Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c96717-cb05-33eb-946f-546ea1c34477.roa
File:                     74c96717-cb05-33eb-946f-546ea1c34477.roa (raw, json)
Hash identifier:          JhOim8t8NVHNeOdVgqiPSkGvEDDt0+GxHYQ4l23Wk4Y=
Subject key identifier:   F3:EA:33:77:C9:07:B7:69:C9:DA:17:78:4D:5F:C3:56:4A:16:EA:BF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBC2F914E8A78A1AA25C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c96717-cb05-33eb-946f-546ea1c34477.roa
Signing time:             Wed 16 Oct 2024 14:26:34 +0000
ROA not before:           Wed 16 Oct 2024 14:26:34 +0000
ROA not after:            Tue 14 Jan 2025 15:26:34 +0000
asID:                     19718
IP address blocks:        152.26.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bc:2f:91:4e:8a:78:a1:aa:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:34 2024 GMT
            Not After : Jan 14 15:26:34 2025 GMT
        Subject: CN=e8980399-5858-4883-9114-61a4be8e28b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:62:1c:74:c0:43:8e:9d:3d:bd:93:5f:e1:
                    64:94:e3:0a:93:dc:1d:2d:73:8c:5a:93:f3:dc:51:
                    05:cf:0f:ba:02:e0:2b:27:b0:0b:81:2c:17:9d:34:
                    eb:53:26:b1:13:e3:60:25:ac:e4:f0:68:29:fc:15:
                    b8:3f:b9:f1:5e:27:3a:79:c1:bb:53:0b:b8:30:7a:
                    64:88:7d:7c:6f:c3:b5:e9:24:fd:f0:67:33:be:ac:
                    82:21:85:9f:87:49:6e:72:17:c6:11:2a:7d:09:11:
                    a0:8b:73:dd:9c:26:4a:33:b1:3d:2e:7f:17:96:9f:
                    1c:03:85:20:76:71:76:dd:49:04:ba:d9:43:72:37:
                    99:e1:3c:c9:11:65:28:ee:d3:1d:21:0f:a8:3c:02:
                    84:e6:ed:34:cd:ee:97:07:44:4d:64:e2:e2:46:c5:
                    5d:41:7e:46:a4:c2:88:54:23:7e:e2:ac:3b:fd:62:
                    23:a9:36:58:a8:d0:89:03:66:81:72:e5:9a:af:4f:
                    20:fc:98:62:fc:17:ae:57:11:73:e9:02:35:d7:c6:
                    26:7f:78:15:51:b0:1f:8a:c3:90:f6:ae:ba:ad:ed:
                    7e:cc:89:cf:9e:61:fc:5b:bc:f2:92:e2:b2:aa:03:
                    5b:be:5c:20:dd:1e:e7:76:8c:da:74:aa:04:5f:2b:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:33:77:C9:07:B7:69:C9:DA:17:78:4D:5F:C3:56:4A:16:EA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c96717-cb05-33eb-946f-546ea1c34477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:dd:d5:d1:b3:75:bd:cb:d2:cd:58:c8:b6:67:08:b4:ee:
         e1:3b:30:d8:f7:74:59:fb:03:2f:c4:1e:c8:9c:2c:16:c6:73:
         2a:1e:19:2e:58:b3:1e:f3:c5:a5:b9:23:a3:ed:5b:9a:53:da:
         bf:1a:8a:c3:b8:2d:08:b6:64:94:46:ff:1e:52:81:b4:e6:1c:
         f1:06:2b:58:2d:50:ee:79:a4:4e:29:ed:3d:80:50:7b:63:72:
         5a:d3:32:89:84:87:56:5e:bf:a3:40:f4:08:6b:ff:5e:2e:49:
         50:9c:4a:8e:a7:77:33:0e:9f:24:f0:f2:b1:7c:2b:86:a7:66:
         67:e0:f6:9a:43:ba:9e:bf:cb:0e:c2:b4:87:9d:2d:a8:af:fa:
         58:00:06:02:dd:03:e1:cf:99:dc:8f:d3:63:68:d6:cf:78:7d:
         87:b3:9c:ba:87:e6:f1:f4:ce:9a:9f:a3:98:ff:87:63:04:fd:
         5f:90:05:1b:70:41:25:53:fd:05:ed:00:a4:61:24:04:db:4e:
         88:7b:1b:bc:4c:97:36:1d:79:d5:ab:87:db:0b:14:d6:c1:db:
         52:86:ab:b4:a9:da:03:b5:74:d6:46:02:71:40:8c:11:c7:ab:
         b2:e4:42:a4:c9:69:d7:7e:43:b2:c6:bd:09:1b:76:d2:67:a3:
         58:53:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----