Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/d8c10d51-3f13-3c91-abef-84ef92b891fe.roa
File:                     d8c10d51-3f13-3c91-abef-84ef92b891fe.roa (raw, json)
Hash identifier:          F/S90eAjzWWAnpxG76iDFMiIH1T+UzbU8eqTPpbMseE=
Subject key identifier:   AC:1F:89:EA:F0:48:D0:36:8B:B1:64:D3:F5:76:F0:C8:D7:4E:DB:53
Certificate issuer:       /CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
Certificate serial:       010D0C9F432858471A3420FE27600B9539F9B080
Authority key identifier: 1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/d8c10d51-3f13-3c91-abef-84ef92b891fe.roa
Signing time:             Wed 04 Sep 2024 12:36:00 +0000
ROA not before:           Wed 04 Sep 2024 12:36:00 +0000
ROA not after:            Tue 03 Dec 2024 13:36:00 +0000
asID:                     393990
IP address blocks:        192.160.255.0/24 maxlen: 24
                          2620:120:8000::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 12:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:34:20:fe:27:60:0b:95:39:f9:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
        Validity
            Not Before: Sep  4 12:36:00 2024 GMT
            Not After : Dec  3 13:36:00 2024 GMT
        Subject: CN=8402e54c-d136-4b4e-9ca4-09389ee5aa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:79:16:d9:21:c0:8f:38:1f:35:1c:70:13:
                    43:b3:91:be:8b:b7:74:27:ba:b2:26:69:70:7c:80:
                    1c:b9:d2:aa:9d:1d:44:49:86:05:c8:5c:f0:ab:bb:
                    8b:4b:b1:b6:7c:c4:08:62:1d:de:90:35:2c:5d:40:
                    28:92:83:77:28:a4:a1:fa:df:d1:b8:49:41:4c:d8:
                    3a:e7:0e:1b:83:e0:fd:32:e9:dd:af:8c:b8:82:05:
                    26:b8:2f:cd:95:32:04:3e:7e:72:1e:4b:81:59:25:
                    25:b4:57:4b:59:2d:ac:48:4d:1a:b2:5d:5e:86:9c:
                    35:9a:11:6c:fe:87:0d:a1:fa:28:03:9a:62:a3:0e:
                    91:78:a7:0c:1a:14:da:1a:b2:d2:09:8e:4c:f2:b7:
                    cc:89:73:8b:f5:8a:10:bc:66:c4:aa:90:3e:e0:93:
                    0d:9a:05:c6:64:ad:c3:13:c4:35:f0:c0:31:5c:fe:
                    6b:a4:b8:d3:bc:52:d2:54:1a:19:46:b7:44:dc:b5:
                    f3:2e:58:c3:8e:ca:41:f7:d5:66:19:53:c3:f7:04:
                    96:d7:1d:e7:a5:1c:c8:be:91:ff:6e:6f:7b:0b:7e:
                    55:e4:57:65:70:78:7d:20:be:9d:75:cc:0a:4c:62:
                    71:f4:f5:1e:66:4c:2d:1b:c2:49:62:a5:9c:b9:69:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:89:EA:F0:48:D0:36:8B:B1:64:D3:F5:76:F0:C8:D7:4E:DB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/d8c10d51-3f13-3c91-abef-84ef92b891fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.crl

            X509v3 Authority Key Identifier:
                keyid:1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:dc:39:11:7d:6d:11:8c:e9:ca:8a:c3:54:ae:3c:7d:68:
         38:0a:65:61:65:04:5a:d7:8d:0d:3b:b9:70:f3:c4:2c:d7:52:
         57:b4:77:95:8b:16:74:14:ec:f6:0a:4c:94:98:4d:1e:2a:a7:
         bd:b8:00:79:f0:4c:40:e4:0f:2c:ac:12:fd:ff:71:c5:9a:f6:
         a7:a2:69:64:2c:fd:b0:fe:31:d8:80:1b:ae:df:25:59:11:30:
         93:7f:61:a8:38:f0:ff:49:7e:82:97:fa:b5:e2:78:dd:ec:8a:
         0a:67:62:9c:21:f2:ec:a7:6f:ad:5a:30:18:8f:eb:b7:5f:ea:
         4b:f6:16:2a:6f:47:86:7a:12:fa:01:e2:43:a9:5b:7f:bc:4d:
         6d:33:51:eb:8c:5a:fe:f8:60:a7:35:98:d3:9a:4c:cd:01:45:
         b3:4e:9b:3b:ce:15:97:53:6d:5d:f9:33:15:1e:bd:05:cc:b8:
         05:94:64:cf:31:30:eb:71:72:0f:29:b9:43:47:00:a0:a9:81:
         18:3b:4b:93:be:25:93:75:a9:11:7e:19:cf:09:53:a8:97:e0:
         03:21:2c:6f:6f:38:ff:c5:f9:eb:32:b4:a2:36:9c:2c:c8:6c:
         68:b5:e7:7b:94:a2:d3:51:cc:e9:e2:e2:1f:f2:7b:b1:1b:6f:
         67:46:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----