Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c2b57fba-f1b4-31bc-b781-60f8d32974c2.roa
File:                     c2b57fba-f1b4-31bc-b781-60f8d32974c2.roa (raw, json)
Hash identifier:          reCCG0QAitCZ817DNF4CCbsagHjwAmQBe8WVTSsX9wU=
Subject key identifier:   12:33:59:A2:DD:24:07:4F:BC:3E:DD:B8:44:D4:7D:51:FA:A2:3F:91
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F432858478D10381BC31928F7E7D23A80
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c2b57fba-f1b4-31bc-b781-60f8d32974c2.roa
Signing time:             Tue 15 Oct 2024 16:01:36 +0000
ROA not before:           Tue 15 Oct 2024 16:01:36 +0000
ROA not after:            Mon 13 Jan 2025 17:01:36 +0000
asID:                     398395
IP address blocks:        23.190.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 21:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:10:38:1b:c3:19:28:f7:e7:d2:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Oct 15 16:01:36 2024 GMT
            Not After : Jan 13 17:01:36 2025 GMT
        Subject: CN=2e2136c6-24a2-4fe5-901a-55357cb8869e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:42:74:cc:b0:6c:77:28:8a:68:8c:78:0f:
                    71:e0:d2:c6:ff:b3:82:1e:53:c6:2b:48:42:4b:8b:
                    b1:9b:61:81:0d:17:a4:b8:c4:2e:64:a3:ce:0e:f2:
                    47:79:a7:03:f9:6f:37:3a:72:44:c3:24:d4:4e:8f:
                    6e:65:ed:2c:dc:09:fd:ca:02:5d:66:14:65:11:7d:
                    bf:5b:64:84:df:95:23:07:4f:f7:5d:05:4f:47:57:
                    fb:9a:27:83:05:11:c4:91:8a:39:81:ee:91:19:14:
                    66:31:72:e3:c3:83:f6:90:af:9f:e9:79:c2:0b:74:
                    84:d4:d0:ac:15:90:9a:29:74:42:d6:5d:ea:64:62:
                    6d:10:8b:c8:f6:8d:05:36:8e:1d:33:96:91:f1:1e:
                    5d:bb:28:01:ae:31:6f:21:e0:27:4d:46:af:b5:f4:
                    a8:6d:81:b5:dc:65:f9:27:f4:98:6b:c9:12:37:fe:
                    03:71:16:53:b7:d2:0f:e7:94:f1:75:a8:e9:67:c1:
                    e9:be:c9:53:05:60:24:62:53:a7:b5:ad:ff:bb:74:
                    fa:bf:ae:38:40:c8:eb:fc:da:c6:7d:ac:dc:9a:e9:
                    69:f8:82:79:5e:21:44:8e:48:53:d4:04:d0:d5:64:
                    75:7e:e1:9b:b7:9c:8f:2e:6e:72:3b:f6:5f:b8:bd:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:59:A2:DD:24:07:4F:BC:3E:DD:B8:44:D4:7D:51:FA:A2:3F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/c2b57fba-f1b4-31bc-b781-60f8d32974c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:4d:b4:aa:c5:39:39:b8:9a:22:36:06:7c:0f:2b:1f:69:
         67:40:8d:26:9b:26:75:99:b7:ac:fb:31:1b:29:0f:52:c4:fe:
         d9:11:6d:7b:44:0e:28:79:dc:93:4b:5d:7a:ae:57:49:ee:dd:
         f2:25:1f:a7:42:3d:71:3d:17:e8:13:93:4e:1a:2a:02:7f:aa:
         e8:c2:d9:02:a6:1b:e2:88:ed:ba:dd:ab:dd:4c:82:c0:0a:07:
         c1:5e:69:e2:64:39:d7:b1:a5:d5:05:05:ea:a4:8b:03:dc:1f:
         81:a9:bc:aa:e7:e1:b2:38:58:f5:7c:47:c6:e4:cb:4a:b5:64:
         11:9c:ee:92:77:f1:53:d6:97:02:e3:04:73:ed:f1:d9:bc:29:
         21:8b:3a:dc:4e:92:2e:1e:f0:06:ad:36:bf:26:67:4b:26:61:
         ce:87:cf:4e:2d:3d:50:17:31:cd:f2:1e:b6:2a:33:c2:e7:80:
         15:ac:e3:72:c6:42:78:6e:bc:7f:ca:1d:18:7e:fb:2b:db:4b:
         9e:07:e0:94:43:20:64:33:d5:02:51:62:f3:74:1a:98:26:f5:
         5e:c9:e2:88:73:b4:88:d9:b5:f8:9c:ca:d0:ca:68:2b:6b:bd:
         60:f4:44:a6:97:68:01:1e:3a:cd:b0:22:37:d6:21:55:6c:e2:
         97:2f:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----