Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/c33960cc-6429-3c41-afff-289ff0313f0c.roa
File:                     c33960cc-6429-3c41-afff-289ff0313f0c.roa (raw, json)
Hash identifier:          Fx6L167j2GTpkacYBp0KQBlt2IX0gvkRr3cdVZZwn9o=
Subject key identifier:   9C:CF:43:44:CC:2E:8E:E1:05:20:25:CE:87:A6:42:30:39:54:22:19
Certificate issuer:       /CN=09729117-c725-49ca-9a64-f10a055403c3
Certificate serial:       010D0C9F43285845963349E537214ED0A04F3200
Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/c33960cc-6429-3c41-afff-289ff0313f0c.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     54528
IP address blocks:        45.41.234.0/24 maxlen: 32
                          2602:80b:b000::/44 maxlen: 64

Validation:               Failed, certificate revoked on Thu 30 May 2024 12:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:49:e5:37:21:4e:d0:a0:4f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=26f581d0-bf01-4019-8788-6c195174e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:3d:95:15:42:2d:e5:14:b2:df:70:53:4a:
                    8f:6e:e7:74:77:19:8c:75:51:d0:e7:77:22:3b:cd:
                    d5:75:d6:36:62:af:8e:e6:09:b2:40:d4:3b:2e:f2:
                    e1:d6:35:17:4a:22:2b:43:5e:56:93:b0:95:8c:29:
                    78:3e:b4:f2:df:36:17:f0:09:ce:c5:8a:6e:ae:cd:
                    00:d3:cd:a9:df:bd:b4:fd:7a:7e:79:37:c9:4a:78:
                    52:c9:b7:94:28:55:1a:71:68:51:99:8d:23:34:e4:
                    ab:e0:fc:10:07:86:ba:f6:17:03:21:f9:db:01:c4:
                    7a:b5:7a:50:08:18:20:11:9c:ae:a9:db:68:bd:4b:
                    2f:e5:5b:5d:e5:92:0a:44:f6:61:ae:c9:d5:91:64:
                    37:e7:3a:c7:d4:3b:b7:09:4f:a1:98:76:88:67:d0:
                    6b:3a:bc:5c:1b:c0:ed:cd:b8:2a:e4:03:97:6f:3c:
                    ba:c4:18:ed:51:33:53:7c:fc:e6:d4:05:d3:90:e9:
                    b1:cc:fe:2c:61:cf:fd:9d:11:65:89:c7:4c:8c:18:
                    c5:c7:58:9d:dd:2a:eb:1d:ce:7b:50:e9:f3:30:5b:
                    3a:09:dc:c0:f8:03:e4:a3:aa:0e:a2:9f:5d:07:45:
                    0e:63:5c:3d:29:0e:8a:f4:64:b2:77:7d:a9:1d:bb:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:43:44:CC:2E:8E:E1:05:20:25:CE:87:A6:42:30:39:54:22:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/c33960cc-6429-3c41-afff-289ff0313f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl

            X509v3 Authority Key Identifier:
                keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.234.0/24
                IPv6:
                  2602:80b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:39:8d:01:66:b9:3d:ad:b6:24:0b:fd:30:66:39:e4:25:
         30:ab:c4:4d:d6:18:8d:42:cf:04:45:7f:fa:58:ea:18:53:e7:
         6b:34:96:f4:00:0c:94:93:9d:7b:d0:91:fc:92:dd:df:1c:47:
         1b:11:4c:bc:82:88:69:da:98:1d:d0:e7:63:89:80:06:5c:c1:
         55:76:55:41:2c:bc:72:78:89:19:f9:19:11:e6:1d:a2:8c:63:
         86:11:b2:e9:f4:9f:2f:11:d7:d9:dc:09:db:77:c8:97:ce:60:
         31:b3:d8:04:f2:02:02:8b:47:bd:00:ed:78:69:24:3e:56:02:
         8e:a7:ef:e1:97:cc:98:23:6d:0a:ee:81:c7:ee:6f:4f:9b:8f:
         f2:e5:16:eb:e0:db:6a:ad:75:ae:ad:7d:8c:54:a2:3e:95:30:
         66:b9:90:dd:ab:da:d3:d9:36:b1:a6:87:c1:5a:82:6d:19:d3:
         c3:80:5e:e1:24:e0:68:5e:c8:59:60:07:2b:a8:e0:be:e9:36:
         72:fd:c2:8a:35:c5:5c:cd:8e:9b:45:39:1f:2e:2d:66:29:6a:
         af:bf:c1:24:27:e5:36:bc:aa:91:c6:93:ba:ff:b1:78:d9:16:
         07:f0:c6:58:12:00:22:88:60:78:c5:0f:d0:80:9f:46:06:f1:
         b7:35:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org