Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30bef65d-033f-3b76-ae81-b0e81377db3a.roa
File:                     30bef65d-033f-3b76-ae81-b0e81377db3a.roa (raw, json)
Hash identifier:          UNeHhCXR6FLnZaDZ50lo46XhhwGMUDXkA7+73xHVv2g=
Subject key identifier:   92:24:60:CD:0A:46:78:17:56:D9:90:F8:F7:F6:17:09:16:A4:A7:28
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584648DF0D0FBEB42359DCF3B814
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30bef65d-033f-3b76-ae81-b0e81377db3a.roa
Signing time:             Fri 21 Jun 2024 13:00:33 +0000
ROA not before:           Fri 21 Jun 2024 13:00:33 +0000
ROA not after:            Thu 19 Sep 2024 13:00:33 +0000
asID:                     134365
IP address blocks:        69.165.77.0/24 maxlen: 24
                          198.44.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 02:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:48:df:0d:0f:be:b4:23:59:dc:f3:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jun 21 13:00:33 2024 GMT
            Not After : Sep 19 13:00:33 2024 GMT
        Subject: CN=ca0cca25-5a12-45a3-9c4e-e148f9fbcee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:6c:d6:bf:3c:77:05:21:64:09:33:58:65:
                    bc:f0:19:7b:6b:66:fc:e8:7c:8b:3f:e5:b3:53:94:
                    ff:37:96:94:9c:a8:4d:d8:fa:18:c5:70:b0:97:7c:
                    d0:83:48:39:f8:9d:e9:f1:73:16:51:8a:9f:10:60:
                    b2:97:5a:6c:49:c2:67:16:3b:da:64:8a:63:ce:48:
                    e3:93:58:1f:ea:b3:98:1d:3f:e2:4a:47:95:05:5a:
                    07:7e:b5:a5:6d:b7:38:46:25:7e:c4:1c:11:1a:81:
                    fb:5e:5a:29:c0:31:f6:80:ed:fe:91:f5:31:c0:39:
                    09:26:00:e2:74:f2:ef:3e:90:2e:66:da:43:09:96:
                    fe:cc:d8:0c:04:28:10:13:dc:03:1a:75:72:65:12:
                    f8:84:12:e4:1c:da:e3:25:9c:e7:92:48:65:97:f3:
                    d3:ac:9f:a2:83:c4:e0:91:00:54:78:53:02:92:13:
                    bd:77:57:28:34:f2:e6:ee:17:ce:a3:0a:be:fb:a5:
                    88:fb:3a:f1:98:e3:d6:af:f5:c3:47:ef:49:80:46:
                    71:74:37:53:86:9d:dc:74:5b:15:7e:3e:8a:b7:bb:
                    0d:92:63:c0:a5:e5:5f:dc:dd:c2:be:c0:54:da:a3:
                    35:d1:fb:0c:ba:d6:07:9f:01:2a:1e:63:5f:5d:f3:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:24:60:CD:0A:46:78:17:56:D9:90:F8:F7:F6:17:09:16:A4:A7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30bef65d-033f-3b76-ae81-b0e81377db3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.77.0/24
                  198.44.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:94:a3:6b:ce:ae:40:04:88:45:64:ba:36:f3:c7:ee:1c:4f:
         d2:62:b8:62:d5:aa:8b:fc:db:ed:9e:4e:b8:a0:7c:e3:56:d9:
         fb:70:80:15:e1:6b:82:39:b1:8f:fa:ae:59:84:d9:52:e6:78:
         dc:8a:0e:2b:7c:ef:d2:05:71:8c:16:34:d8:9c:92:f9:4c:d7:
         d3:46:73:62:bb:0b:45:3e:58:fb:06:2d:f5:b3:f0:97:8f:cf:
         43:3f:9f:d8:44:e1:75:38:18:6f:87:f0:ce:2b:f8:1c:83:4d:
         41:e4:99:dc:2e:78:1e:ec:3a:25:3c:aa:f2:67:d4:fb:9b:f6:
         eb:3b:a8:3f:0e:13:c4:ec:ff:29:58:86:54:ce:97:dd:9b:47:
         fd:dd:33:33:00:3b:25:27:1a:75:66:74:1a:8e:55:62:08:70:
         cc:19:6b:81:d2:95:25:bc:7f:7e:32:1e:d3:bb:03:e3:cc:2c:
         15:39:bb:49:60:1f:4a:ff:ea:51:3d:4e:0b:b0:80:f5:1a:ae:
         98:f0:5f:c6:16:e1:27:42:44:c7:3d:35:ed:84:2d:12:d5:d5:
         70:23:60:d2:4d:11:6a:29:6b:14:38:88:3e:05:04:7d:80:0e:
         87:25:f2:a9:8f:c2:a1:5f:97:06:96:5d:3f:c9:97:cb:5e:c6:
         5b:df:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 04:58:19 2024 by rpki-client on console-ams.rpki-client.org