Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/add8540c-21de-3b58-be4a-53812a0b7a27.roa
File:                     add8540c-21de-3b58-be4a-53812a0b7a27.roa (raw, json)
Hash identifier:          m1clkq95D9bY618UkKxShGM+yJYWA2l+US/vHfGjur0=
Subject key identifier:   58:A0:01:47:9C:56:53:DB:AC:AB:58:BE:8E:C2:5A:A0:D1:52:20:0B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBC217897715059584AB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/add8540c-21de-3b58-be4a-53812a0b7a27.roa
Signing time:             Wed 16 Oct 2024 14:26:34 +0000
ROA not before:           Wed 16 Oct 2024 14:26:34 +0000
ROA not after:            Tue 14 Jan 2025 15:26:34 +0000
asID:                     81
IP address blocks:        152.26.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bc:21:78:97:71:50:59:58:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:34 2024 GMT
            Not After : Jan 14 15:26:34 2025 GMT
        Subject: CN=d55366cb-8e56-41ce-b8d3-0554b3afb694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:0a:0b:a8:47:16:da:89:1a:44:e4:17:07:
                    5d:7e:88:95:16:ce:1a:da:85:a1:68:34:c2:94:af:
                    85:1b:0d:67:d4:fa:5f:f8:73:ed:cf:5b:71:16:43:
                    52:82:9e:cf:5a:9b:6e:f5:64:ac:be:1b:02:71:53:
                    64:1e:1b:c1:1c:ec:1d:d9:3c:5c:7b:50:7f:8d:16:
                    5c:b9:b6:37:8c:f7:3d:30:09:1a:b2:de:7d:7b:f0:
                    e8:87:49:df:a5:01:14:50:92:6e:a1:c5:30:33:1c:
                    a1:62:64:69:68:21:d5:fd:49:48:be:1b:72:e1:72:
                    fc:30:d2:69:92:7a:fc:05:63:ef:81:aa:1c:05:fb:
                    80:46:ba:ff:9d:9d:07:c6:33:cb:0e:6a:f0:70:7e:
                    35:2e:ff:b0:dc:58:5f:59:4a:17:3f:73:92:0e:d3:
                    7a:77:35:ba:8f:34:fc:62:ce:90:11:ea:1b:85:fb:
                    9d:41:f3:8c:0a:83:d5:93:ff:d0:0c:fe:72:9e:f7:
                    ad:46:f4:53:bc:4e:49:c1:3c:c7:64:ed:96:ef:b2:
                    5a:9a:bd:17:95:92:5a:91:f5:b3:89:75:bf:60:93:
                    ab:2b:d1:0a:93:70:6b:1c:93:15:3d:a7:4b:a8:37:
                    2a:18:38:4d:1f:85:16:0d:13:1c:65:41:97:f8:0e:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:01:47:9C:56:53:DB:AC:AB:58:BE:8E:C2:5A:A0:D1:52:20:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/add8540c-21de-3b58-be4a-53812a0b7a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:db:49:5d:41:a1:86:a5:0a:dc:28:7f:a0:4e:ef:33:bd:4e:
         4b:9f:2c:5a:ff:cb:6b:2d:65:d3:68:4e:3f:5a:71:38:e4:8a:
         b1:7e:24:c2:bc:41:a4:0f:e6:de:36:33:2b:0e:4e:c1:ee:2e:
         75:5c:32:e1:12:59:31:a4:ac:a4:68:67:44:90:ae:1e:7f:fa:
         07:4f:c4:65:e2:d8:d9:36:ec:61:ac:79:69:1e:ba:b2:16:f4:
         1a:9e:62:34:f9:1e:24:5d:12:33:b7:ea:28:93:ee:ce:03:f2:
         61:d5:02:59:9e:99:82:79:9f:e3:ca:89:35:c5:cb:74:a7:c8:
         a0:dd:5c:0f:52:70:10:21:ae:b2:0f:59:bc:11:18:3e:c4:37:
         88:bb:d0:37:b5:5b:4c:43:f5:21:c5:f7:18:b2:32:90:e6:b8:
         f2:b0:15:59:39:61:bd:2f:bd:33:4f:28:5c:70:c2:2b:02:d4:
         9e:e4:68:db:10:6e:11:4a:20:50:6a:89:84:47:a4:27:01:3b:
         5f:02:6b:bf:d7:97:ea:d4:10:75:76:67:48:2d:ca:57:5e:98:
         f7:98:89:37:59:b2:4b:6f:a7:ae:73:6f:0b:95:ed:70:ce:cc:
         78:25:97:ed:cc:83:23:4f:81:32:e1:df:04:cd:ea:7a:55:bc:
         82:99:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----