Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bbba4265-a163-3b91-bf2b-800087ea1280.roa
File:                     bbba4265-a163-3b91-bf2b-800087ea1280.roa (raw, json)
Hash identifier:          xEQv/N3405m1zJ7nSl+pDvMTv5fH8wPxAvzsLqrjnXM=
Subject key identifier:   DB:F7:95:11:37:E6:C5:00:F9:33:98:E6:C3:FF:BF:AC:2D:51:BE:77
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847C512B6D15F0637948A6C3980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bbba4265-a163-3b91-bf2b-800087ea1280.roa
Signing time:             Mon 04 Nov 2024 17:31:54 +0000
ROA not before:           Mon 04 Nov 2024 17:31:54 +0000
ROA not after:            Sun 02 Feb 2025 17:31:54 +0000
asID:                     11798
IP address blocks:        142.111.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 20:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:12:b6:d1:5f:06:37:94:8a:6c:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  4 17:31:54 2024 GMT
            Not After : Feb  2 17:31:54 2025 GMT
        Subject: CN=74ee680b-b083-4aa2-b4ca-6704e97a9a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:2e:30:77:71:d6:4d:b0:3a:96:e8:d7:f6:
                    91:68:18:d5:f0:92:16:29:d1:09:d5:b8:28:70:eb:
                    04:f7:05:00:23:44:36:c2:2b:70:a3:a8:9f:83:66:
                    d9:b3:62:f5:de:d8:ce:bf:7f:2a:22:2a:0f:8b:e1:
                    a4:1e:65:08:93:dd:2a:f7:f2:eb:8c:0b:1b:af:ca:
                    90:db:b9:af:9c:ca:6c:ad:aa:ca:5f:0f:74:b8:37:
                    e6:ed:ae:c4:32:46:04:35:d5:95:24:33:0b:3a:28:
                    0d:15:28:ee:f5:ef:94:bf:92:07:e6:ca:67:27:91:
                    c8:cc:40:54:26:7c:40:c3:1e:f3:74:eb:94:e5:38:
                    28:b4:5d:d8:2c:02:03:00:d3:69:42:64:cd:59:cf:
                    07:d4:3d:54:be:cf:00:9a:02:25:1b:3e:78:d4:9b:
                    65:2b:55:b7:a0:29:13:fb:1e:ad:a4:06:66:7b:5c:
                    6a:dc:09:a6:1a:14:01:0b:8e:44:57:26:0f:7b:8b:
                    12:d4:37:66:d7:fa:24:a5:67:cd:c1:8b:e6:ae:05:
                    83:4f:0e:ab:39:d2:45:13:b6:c9:67:72:61:6b:c8:
                    29:bc:bd:b2:d7:cd:c6:1c:fb:1f:b4:e2:36:6a:ae:
                    11:30:a3:b1:cc:f1:85:00:29:b5:3e:ae:1e:6e:51:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F7:95:11:37:E6:C5:00:F9:33:98:E6:C3:FF:BF:AC:2D:51:BE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bbba4265-a163-3b91-bf2b-800087ea1280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f5:0d:31:f9:a4:58:05:45:1f:86:69:21:09:90:78:fe:bb:
         ee:9e:d0:e4:1b:7d:9d:c1:b4:2f:17:0d:61:f6:d3:ab:4d:21:
         33:f5:ce:db:79:ff:10:bc:11:9c:c7:d9:73:2a:84:ab:2c:e5:
         e4:1d:68:88:28:23:fd:d0:8e:e5:ef:b4:61:3c:07:65:c9:1f:
         6c:ff:56:9c:3a:6b:97:fa:16:b4:50:b2:4e:cc:d5:be:56:38:
         1c:e9:f9:4f:b2:1c:bc:55:1a:2c:88:68:58:b9:b8:c5:be:39:
         af:e4:0c:15:e5:ca:ee:ed:a8:a6:22:46:06:7d:be:08:8f:94:
         a2:eb:82:91:f4:91:81:6a:d9:48:26:b5:4d:a5:90:9e:7f:0d:
         04:02:4a:37:27:d5:d1:a0:02:59:e2:be:0d:6e:ba:6b:aa:07:
         9c:ed:ed:45:dd:10:56:0b:66:c5:78:5c:83:6f:f8:27:e6:e3:
         8d:10:af:fe:c7:69:0b:22:ba:72:23:a4:39:3d:4f:44:a8:b7:
         85:4f:09:e9:d3:d7:90:67:f1:e9:9c:e3:5f:47:0d:24:05:e7:
         64:b3:6f:63:63:11:2d:79:bc:e1:d8:1d:a5:d9:ac:c4:8f:5b:
         48:2d:51:26:5f:b5:10:9c:22:c5:e0:94:00:35:18:01:09:f1:
         1f:32:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 00:06:56 2024 by rpki-client on console-ams.rpki-client.org