Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0815e9fb-bc22-3121-a3f7-ab8c4f349c28.roa
File:                     0815e9fb-bc22-3121-a3f7-ab8c4f349c28.roa (raw, json)
Hash identifier:          LJtElIu7oy8t0ZlLJyFVICs59hjuvvh7gZyJcPNxMY4=
Subject key identifier:   8D:0D:80:80:72:AB:90:13:87:6C:92:64:D1:19:79:FF:D6:2D:79:FE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F060238D5AFFC59281FEFC40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0815e9fb-bc22-3121-a3f7-ab8c4f349c28.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 17:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:23:8d:5a:ff:c5:92:81:fe:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=30e12a75-8668-4802-84a9-4fa89905e2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:80:df:fa:db:94:86:c9:1f:b2:c4:f1:70:
                    b5:f2:0f:85:71:6b:b5:fd:6f:ab:eb:33:20:6f:99:
                    02:0f:4e:14:83:23:54:e6:c3:1d:7d:dd:2b:d5:a1:
                    04:c4:35:04:29:93:5e:42:68:60:cf:d2:ed:77:46:
                    b3:bb:b9:ce:e6:58:63:07:1d:1c:42:bc:21:85:8e:
                    c3:e3:ce:46:a0:ed:95:91:1a:06:b9:79:b3:0d:54:
                    cc:4d:89:82:8b:29:f8:f9:e0:bd:e2:3d:73:66:34:
                    fd:95:f0:af:77:6a:27:22:d8:ae:6d:74:5a:18:cd:
                    fa:fe:00:4e:3d:6f:1f:e3:ac:98:70:ab:72:65:11:
                    d7:1c:71:3d:ab:ba:60:08:28:ed:d3:42:ac:e6:8c:
                    8f:b6:92:d3:85:24:8c:3f:94:a7:c0:72:35:f0:94:
                    f2:a6:43:ad:bd:58:81:a0:4c:4d:73:da:33:3b:16:
                    bf:d8:f7:b2:fa:45:b2:e7:ae:6a:10:7f:38:25:a5:
                    4a:a0:ac:5e:ea:ad:e8:14:b5:f1:f9:b1:45:3e:e0:
                    07:98:1b:30:7e:ef:01:36:b4:29:d0:7e:6e:7c:50:
                    6d:32:73:e1:02:9f:64:60:93:ab:f6:d0:a3:68:17:
                    ad:8a:f3:b2:31:44:d8:ba:ee:93:18:1a:a2:5a:f9:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:80:80:72:AB:90:13:87:6C:92:64:D1:19:79:FF:D6:2D:79:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0815e9fb-bc22-3121-a3f7-ab8c4f349c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:8a:26:08:05:2e:8a:5d:58:a2:08:11:40:c0:57:a4:7d:
         19:6a:c2:32:5b:e1:e8:91:f0:6d:ae:b9:40:f3:f2:f9:f7:dd:
         42:44:07:54:07:4b:b6:ee:27:05:73:3d:6a:13:f4:6a:de:4f:
         26:a6:7b:b4:d5:b6:ca:01:f1:79:a9:1a:44:3e:57:c9:fb:1a:
         20:f5:8d:34:d1:2c:ae:49:b2:fa:28:31:37:a0:2b:3b:92:f2:
         c5:18:f0:2e:0f:8a:3e:31:b1:68:d7:f4:a5:1c:1e:9f:2a:b3:
         f1:01:ec:1e:05:1f:75:a5:fe:d7:9d:fc:31:41:45:02:25:ab:
         90:15:ce:5a:b1:52:67:00:8f:42:d4:b7:a8:ac:69:12:d2:eb:
         39:1a:85:07:95:49:6b:06:5c:74:2c:df:71:db:99:50:14:a6:
         5e:f7:29:3c:d0:d3:df:46:86:68:6d:5d:8c:52:76:7a:ef:f7:
         bd:f8:ea:70:cc:e6:06:0f:a1:c0:7d:ee:79:9b:d6:24:cc:2b:
         37:aa:6c:59:ec:fc:94:c4:f7:d4:8d:5d:80:65:5d:1a:90:0b:
         78:7e:fd:2b:f7:e5:c6:58:e0:94:00:b5:0a:0f:6d:c3:28:9c:
         85:b7:fa:03:17:4e:7c:a4:08:81:bc:86:1d:61:31:5f:e4:6b:
         06:2e:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----