Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9ea8e4fc-dae6-330c-bc34-dc2869bbbc90.roa
File:                     9ea8e4fc-dae6-330c-bc34-dc2869bbbc90.roa (raw, json)
Hash identifier:          B54aAk/O7YecCYBTXnw6D5Qs1dIB4HQlC5dNJSMZmA8=
Subject key identifier:   BA:CE:1B:46:BD:B0:9B:34:FE:F1:7F:A4:19:6E:3E:2B:89:B4:47:91
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328583ECD8EDF7B3CF625E2FF197300
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9ea8e4fc-dae6-330c-bc34-dc2869bbbc90.roa
Signing time:             Thu 24 Mar 2022 13:53:16 +0000
ROA not before:           Thu 24 Mar 2022 13:53:16 +0000
ROA not after:            Thu 07 Nov 2024 05:00:00 +0000
asID:                     21859
IP address blocks:        107.151.248.0/22 maxlen: 22
                          69.165.76.0/23 maxlen: 23
                          198.44.165.0/24 maxlen: 24
                          198.44.166.0/23 maxlen: 23
                          107.151.252.0/23 maxlen: 23
                          107.151.240.0/21 maxlen: 21
                          107.151.224.0/20 maxlen: 20
                          107.151.199.0/24 maxlen: 24
                          198.44.168.0/22 maxlen: 22
                          198.44.172.0/22 maxlen: 22
                          198.44.176.0/22 maxlen: 22
                          198.44.180.0/22 maxlen: 22
                          198.44.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 17 Mar 2023 02:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cd:8e:df:7b:3c:f6:25:e2:ff:19:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 24 13:53:16 2022 GMT
            Not After : Nov  7 05:00:00 2024 GMT
        Subject: CN=c2d9371b-0e44-47e7-9a78-c48f9569c2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:34:00:ce:c9:18:57:d2:74:71:ba:27:11:
                    d1:2b:a5:53:eb:f8:74:63:ac:79:3f:cf:01:ad:ef:
                    96:2a:68:10:15:1b:c2:ce:cb:6b:58:71:b5:22:ed:
                    76:3d:11:90:bf:cf:c1:f1:e7:4c:50:f3:f9:6d:03:
                    3b:6b:bd:b0:ac:aa:c9:51:5c:c5:80:04:a5:be:7d:
                    37:8b:45:e2:39:ab:9d:ad:24:dd:9a:51:c6:ca:f2:
                    62:52:28:a0:98:0e:28:b1:24:fc:93:5b:b4:68:81:
                    84:65:00:84:06:c0:0b:7d:40:79:8b:54:75:56:ae:
                    39:73:7a:ae:da:2e:a5:11:c1:0d:8d:94:42:13:4c:
                    27:f1:1b:94:f7:89:21:4c:7f:6c:86:90:10:b8:a9:
                    3b:c0:54:70:99:ab:a5:41:06:af:60:e9:cf:ae:74:
                    32:95:53:e7:3c:cf:6c:05:ca:54:db:61:a8:00:2a:
                    99:d6:ad:7d:af:b3:b1:3e:d2:11:46:48:fa:c2:95:
                    5d:76:0a:4c:2f:49:86:98:34:e6:3f:59:a4:98:71:
                    1e:47:60:f9:92:ae:38:4e:bd:29:46:49:40:8c:b1:
                    b7:47:e6:09:78:d0:f8:c4:4d:1d:ee:a6:44:35:8e:
                    41:ed:0c:e5:ef:43:51:08:f0:8b:49:77:f1:ad:1d:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CE:1B:46:BD:B0:9B:34:FE:F1:7F:A4:19:6E:3E:2B:89:B4:47:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9ea8e4fc-dae6-330c-bc34-dc2869bbbc90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/23
                  107.151.199.0/24
                  107.151.224.0-107.151.253.255
                  198.44.165.0-198.44.187.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:cc:7c:3d:ce:26:f7:d3:37:ae:ed:1e:e5:3d:3a:10:a0:
         0e:63:07:89:00:5f:3c:97:00:9b:51:18:2d:52:1e:42:5d:a7:
         55:51:ba:f5:a2:41:e2:d4:a0:d8:3a:82:3a:27:27:42:e2:2c:
         5a:f8:96:dd:d1:60:7d:0e:fb:02:f2:b1:92:fd:50:04:09:ad:
         85:9b:60:db:33:16:20:17:e4:5f:7c:26:cd:4f:56:0d:85:46:
         72:a9:dd:2b:55:a7:03:9a:6d:02:ba:53:98:32:b2:50:0a:91:
         6e:e3:a0:9e:88:cf:75:14:fb:7f:6b:05:d6:a4:4f:f6:0c:7c:
         5a:0a:ce:26:9b:f7:ac:b2:7a:e2:9f:24:9a:f4:cc:f2:88:ee:
         b3:5d:f4:a5:1c:63:15:e3:05:62:72:a7:e5:79:d1:87:5a:a7:
         dc:b6:a6:68:98:5b:75:17:68:e1:88:f0:d3:c5:2a:3a:92:2f:
         e7:80:69:8c:23:9d:a3:b9:83:96:82:d3:ff:9e:e6:18:b2:ad:
         c4:3b:e9:5f:1a:d3:55:47:e9:6d:a4:9f:69:21:6c:31:06:f3:
         77:ef:a3:1f:7a:7d:da:6c:49:ce:60:47:16:53:7d:11:0c:11:
         a5:eb:c8:62:ba:87:09:1a:d1:cb:f8:f9:3a:1d:5f:9e:41:20:
         a4:e9:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org