Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/0747de21-60e7-3531-8086-d8c545d52787.roa
File:                     0747de21-60e7-3531-8086-d8c545d52787.roa (raw, json)
Hash identifier:          ZUODUYZikgiOKxdvgoFcBsLS+rDHtH3AkkJscG/ZSk4=
Subject key identifier:   DA:2E:8C:2B:95:3B:FA:41:8C:E3:69:26:C8:DC:19:0C:6F:A2:E5:BC
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F43285846580A972BB599027AD1E55CEF
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/0747de21-60e7-3531-8086-d8c545d52787.roa
Signing time:             Wed 26 Jun 2024 23:25:29 +0000
ROA not before:           Wed 26 Jun 2024 23:25:29 +0000
ROA not after:            Tue 24 Sep 2024 23:25:29 +0000
asID:                     30399
IP address blocks:        128.254.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 17:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:58:0a:97:2b:b5:99:02:7a:d1:e5:5c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Jun 26 23:25:29 2024 GMT
            Not After : Sep 24 23:25:29 2024 GMT
        Subject: CN=c5657678-e538-4ee4-b1df-01a4f453a675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:db:30:2c:0f:82:d9:d5:3f:f0:5a:9a:d5:
                    6f:6c:56:94:57:54:e9:b1:e6:55:5d:80:56:ba:26:
                    c8:99:2d:39:08:9f:86:b1:8c:c5:c2:78:a2:05:db:
                    68:d8:4b:be:af:4e:e7:d9:68:6b:2f:fe:8f:c5:3d:
                    02:8f:4e:6c:d3:6f:13:ac:a9:10:53:74:45:48:bb:
                    56:0e:61:14:37:8c:f3:ae:24:ca:cf:53:f6:39:d7:
                    15:bd:49:d6:71:3c:6a:91:83:ee:b5:17:46:e2:a4:
                    b0:8b:71:30:23:5e:3c:33:84:bf:a0:62:f4:a5:de:
                    84:27:c5:df:f9:29:c4:eb:8e:eb:bd:82:02:83:f2:
                    05:5e:be:0e:bb:9f:75:8e:14:10:fc:97:54:63:bb:
                    93:02:ad:22:07:a3:39:be:72:dc:f0:93:7a:1f:32:
                    f5:29:03:a9:a6:58:bd:57:54:50:fa:0b:2a:53:b5:
                    63:6a:ac:bf:bf:d6:60:80:de:da:c1:b8:b9:c7:3a:
                    e0:62:38:35:da:e6:9d:65:5a:b0:bb:2d:d8:50:01:
                    97:5f:53:4d:32:15:5d:74:66:9d:66:d1:fd:c0:45:
                    64:fa:16:d3:05:f8:5a:61:39:8c:87:a1:79:fe:a0:
                    6a:f2:0e:5e:6f:13:30:69:31:60:73:c5:70:8f:41:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2E:8C:2B:95:3B:FA:41:8C:E3:69:26:C8:DC:19:0C:6F:A2:E5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/0747de21-60e7-3531-8086-d8c545d52787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:a3:0e:81:09:c3:bb:1d:ac:fb:cf:b5:c8:30:e9:52:10:
         38:d9:7b:f6:0d:7e:29:55:8f:b5:b2:11:00:77:4e:20:50:7b:
         15:c0:21:30:f7:fa:d4:f6:4b:77:a7:c7:bf:89:b3:8a:b9:6b:
         73:16:3b:1b:5c:ee:3b:c7:0b:ae:c4:d3:14:04:9b:0f:19:77:
         3f:a9:c7:df:bd:86:18:4f:5f:a7:ac:db:a0:b3:23:a5:ef:81:
         ea:17:46:76:e0:cd:91:98:b8:b9:5d:34:38:e3:9d:5e:e6:73:
         4b:a5:a3:61:d1:39:27:61:1f:10:c0:e9:a1:81:58:d8:f8:ef:
         7d:70:19:d6:ce:bd:86:9c:1d:2f:f3:56:97:58:5e:3e:a6:7d:
         ad:6a:02:bf:c5:48:4b:92:c6:59:b2:b8:df:bf:65:cf:51:52:
         4e:73:44:d6:8c:45:33:66:cb:af:de:f6:14:ef:42:b7:0e:34:
         85:e9:5b:64:8f:2f:af:04:85:5c:0c:0c:10:14:ac:d4:cc:7b:
         21:ae:35:48:1a:54:48:40:0d:82:4e:a5:d9:a5:b3:92:ef:52:
         fe:6b:85:d4:a3:ee:17:5f:ea:a0:73:35:73:57:c8:b3:88:19:
         e8:a8:53:e3:96:94:e8:e0:5c:89:60:56:1b:e7:80:29:73:02:
         0c:df:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 20:06:09 2024 by rpki-client on console-fra.rpki-client.org