Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/de97d4e0-7682-34d9-8a42-f3359c3e33ee.roa
File:                     de97d4e0-7682-34d9-8a42-f3359c3e33ee.roa (raw, json)
Hash identifier:          GkRAfBmN0akLm61IbaRV9BhClkrKImkBcuIhhDIw988=
Subject key identifier:   89:F8:85:09:61:23:DB:CF:32:55:BE:55:B8:F8:97:6F:7E:44:49:82
Certificate issuer:       /CN=b1a04f2a-d55f-44cd-8adb-3fb3fd855b83
Certificate serial:       010D0C9F43285845FB094F5603F89EF99A318880
Authority key identifier: 33:5C:AA:32:73:E4:16:E9:CA:CD:36:58:48:A8:96:9A:40:77:4E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/de97d4e0-7682-34d9-8a42-f3359c3e33ee.roa
Signing time:             Fri 24 May 2024 15:52:44 +0000
ROA not before:           Fri 24 May 2024 15:52:44 +0000
ROA not after:            Thu 22 Aug 2024 15:52:44 +0000
asID:                     18747
IP address blocks:        200.62.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 19:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fb:09:4f:56:03:f8:9e:f9:9a:31:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a04f2a-d55f-44cd-8adb-3fb3fd855b83
        Validity
            Not Before: May 24 15:52:44 2024 GMT
            Not After : Aug 22 15:52:44 2024 GMT
        Subject: CN=ccefd653-0136-490e-b0c1-791a0d3d29ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f0:0b:d8:69:6c:23:3f:76:7d:91:16:e3:2d:
                    a9:6e:14:39:00:a7:d7:72:87:e8:cb:e0:2d:4e:2e:
                    7c:5a:97:f5:df:c9:8c:8a:e7:1c:e4:46:4e:f8:77:
                    de:79:62:e3:6a:8a:fa:df:d4:d0:4d:13:0f:83:61:
                    74:4e:e5:c4:52:e7:65:79:2f:1a:ee:9a:2c:33:0d:
                    0b:91:87:51:e3:4c:99:ff:8e:58:9a:5b:9f:5a:00:
                    eb:2f:0d:df:3b:e6:60:7d:f1:13:d9:99:13:50:6b:
                    1f:62:9d:f1:17:ee:c7:1e:27:f3:78:fa:31:43:41:
                    1b:f8:35:fe:7b:60:d3:09:c6:80:77:8d:67:ba:6c:
                    3c:39:bf:6e:fe:ed:c2:03:d7:f6:79:24:55:f0:9d:
                    1b:f5:be:77:57:27:4d:41:02:3f:d8:d5:26:7e:3c:
                    11:96:07:61:be:44:66:ec:ea:79:52:be:bc:74:81:
                    73:de:8b:5d:8e:dd:82:50:b0:a3:df:be:da:e4:47:
                    ca:10:0e:d6:8a:d8:c4:cc:d5:05:fe:7a:d4:b8:16:
                    54:0c:af:71:f6:89:f5:52:d1:f8:95:39:95:6c:ff:
                    cb:47:21:c2:e9:b7:64:2f:46:82:84:1a:01:cb:5f:
                    97:38:25:fd:dc:60:b4:b5:64:37:fe:5a:db:7e:06:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F8:85:09:61:23:DB:CF:32:55:BE:55:B8:F8:97:6F:7E:44:49:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/de97d4e0-7682-34d9-8a42-f3359c3e33ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.crl

            X509v3 Authority Key Identifier:
                keyid:33:5C:AA:32:73:E4:16:E9:CA:CD:36:58:48:A8:96:9A:40:77:4E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.62.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:5d:5c:3e:11:59:6d:48:37:35:b2:bf:03:16:32:cf:ac:
         d2:3a:7d:22:92:03:6a:08:90:f2:83:95:3c:63:f4:26:8d:5e:
         f0:e8:d1:fc:01:6a:9e:75:60:d0:8a:25:36:d5:e2:2a:11:5b:
         e5:6e:95:e9:cb:5c:65:62:b5:5b:ed:98:18:e3:f9:a4:86:dc:
         77:42:bb:75:b2:dc:2a:60:e7:b1:78:b1:32:15:8a:83:d3:2d:
         dc:de:44:db:1c:6f:53:d8:94:d1:7f:4c:48:fb:0e:ec:27:e4:
         35:cf:88:f2:33:84:84:5a:ce:29:35:6a:b0:a5:2a:fc:28:17:
         ef:19:45:70:23:94:7f:4f:87:1a:a1:2a:31:a6:a3:76:21:d2:
         d4:1d:3a:b3:f8:ff:8b:bf:90:a1:88:c2:eb:cc:4c:46:6d:14:
         ea:8a:f6:93:3a:cc:34:ff:91:06:7e:c7:de:2c:ec:98:e5:81:
         b0:3a:50:33:9f:ff:cd:8c:f1:d5:bf:2b:5d:23:cd:9f:09:b5:
         72:31:5c:37:05:9e:fe:63:47:a1:43:ce:88:63:fb:0b:97:55:
         5c:03:ec:bd:b5:4d:a1:56:86:04:0b:01:d6:83:56:43:b1:81:
         6d:0c:27:b8:3d:41:39:47:cc:c1:e5:20:d1:1f:d5:30:7f:f3:
         fd:0b:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org