Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68e66b52-96c3-3396-9813-f641d06d2b60.roa
File:                     68e66b52-96c3-3396-9813-f641d06d2b60.roa (raw, json)
Hash identifier:          l+eVK702XcAdb17MXulje0ZbgBfXVv6IYXO/Rl95IxU=
Subject key identifier:   73:9F:1B:D6:CF:9A:6E:EC:A0:6E:9A:8A:15:2C:4D:6A:C7:AE:3E:0B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E875D6B9EA9F9E2B0BF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68e66b52-96c3-3396-9813-f641d06d2b60.roa
Signing time:             Fri 11 Oct 2024 21:09:58 +0000
ROA not before:           Fri 11 Oct 2024 21:09:58 +0000
ROA not after:            Thu 09 Jan 2025 22:09:58 +0000
asID:                     7385
IP address blocks:        23.27.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 18:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:87:5d:6b:9e:a9:f9:e2:b0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:09:58 2024 GMT
            Not After : Jan  9 22:09:58 2025 GMT
        Subject: CN=89747d90-cb42-4405-bc3d-e86bb3fe938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:90:24:19:eb:06:b1:ff:ac:8c:73:db:ef:
                    fb:0a:95:5c:9e:78:42:90:3e:aa:7f:93:02:6b:22:
                    d0:92:cf:cd:b5:21:e0:4d:b9:62:ed:72:bb:ba:46:
                    b6:87:48:e8:16:86:c7:ec:4d:61:47:3e:ed:7e:c2:
                    e2:5b:46:f0:d1:9b:fc:f7:9f:29:54:f7:d7:f2:4c:
                    49:dc:34:cc:30:e2:a2:bb:de:74:9d:d7:6b:58:51:
                    df:8d:37:ae:a8:5f:28:e6:2a:f8:4f:38:d8:65:b6:
                    7f:29:97:de:6d:51:26:9b:0b:3e:22:5c:f9:03:1e:
                    c7:db:74:bb:be:f2:68:a3:b9:06:1f:09:9f:5e:49:
                    7c:63:2b:a9:1c:cd:77:1f:61:a5:78:22:b8:9c:64:
                    56:ec:ca:1e:63:91:ce:22:6c:8c:b2:e5:d9:85:df:
                    b5:97:0b:5c:b2:df:cb:2e:cc:6e:a8:0f:05:33:9b:
                    e3:99:8c:17:c9:2e:a0:af:71:fa:0a:28:b7:4e:83:
                    ba:0e:32:e6:14:ca:83:1f:40:c4:ab:63:ba:93:cd:
                    82:a2:0d:4c:b5:73:a4:3c:64:68:d6:19:8d:8b:2a:
                    fd:d0:b1:5a:38:3c:fe:8d:ab:02:a4:f9:0f:22:67:
                    f0:4d:86:a0:5b:1b:45:25:1d:24:ca:7c:d3:b2:b9:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:1B:D6:CF:9A:6E:EC:A0:6E:9A:8A:15:2C:4D:6A:C7:AE:3E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68e66b52-96c3-3396-9813-f641d06d2b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:a0:27:9d:6a:e7:01:92:31:e1:95:2d:1b:4e:56:63:86:
         36:64:03:8d:b2:16:04:74:c3:f3:70:2f:70:9d:73:de:a7:42:
         7c:52:90:cf:31:95:63:82:63:09:21:68:43:09:8b:09:ca:e5:
         b5:2c:d7:8d:b4:1e:0a:8f:4a:8a:eb:96:47:c6:6b:04:c6:53:
         d6:e1:3c:b2:1e:6e:b9:c0:d6:35:7d:4b:a7:b2:f9:03:0d:fb:
         98:b3:e6:c6:38:93:58:44:aa:18:c1:ee:dd:4b:1a:c7:11:d6:
         04:b2:c1:b9:68:8e:f4:92:df:ba:4b:99:5c:6f:68:ee:80:83:
         59:85:3a:2f:1a:88:96:79:be:71:2a:a6:6b:9c:1a:44:53:20:
         9f:f0:13:3a:fd:30:b2:ec:b8:ae:3f:6b:4b:79:bd:f5:ec:8b:
         be:2c:8c:1c:f6:f2:3d:10:e7:95:a4:20:a9:c8:80:88:62:e4:
         7c:f6:3d:dc:e5:4b:c9:e6:d7:9b:d6:48:87:85:4d:2d:c8:85:
         f1:f9:a6:08:a5:d1:31:6f:37:21:a3:32:36:5f:e2:c4:ba:9a:
         8d:42:b6:37:d2:58:ca:88:2b:ef:0c:fa:f4:75:42:50:be:e8:
         1d:0b:d2:dc:a8:42:e2:66:16:8c:c1:66:b2:50:45:65:97:35:
         75:86:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:21:54 2024 by rpki-client on console-ams.rpki-client.org