Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc2d2c31-6815-3254-9ad2-961da0e71fea.roa
File:                     fc2d2c31-6815-3254-9ad2-961da0e71fea.roa (raw, json)
Hash identifier:          EsAXh26McQVJpKp2ZH7aRjlkQUVeFGfng3ll43Yux5E=
Subject key identifier:   F4:60:6D:5E:7D:63:DA:83:B3:05:15:A0:C6:69:30:B6:75:03:C6:8D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBCEE614717CB7C425A83
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc2d2c31-6815-3254-9ad2-961da0e71fea.roa
Signing time:             Wed 16 Oct 2024 14:26:34 +0000
ROA not before:           Wed 16 Oct 2024 14:26:34 +0000
ROA not after:            Tue 14 Jan 2025 15:26:34 +0000
asID:                     81
IP address blocks:        152.45.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bc:ee:61:47:17:cb:7c:42:5a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:34 2024 GMT
            Not After : Jan 14 15:26:34 2025 GMT
        Subject: CN=c08c1ea6-f6fa-49d6-8586-ff7e6fe6f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:e5:1d:ac:41:34:a1:e7:42:78:56:5d:f1:
                    65:5b:06:2a:35:58:97:1a:ff:1f:52:b6:aa:14:c3:
                    39:a2:31:9b:5e:dc:74:08:b9:d0:fc:fc:94:e0:ae:
                    7d:f3:0c:b6:ca:ac:f4:5c:3a:61:da:a5:f7:9f:9b:
                    fe:43:8f:47:d0:40:f1:a9:f8:e5:e2:f6:4a:16:b0:
                    a7:6f:98:42:87:bc:80:e8:8f:41:80:aa:7d:f0:b6:
                    b1:fd:2c:a7:13:1f:75:eb:92:94:4a:d7:14:48:de:
                    83:22:0b:ad:d6:ae:43:81:c6:3d:9e:3c:36:da:b0:
                    eb:f8:b7:e8:ad:14:4b:80:18:33:c3:38:40:fe:ef:
                    3a:fb:05:00:20:45:bd:88:2a:3d:30:90:f3:3f:64:
                    53:e7:b1:82:ce:20:91:c0:e5:f2:36:88:82:78:ea:
                    80:22:da:0e:12:24:34:f6:f4:61:6c:0d:ef:29:67:
                    df:5a:01:13:1e:02:d8:bd:9f:b9:a0:49:08:ad:88:
                    65:b1:8e:64:7a:c9:c2:b9:0c:59:b9:c2:5e:60:5c:
                    fd:84:28:6e:86:a6:40:c9:e5:61:2c:a0:2d:e7:5b:
                    2d:c0:9e:19:bd:0b:90:e2:82:e8:a9:32:ad:4b:f6:
                    eb:f3:bd:8a:d8:a7:85:d9:0b:9e:17:8f:d1:12:12:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:60:6D:5E:7D:63:DA:83:B3:05:15:A0:C6:69:30:B6:75:03:C6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc2d2c31-6815-3254-9ad2-961da0e71fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:25:d2:15:a2:7f:e6:41:78:4d:db:35:50:44:fb:3e:83:d4:
         f4:e8:34:72:5a:60:8d:2e:aa:b1:12:ec:a4:3d:53:b2:01:ea:
         5d:2f:d2:d8:2c:34:17:95:32:ae:7d:ac:e5:1d:e8:d3:d5:9c:
         2e:0c:1c:c9:bd:93:ed:cc:6a:e3:65:fa:cf:df:70:f4:1d:53:
         89:f1:cb:49:c9:63:3d:04:0c:62:c2:ab:28:69:d5:90:69:94:
         8b:79:65:7a:ab:ea:e4:2d:36:8c:0a:f9:4a:f1:f5:6d:a7:93:
         75:7d:ea:17:9a:0e:a9:e6:c2:a5:55:aa:b2:85:e9:1e:0d:17:
         d7:dc:8a:ca:49:a4:5e:6d:ea:db:66:26:e5:14:e2:53:d2:1a:
         f7:29:41:b4:9c:55:33:a4:1b:6d:f7:74:8b:11:79:e5:f1:51:
         99:fa:bf:c4:9f:08:1c:e2:d5:0c:c2:98:3e:ba:b3:90:30:35:
         c5:6c:10:1a:e9:29:df:03:e9:61:f2:d8:0a:46:14:a8:1a:42:
         9f:60:ed:4d:2c:7b:38:8d:86:66:1c:6a:3c:06:b9:db:6b:2a:
         83:61:97:f1:89:e3:9f:98:cc:2a:d4:6c:b4:5b:70:39:90:67:
         4d:39:e2:01:d3:54:04:49:94:43:05:a9:9e:68:27:e0:a2:b8:
         d9:0c:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----