Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/cab2d031-8484-3917-a88d-0f366e4663f9.roa
File:                     cab2d031-8484-3917-a88d-0f366e4663f9.roa (raw, json)
Hash identifier:          nXrwhQeuda3AdSdJjR+pEky7OWi5Erat1sP/ZQuv5bM=
Subject key identifier:   68:E7:04:4B:A8:12:4D:19:D0:6D:D2:05:7B:B8:89:B4:10:7E:85:2F
Certificate issuer:       /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial:       010D0C9F43285845D1B38165F592A21083466C50
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/cab2d031-8484-3917-a88d-0f366e4663f9.roa
Signing time:             Thu 09 May 2024 20:31:42 +0000
ROA not before:           Thu 09 May 2024 20:31:42 +0000
ROA not after:            Wed 07 Aug 2024 20:31:42 +0000
asID:                     399970
IP address blocks:        149.112.154.0/25 maxlen: 25
                          149.112.155.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 10 May 2024 13:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:b3:81:65:f5:92:a2:10:83:46:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
        Validity
            Not Before: May  9 20:31:42 2024 GMT
            Not After : Aug  7 20:31:42 2024 GMT
        Subject: CN=7736fd7e-60a4-46b9-b30f-3bb5661b3e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:34:55:d7:87:b5:29:2e:83:5c:64:93:88:
                    43:4f:91:ad:0f:69:a6:99:96:8e:8d:fe:0b:7e:a6:
                    2e:d0:52:86:ee:ba:67:0e:fe:bd:77:16:30:f5:ea:
                    34:53:5d:6f:81:f9:ef:8c:02:74:2b:81:ce:a6:2e:
                    b7:2c:29:01:23:d9:f9:67:7a:b2:af:b7:ac:46:ad:
                    3d:b2:0a:2c:0c:b5:59:c9:b8:b2:ec:df:5a:ab:c3:
                    c1:bb:5a:06:f0:87:95:2b:ef:1f:09:70:a9:c2:48:
                    54:73:8d:de:63:83:4c:cc:7b:e7:95:4f:68:4f:56:
                    c1:a1:91:e0:0a:0d:84:93:8f:76:6d:eb:ec:a2:4c:
                    dd:46:07:9b:7e:e7:94:43:6f:17:a8:13:3b:81:a5:
                    d3:c6:cb:90:7d:63:ab:e2:c4:28:cd:42:96:ce:83:
                    fd:db:66:5f:2f:5b:ac:5e:8f:47:d7:c9:6b:ff:ac:
                    2d:46:e6:5d:ed:ec:38:b3:c5:65:ab:ed:25:fb:cc:
                    32:f9:79:fe:7a:c8:4c:76:8a:a7:11:37:fb:6b:a8:
                    bd:2d:21:e3:23:f4:0b:77:bf:62:bc:f5:ed:6f:c1:
                    e4:11:cb:76:dc:f6:ef:d4:f6:ba:06:9b:3d:52:7c:
                    bf:17:d5:ff:1c:1f:e5:c9:1e:e1:d5:8d:8e:b4:86:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E7:04:4B:A8:12:4D:19:D0:6D:D2:05:7B:B8:89:B4:10:7E:85:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/cab2d031-8484-3917-a88d-0f366e4663f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl

            X509v3 Authority Key Identifier:
                keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/25
                  149.112.155.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:e5:2f:61:80:3a:a6:48:ac:2e:95:1a:33:57:ed:59:d7:
         7e:f6:f6:21:6f:18:52:fb:6e:42:64:01:e6:fe:db:23:37:1f:
         84:4e:a6:27:70:67:b9:24:83:48:c7:cb:7d:33:25:c2:ee:65:
         58:d2:69:6f:95:35:47:88:e3:b7:45:8c:c2:3d:43:8d:43:b9:
         4c:51:9a:ff:7f:45:d1:dd:ff:c5:f0:9b:d4:07:06:40:65:18:
         75:0d:2e:06:c1:96:0c:a8:1f:8d:75:23:2f:22:b9:9e:03:05:
         ed:d9:ab:e3:00:c1:da:28:e7:b5:71:67:3a:1e:b8:a2:f9:52:
         0d:58:82:8f:1a:fb:65:a7:ee:ad:28:1f:79:2e:df:38:17:6f:
         a9:00:c5:46:3d:ce:79:01:6d:68:64:41:32:b6:1d:0c:73:01:
         c9:41:85:d1:cd:85:f2:2f:5d:88:b7:11:b0:df:3d:51:7c:12:
         b6:f2:1e:a7:43:33:84:4a:39:91:27:74:f2:15:bb:48:33:3a:
         e4:95:4b:f7:35:69:24:73:cd:33:dd:d3:fb:84:5f:5d:64:af:
         7d:c0:7c:f7:c6:7b:fd:1e:f3:fb:99:b5:78:c9:27:ec:f2:1d:
         bc:43:38:3b:3c:b6:92:39:0d:fd:07:8b:1c:d4:18:20:0b:30:
         59:8e:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org