Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8b7e9619-e7c0-3846-b8cb-5f79b87b18b6.roa
File:                     8b7e9619-e7c0-3846-b8cb-5f79b87b18b6.roa (raw, json)
Hash identifier:          cyxnDRW/4Z+IopXKgoS7HN0KVOE6xRalKO7B8E3lzUs=
Subject key identifier:   BF:F3:7F:16:5D:5C:43:89:D9:59:88:25:63:4E:87:75:23:43:2C:33
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4DFDBC9627A7544EDEB80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8b7e9619-e7c0-3846-b8cb-5f79b87b18b6.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 06:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:df:db:c9:62:7a:75:44:ed:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=b669e52b-91ec-4a24-94f3-4514aa0822da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:18:db:7a:09:f6:0a:c7:48:3b:e8:03:32:
                    a2:5e:bc:26:e0:dd:df:af:96:1f:88:7f:a6:c7:77:
                    d0:8a:0e:06:99:58:3c:81:46:ee:dd:f6:cc:bc:a5:
                    8e:76:14:05:22:59:51:5e:61:7e:28:e6:85:c6:ed:
                    fa:c8:9b:98:1b:41:56:a7:e9:c8:22:48:b2:d3:15:
                    2a:6b:bd:1f:aa:2a:9f:ca:e6:b6:88:78:df:87:13:
                    9e:54:1c:15:12:77:42:a6:71:79:8a:8b:9f:46:07:
                    e8:2d:26:c1:7d:82:a1:a6:70:b2:65:4d:75:ac:f1:
                    24:de:76:5e:21:a1:57:4c:95:81:24:b5:2d:c0:27:
                    e2:ac:31:05:74:36:3a:68:6f:49:8e:6c:04:a7:d9:
                    04:be:60:31:cb:0a:54:fa:68:3d:e4:0d:86:fa:e7:
                    98:d3:57:fc:9b:1b:5e:c4:79:41:6c:65:9a:0f:20:
                    72:9e:3f:ea:94:9e:65:53:35:bb:4a:53:5a:49:f1:
                    86:63:df:4a:bc:b7:34:f1:86:cd:b7:89:37:cc:9b:
                    ec:90:d7:c2:53:df:98:6f:bf:2d:33:7e:46:72:17:
                    77:fc:e1:bc:45:1c:2f:6d:28:dd:ff:94:8b:52:b1:
                    bb:f3:54:7a:d4:4d:ff:3f:ff:ef:f6:16:c2:29:ff:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:7F:16:5D:5C:43:89:D9:59:88:25:63:4E:87:75:23:43:2C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8b7e9619-e7c0-3846-b8cb-5f79b87b18b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:a3:8b:55:a3:d7:6f:9a:99:2a:22:6d:d0:50:b5:a5:3e:
         fc:ea:42:4f:4b:15:45:26:50:df:d3:6b:cb:79:a9:64:c1:af:
         3c:f6:23:18:93:d9:b9:93:5a:0d:80:67:10:ba:ea:cb:9f:76:
         48:8e:81:1c:b7:d1:fb:82:94:3c:de:fe:a1:38:fb:88:88:b4:
         06:d4:c0:b8:fa:3c:92:52:b2:71:84:14:8c:93:50:a2:ec:e6:
         15:83:15:c4:c9:c2:01:53:c3:a5:97:89:55:ea:d3:d3:c5:7e:
         ac:0c:e7:55:88:88:b8:23:62:6e:87:73:9b:49:8d:da:b6:71:
         c6:7d:78:2a:d5:7d:51:00:d3:e1:7d:b9:85:51:77:fd:c4:21:
         20:18:7e:49:05:fc:0b:64:83:c3:66:31:d0:bd:18:3c:e4:51:
         1d:28:a1:00:08:f8:97:57:37:5b:13:7a:34:a6:49:0f:76:0a:
         60:b7:97:e1:0f:f5:82:62:c0:5b:9d:4d:5f:e5:e5:1d:84:0e:
         14:cc:a0:a9:e4:ea:db:7c:ef:d2:1b:93:49:f2:13:6d:de:58:
         f0:e3:5d:72:bb:68:18:35:79:80:5f:ae:46:2c:66:a6:17:0e:
         ab:6c:ec:97:fa:37:05:88:3c:3d:c3:ed:f9:28:2e:cd:eb:b4:
         75:a9:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org