by rpki-client on console-fra.rpki-client.org