Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9a388f74-5a14-3c7a-946b-430cd7e185fe.roa
File:                     9a388f74-5a14-3c7a-946b-430cd7e185fe.roa (raw, json)
Hash identifier:          UqZydqLVrhC+bX+KzfIybT4LmosKHNoArPuEYkxXaWE=
Subject key identifier:   4C:D5:FE:87:20:1D:85:B9:5A:C6:B5:62:42:38:EA:94:54:DB:62:37
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285846B88A7A8E77B54F0A1F7AD600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9a388f74-5a14-3c7a-946b-430cd7e185fe.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     54203
IP address blocks:        104.36.178.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 13:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:7a:8e:77:b5:4f:0a:1f:7a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=094a491a-ce43-474c-9323-75f777332f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:9d:ed:3a:db:bf:10:61:50:77:5f:0b:ae:
                    5a:dc:8f:ff:90:a1:82:1e:e5:ce:25:7e:f2:3a:77:
                    5c:30:a4:19:92:a6:82:76:80:99:96:be:36:43:04:
                    7f:bf:56:0e:da:a5:07:c6:cf:af:8f:dc:0b:10:6a:
                    5b:94:67:f6:80:4d:fa:f4:bc:0f:74:82:46:bc:7d:
                    78:5c:77:47:d2:3d:49:b9:b7:1f:8b:fc:fe:73:a3:
                    f4:c9:4e:e5:68:d5:a7:f8:67:2d:50:b1:b4:ea:79:
                    aa:d3:e7:b7:43:a8:fe:e9:36:81:49:f3:2c:9f:1a:
                    56:26:63:13:a0:8a:3b:2d:42:cf:2a:98:da:b4:c3:
                    4f:e9:a3:ae:27:3e:d8:c7:72:e4:68:d4:4f:93:eb:
                    23:05:fa:d6:93:41:2d:f7:cc:db:61:1c:f0:62:f2:
                    8a:d4:b1:9c:93:b1:62:f6:15:22:c2:03:7a:c5:47:
                    41:5c:03:25:60:90:09:1f:0f:86:ab:3e:01:b1:b4:
                    7f:41:92:b0:48:f6:87:a9:f6:a2:aa:2c:68:2c:2c:
                    1a:64:9c:55:6d:96:dd:3f:36:31:ac:71:94:9f:43:
                    11:17:c8:eb:ff:2b:0b:aa:99:88:e7:8d:e6:3f:23:
                    f3:08:96:a9:31:2d:8c:b8:92:79:f8:62:39:01:9d:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D5:FE:87:20:1D:85:B9:5A:C6:B5:62:42:38:EA:94:54:DB:62:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9a388f74-5a14-3c7a-946b-430cd7e185fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:29:19:da:4f:2b:2d:e1:14:2f:4a:83:3d:37:04:a8:19:53:
         d5:cb:4c:49:77:e8:c6:9f:0c:56:d7:99:ff:db:4d:a2:a7:42:
         e2:46:65:20:06:60:d1:37:58:0b:df:3f:af:cc:67:e9:ff:46:
         38:27:16:40:24:6e:b3:1d:b4:0f:e3:6c:5a:2d:4f:f1:0b:18:
         87:17:74:44:ed:84:8c:0a:4b:b3:6e:c1:72:e1:6b:6c:d2:3b:
         07:55:45:d9:6a:e2:3a:bb:7a:59:3d:dc:b8:84:32:8f:f5:68:
         ad:ee:d9:dc:41:34:96:41:66:59:93:fd:05:b3:20:b6:a5:a5:
         57:19:40:36:91:66:7a:41:ec:b3:6d:c6:ed:76:a8:9c:c6:62:
         53:a3:e9:33:06:d1:0a:43:bc:a2:38:47:5a:57:76:20:ed:44:
         fe:58:a1:f6:d7:8b:b4:bd:6d:c8:fd:ca:57:57:90:f9:34:0e:
         b3:20:ff:72:c0:b6:21:f6:51:64:46:80:57:8c:7c:fb:f6:28:
         fb:e3:03:6e:68:a4:41:24:ff:19:ae:72:d9:21:9d:76:fc:f4:
         87:13:2a:3b:81:16:de:6f:a8:13:ac:87:78:e4:e3:c5:06:7c:
         aa:b1:00:20:7d:98:52:71:e4:b9:80:2a:5a:6c:2a:26:93:ca:
         97:9b:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 17:33:28 2024 by rpki-client on console-ams.rpki-client.org