Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/acc656ed-e3a0-3960-a914-0367d7cf534f.roa
File:                     acc656ed-e3a0-3960-a914-0367d7cf534f.roa (raw, json)
Hash identifier:          ORT3akfQa0bYQeWTbK/tjTd5fCm0mRusc3wGHWNMOL0=
Subject key identifier:   93:26:B9:1E:67:3F:9A:8B:13:3E:63:96:2F:AA:00:49:F8:81:DA:C8
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F43285846D257B0483050A02624D00C00
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/acc656ed-e3a0-3960-a914-0367d7cf534f.roa
Signing time:             Fri 09 Aug 2024 18:49:27 +0000
ROA not before:           Fri 09 Aug 2024 18:49:27 +0000
ROA not after:            Thu 07 Nov 2024 19:49:27 +0000
asID:                     148996
IP address blocks:        130.51.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 01:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d2:57:b0:48:30:50:a0:26:24:d0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Aug  9 18:49:27 2024 GMT
            Not After : Nov  7 19:49:27 2024 GMT
        Subject: CN=861ac5e4-eb5f-4570-88e3-9266f75add96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:8b:aa:a8:4a:d8:c6:db:17:47:7d:56:af:
                    7f:31:66:ba:0d:87:2f:30:3c:ad:59:da:81:cc:bb:
                    5c:d7:b8:4f:84:9d:42:22:29:73:9c:03:10:9a:46:
                    f9:a1:aa:f8:1f:c5:f9:ca:b9:97:38:13:7d:21:5f:
                    a5:42:46:87:c2:6a:17:02:f2:86:92:12:45:69:ce:
                    28:15:57:12:10:37:45:33:92:99:10:c0:00:0c:b5:
                    7d:71:ed:e9:9d:30:99:56:5e:76:7c:44:4b:3f:64:
                    b8:77:92:cd:97:0c:68:a2:15:f0:26:ee:81:32:f7:
                    76:7b:d8:58:23:13:67:f5:19:9d:26:e9:b1:68:5e:
                    60:e9:2d:61:f7:69:ed:f5:fc:00:ee:de:2f:0a:be:
                    90:3f:5c:7c:38:1e:2e:76:67:65:7e:46:70:9c:f8:
                    ae:61:35:24:22:a4:5d:08:f6:28:31:10:8a:27:29:
                    ce:81:2e:1c:7e:37:e4:78:88:3c:df:c3:1e:59:f7:
                    b0:25:ed:f5:a5:87:75:2f:86:e7:59:0f:8f:26:00:
                    27:99:36:43:b3:3b:fa:92:27:7f:77:1d:7d:73:1f:
                    9a:29:75:30:7a:6a:00:97:9f:c7:35:72:e5:09:e8:
                    67:b4:31:ff:94:82:6c:8a:51:f8:2d:3d:5c:df:19:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:B9:1E:67:3F:9A:8B:13:3E:63:96:2F:AA:00:49:F8:81:DA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/acc656ed-e3a0-3960-a914-0367d7cf534f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:60:f2:94:9b:27:28:45:2e:e7:6f:1d:35:40:0b:2e:12:33:
         8e:5d:9d:ca:14:a2:c6:2f:9f:7c:e5:f5:14:ac:83:08:80:be:
         ab:07:dc:d0:46:7e:98:75:ef:c8:a4:72:ce:b8:68:45:4b:b9:
         83:a0:7c:8d:75:09:6f:96:bd:c0:b5:9d:7a:c9:cc:55:35:94:
         8b:37:8b:4c:ae:bf:40:b7:48:23:cd:a0:af:2a:a3:f0:7e:1e:
         92:fa:93:e3:a6:73:a2:d0:89:2d:fb:49:80:27:42:c2:e0:53:
         b0:ca:9b:89:26:cf:8f:19:66:89:f6:de:17:72:44:1f:45:28:
         1a:8e:d4:9f:39:1c:f7:8d:42:69:b5:50:fc:05:f5:f3:d6:3c:
         42:0b:60:77:cc:e8:c9:76:fb:38:c8:38:64:f2:09:55:4f:df:
         c1:89:f9:60:37:30:05:2a:b7:2e:47:71:43:2b:8a:20:f2:f8:
         98:88:04:c5:0b:3f:ad:f4:29:7e:f1:aa:a1:06:09:6d:04:7d:
         57:d7:ef:90:1a:ff:1d:5e:33:65:86:9b:ab:ca:e6:7f:7e:c0:
         40:82:5d:b9:45:69:89:93:8e:53:dc:e4:36:30:db:f3:27:14:
         76:78:a9:df:c3:ba:2b:ad:6a:b5:69:fe:d1:f7:bb:33:32:88:
         d7:3d:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----