Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe80987d-45d4-367f-9834-dc031e64ee70.roa
File:                     fe80987d-45d4-367f-9834-dc031e64ee70.roa (raw, json)
Hash identifier:          MO5GmFIDVYT1ibt1hX1SHQ5j8lftTp2mHkoWFhdAlsg=
Subject key identifier:   E3:01:05:6D:A9:C2:36:0A:D5:CE:51:1B:92:1F:8A:B2:80:48:27:5E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6356EFDEA01B116A98D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe80987d-45d4-367f-9834-dc031e64ee70.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     7922
IP address blocks:        166.88.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 19:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:35:6e:fd:ea:01:b1:16:a9:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=726a2226-ad0f-4371-b474-0007f8221d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:6c:8f:9c:4d:c1:79:a9:70:91:00:95:e4:
                    b6:58:bf:4a:96:42:ea:43:e7:9a:5d:13:96:1c:cb:
                    08:a3:da:1a:38:1d:97:91:40:52:67:4f:ee:4b:bf:
                    92:5a:60:17:5f:9a:6e:1f:11:5d:11:80:9c:14:f4:
                    51:46:b2:a0:e9:65:5a:52:d3:f8:41:47:7f:a5:a8:
                    dc:03:55:ea:c9:73:63:bf:22:00:18:54:1d:19:f5:
                    33:ac:10:3a:2c:55:c9:b5:2b:4d:1f:ab:af:72:aa:
                    ef:7f:15:f2:1f:65:ac:ed:be:fd:11:24:e3:7e:a1:
                    1c:0a:cb:d3:d1:36:b8:eb:09:ff:30:b5:7e:9c:85:
                    cb:e2:4f:4b:2e:93:4b:34:e3:15:7d:48:3b:23:2f:
                    1b:42:2c:7a:2d:74:16:04:c6:37:59:6f:4e:7a:08:
                    79:75:89:41:7a:31:5d:43:e0:e3:b5:57:a0:fa:af:
                    b3:cd:ca:e6:10:61:d9:39:fa:39:a4:11:82:79:96:
                    b1:ab:f8:44:59:6d:ff:d5:94:6e:98:9f:33:4e:8d:
                    f9:66:0f:63:3b:b1:01:a1:9b:77:99:6c:bc:d6:12:
                    47:fb:ed:e7:79:5d:94:75:99:8a:91:c2:92:b7:73:
                    7a:0c:b5:6f:6a:92:fb:7e:7e:fa:a1:76:65:1f:1d:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:05:6D:A9:C2:36:0A:D5:CE:51:1B:92:1F:8A:B2:80:48:27:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe80987d-45d4-367f-9834-dc031e64ee70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:b8:0e:b5:11:ad:1f:7f:e7:7c:0e:0a:35:c0:97:38:fa:
         98:b0:a0:f8:cf:74:f9:1c:e2:98:e7:01:00:02:d6:3e:06:a6:
         ad:57:1f:bf:6c:5d:04:71:3e:dd:89:a1:e2:d5:1c:02:a6:5e:
         90:a5:87:3a:a2:cb:32:fd:b5:d8:b4:cf:3e:84:43:1b:46:15:
         ef:7c:dc:c2:f8:17:72:c0:c3:54:1e:b2:98:00:75:83:43:bb:
         da:8a:00:43:4c:97:fd:08:e8:78:bd:89:8b:49:83:7c:da:67:
         9d:f3:b2:18:46:2f:63:b7:06:ae:da:36:26:91:e9:54:76:ae:
         66:c2:1d:e2:c2:1f:03:4f:a3:18:7e:83:f0:fb:38:40:61:f5:
         61:d6:21:d9:74:9a:fd:84:d0:5a:73:89:69:f0:6d:19:0d:92:
         6f:f3:ed:d6:30:25:c1:52:62:7e:69:1d:36:be:24:b2:49:92:
         97:4d:80:21:96:40:c9:2c:4d:5a:e1:7f:66:6f:da:fe:f4:52:
         1e:fb:2a:40:a3:0f:65:a7:9e:a7:66:03:19:33:c7:e3:ae:04:
         b3:74:39:bb:51:13:ec:8f:fe:da:fb:2e:84:8c:a7:a9:d9:ed:
         e4:95:03:e0:49:70:b2:97:2a:5e:84:fd:76:4e:75:ec:e6:43:
         35:31:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----