Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99bc9072-f46c-30ea-a6f4-634fa08dd601.roa
File:                     99bc9072-f46c-30ea-a6f4-634fa08dd601.roa (raw, json)
Hash identifier:          nKErbT2nHx0Ohi8LqNppFX9pG+kZe/budd0QWsuL91U=
Subject key identifier:   F8:C7:0B:08:87:CF:E0:24:D0:05:23:61:E8:BC:91:7C:2B:07:26:D3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBD48EC26B89CFB6A65C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99bc9072-f46c-30ea-a6f4-634fa08dd601.roa
Signing time:             Wed 16 Oct 2024 14:26:35 +0000
ROA not before:           Wed 16 Oct 2024 14:26:35 +0000
ROA not after:            Tue 14 Jan 2025 15:26:35 +0000
asID:                     81
IP address blocks:        152.45.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bd:48:ec:26:b8:9c:fb:6a:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:35 2024 GMT
            Not After : Jan 14 15:26:35 2025 GMT
        Subject: CN=77bfe189-a29f-4259-b241-330de5573681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:9f:33:f1:2c:05:c7:fe:1b:03:cb:b6:3a:
                    cf:54:0e:7d:1d:ff:58:26:05:81:7a:d0:67:28:04:
                    99:54:0f:7b:81:92:e8:bd:07:51:e5:07:40:d7:cf:
                    39:c1:3c:d4:2c:0c:86:86:a2:c5:14:78:27:78:d0:
                    dc:13:06:95:49:97:05:9f:f4:ab:8e:08:07:73:40:
                    39:23:cf:c6:96:b3:74:56:b9:ab:87:e7:93:4f:86:
                    fe:65:e2:64:9c:ed:ee:d6:f5:72:40:69:c0:a2:89:
                    6b:ca:d1:20:1c:4d:29:e0:1e:6a:69:96:a5:a8:80:
                    a9:fc:6e:25:a3:ba:23:68:8f:61:b7:52:4d:5c:5a:
                    ad:05:4a:29:d5:92:07:41:9e:4a:f0:79:76:23:26:
                    4b:c2:85:d2:a6:92:1d:5b:57:fc:6f:9b:f1:3d:27:
                    55:40:ab:cc:95:70:b3:f6:c1:02:13:67:ac:e5:79:
                    1b:03:bd:03:8f:1e:58:3c:cd:86:64:27:5b:f5:3f:
                    41:6a:89:45:9c:11:15:51:ee:14:1f:7b:81:2f:c4:
                    24:ee:cf:a9:e4:53:56:32:39:22:b7:ec:0c:c3:65:
                    07:f0:51:c1:cf:29:a4:a9:7f:1a:df:07:0c:6d:19:
                    9f:ad:a6:4a:90:21:0a:05:02:9f:a9:f9:22:7a:3d:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C7:0B:08:87:CF:E0:24:D0:05:23:61:E8:BC:91:7C:2B:07:26:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99bc9072-f46c-30ea-a6f4-634fa08dd601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:8a:93:07:7e:4c:9e:ba:09:18:8a:dd:46:aa:92:d5:2f:
         bb:55:d1:a7:82:f5:07:d2:b5:54:59:96:56:50:3e:40:24:7c:
         01:f8:b2:fd:51:39:29:eb:5e:ea:dc:8f:b6:b7:ef:9c:98:44:
         15:07:48:a9:fa:55:83:3e:2b:5f:af:31:84:09:90:df:06:24:
         6d:24:cc:10:d5:ad:1d:ce:f5:d0:42:98:82:b4:61:ec:a5:22:
         b3:1e:7b:4f:59:33:a1:15:32:95:88:79:ab:2e:af:4a:3f:09:
         aa:29:05:fa:d8:99:e3:f3:3f:00:63:f7:1a:8f:29:c9:a4:43:
         3f:fd:f8:8d:f6:1d:9e:89:84:8a:ba:f6:71:28:b9:5e:5d:24:
         e2:98:b5:e0:e1:b3:27:fe:bd:15:0d:ab:26:d0:53:e6:9e:17:
         f5:b3:24:bb:48:21:11:c4:ca:c9:37:2b:6f:fb:ee:58:42:b0:
         34:61:0f:bc:9f:04:fb:19:25:13:d7:7b:98:6b:0a:2d:0b:2a:
         4b:9c:47:26:b3:15:86:f9:29:a0:70:eb:51:8a:d6:db:ea:41:
         1c:61:eb:e8:f8:f2:64:16:a3:7e:cd:de:31:31:03:aa:62:a5:
         f7:26:f0:19:58:91:5d:e5:dd:90:57:53:16:de:ed:8f:25:c4:
         e7:2d:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:44 2024 by rpki-client on console-fra.rpki-client.org