Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/11a37bb1-c315-3034-9914-6c5da2f2f67c.roa
File:                     11a37bb1-c315-3034-9914-6c5da2f2f67c.roa (raw, json)
Hash identifier:          nS4/GwbrccSjN4ebjCoeqypFv+eLG7bkTFOH5KFM8Eo=
Subject key identifier:   F3:82:DD:D5:4F:13:6F:24:6A:82:DF:F8:97:6D:1D:22:78:B6:93:5E
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E3AA78A243D187E36980
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/11a37bb1-c315-3034-9914-6c5da2f2f67c.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 06:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e3:aa:78:a2:43:d1:87:e3:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=6f127abc-f5ba-48cf-b274-d2d6633aa30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:e2:dd:3e:18:57:5c:3f:83:a4:f9:12:99:
                    a9:12:f3:c1:8f:a6:7e:09:94:d3:3d:c0:06:95:f6:
                    b4:85:97:ae:56:09:74:15:3d:68:f4:54:7d:58:2f:
                    fa:62:c7:5c:9a:4e:7d:48:07:05:b7:45:c0:f1:42:
                    3a:f6:e0:91:0c:25:7e:d2:b3:43:9e:99:70:80:19:
                    ad:33:d6:e2:b1:9f:a0:ea:01:2c:a5:5f:95:7a:8b:
                    65:bd:a6:fd:89:48:69:81:28:9a:49:bb:05:fa:c6:
                    38:84:1d:88:5a:b4:d7:63:1d:4b:4a:58:6d:85:65:
                    1a:8b:ab:d6:6a:54:b8:fb:d1:e7:7f:c3:5e:54:cc:
                    6e:b0:92:49:32:0e:1d:b3:65:84:53:ea:45:ff:9a:
                    ac:7b:44:e4:55:c0:44:db:95:8b:63:60:2f:c7:de:
                    55:31:5a:4d:ce:5b:79:cf:c5:27:25:08:63:56:a2:
                    d3:47:16:15:30:f4:13:27:4e:b7:f1:7d:52:3b:3d:
                    7c:da:ec:95:ff:01:29:03:77:02:14:a3:5f:cc:dc:
                    24:ad:38:bd:61:85:3a:6d:90:c1:b0:07:27:02:c6:
                    0a:7c:19:6e:fd:31:65:36:4c:86:6c:c0:fb:c9:84:
                    6c:f6:c4:13:2b:b6:9b:19:a0:85:5e:59:ab:1e:fb:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:DD:D5:4F:13:6F:24:6A:82:DF:F8:97:6D:1D:22:78:B6:93:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/11a37bb1-c315-3034-9914-6c5da2f2f67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:71:be:ec:0a:e7:f6:0f:dd:e2:9f:e9:17:23:75:b6:54:
         52:82:f4:c5:f9:aa:36:bc:fb:47:34:72:70:b2:81:86:f1:41:
         2c:3e:90:dc:ce:d0:a7:0a:d0:c9:d2:c1:c8:df:19:d0:0c:a3:
         fc:c3:df:a4:3d:e2:9f:1e:0b:b6:c3:61:ee:d2:2c:f2:ad:af:
         8a:06:87:96:1e:bb:c2:3d:f2:1c:2b:d7:fd:01:d6:34:44:60:
         09:55:6d:71:4d:37:e8:89:7a:9c:0f:5f:d1:d6:50:a9:da:19:
         fd:0e:ad:7e:b3:ce:9a:c7:fa:1b:17:15:e7:02:2d:f7:47:33:
         53:a2:ce:94:09:69:73:32:86:6f:85:7d:a2:03:8a:fb:35:9b:
         5d:44:60:ae:d7:85:3a:56:60:0e:d3:ac:2d:b3:71:39:cb:26:
         11:95:a7:a4:a5:a5:02:e0:5e:f1:46:62:1f:27:bc:4a:c5:dd:
         f4:40:c9:f7:93:52:d8:f4:51:58:a5:57:da:42:68:e8:7e:a5:
         22:28:71:19:b8:d0:c3:ba:cd:fc:ce:c4:13:45:a2:7f:b5:7d:
         26:b7:2f:9b:b3:e1:e1:e8:96:36:d5:0a:bb:ee:57:2c:3c:c4:
         96:e3:69:d0:76:7a:42:e5:cc:90:1f:b5:6b:81:4d:6e:14:cc:
         ec:bf:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org