Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460/9b15aa80-fe8f-3a99-a1d5-f900224597e7.roa
File:                     9b15aa80-fe8f-3a99-a1d5-f900224597e7.roa (raw, json)
Hash identifier:          Fzhb8K6TleDzCrgIN8iaOGuxxIL9iQBn6YzUTsVYF34=
Subject key identifier:   09:B4:91:5B:E4:EA:42:76:81:30:5C:22:8A:2C:92:27:D2:2E:44:EF
Certificate issuer:       /CN=5ab63dd6-0a1c-4eb1-b497-beb278fd3460
Certificate serial:       010D0C9F432858468C4AF7F21F3E6B37C6975780
Authority key identifier: 0C:18:83:07:72:59:D8:29:4A:68:D3:D4:E6:C7:05:37:22:5A:EB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460/9b15aa80-fe8f-3a99-a1d5-f900224597e7.roa
Signing time:             Mon 15 Jul 2024 16:37:14 +0000
ROA not before:           Mon 15 Jul 2024 16:37:14 +0000
ROA not after:            Sun 13 Oct 2024 16:37:14 +0000
asID:                     30151
IP address blocks:        23.157.96.0/24 maxlen: 24
                          192.34.114.0/23 maxlen: 23
                          2602:fe30::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 14:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8c:4a:f7:f2:1f:3e:6b:37:c6:97:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab63dd6-0a1c-4eb1-b497-beb278fd3460
        Validity
            Not Before: Jul 15 16:37:14 2024 GMT
            Not After : Oct 13 16:37:14 2024 GMT
        Subject: CN=18f2c55a-ad2f-430d-961f-ac415816cb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:55:f5:3a:f0:5b:0d:b1:ab:56:1e:28:5d:
                    8d:d8:be:d6:78:99:a9:b3:2f:b7:6b:67:2f:4c:50:
                    8c:e0:25:4d:ab:c8:87:e2:00:d4:00:05:97:ac:d3:
                    72:27:81:0c:1b:d9:71:0a:c2:47:fe:8b:6f:87:e0:
                    3d:3c:c5:10:a2:52:8d:0a:b1:f3:2a:ca:4b:8b:b8:
                    cc:46:99:4f:4a:63:fe:0b:86:d4:91:cb:dd:90:f7:
                    c4:06:26:38:0b:0e:68:fb:44:70:d2:1f:d7:83:e8:
                    a6:e7:6d:61:e8:4a:4c:1b:0f:50:44:c1:93:86:e6:
                    ac:59:ee:1a:21:6e:21:ac:de:33:fe:e7:17:47:19:
                    9d:44:56:a7:d3:5c:ce:0a:dd:9d:db:1d:72:de:cd:
                    e7:e6:cd:f3:56:68:c2:c7:b2:3f:49:27:a8:ac:5a:
                    38:69:44:99:38:33:9d:3b:fb:de:f0:7d:a7:1e:3a:
                    8d:a0:bf:74:d5:f8:44:be:69:1d:78:96:ef:52:1d:
                    2a:53:63:19:bd:02:19:18:f3:7a:a4:5c:7e:06:03:
                    b6:59:e0:94:c3:f2:0a:45:2f:ff:37:b5:ac:18:a3:
                    00:2b:35:77:d0:c4:95:fc:61:4a:f5:1c:56:5a:11:
                    84:9e:dc:19:c3:32:db:b1:7e:b0:d9:54:8c:9a:b2:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:91:5B:E4:EA:42:76:81:30:5C:22:8A:2C:92:27:D2:2E:44:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460/9b15aa80-fe8f-3a99-a1d5-f900224597e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460/5ab63dd6-0a1c-4eb1-b497-beb278fd3460.crl

            X509v3 Authority Key Identifier:
                keyid:0C:18:83:07:72:59:D8:29:4A:68:D3:D4:E6:C7:05:37:22:5A:EB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ab63dd6-0a1c-4eb1-b497-beb278fd3460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.96.0/24
                  192.34.114.0/23
                IPv6:
                  2602:fe30::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:27:6d:05:fe:ff:9c:d0:36:3f:0a:90:d2:37:99:12:33:
         07:a5:17:a6:76:f8:0e:a9:c9:15:01:be:3f:60:14:d1:0a:f3:
         e2:f4:92:af:6f:c4:21:02:15:fa:a9:3e:fb:b7:c2:e6:ec:a0:
         66:e1:67:f9:db:a8:56:60:c3:45:75:8f:73:a4:61:8e:42:1d:
         21:c7:66:1b:63:e7:e7:a8:e6:14:41:a2:ab:7a:f2:8f:c5:1f:
         3d:f9:d5:26:62:39:75:94:93:3d:28:80:0b:1b:4c:90:2c:c3:
         e7:e3:ff:68:05:58:4d:51:03:56:c2:3e:c7:93:f9:c0:b9:82:
         25:2f:42:e2:0d:43:09:5b:99:59:77:08:e0:8e:a8:7b:03:75:
         7c:99:5b:47:f7:7c:be:a0:0e:42:cb:78:f5:c0:e1:f4:93:ee:
         87:b3:e0:6a:c6:37:21:d4:0e:c6:f5:11:ec:fa:0c:4b:74:40:
         ed:8f:a7:2b:7b:12:04:76:7c:c0:6c:df:14:09:7e:fc:d5:92:
         9a:fe:8d:a8:47:76:0f:d3:38:31:25:8d:f7:69:98:e2:6f:5e:
         30:dc:1e:a2:53:66:6c:0e:f9:1f:ae:a6:d2:eb:28:97:b7:fe:
         6b:91:2b:e4:27:23:43:c7:95:01:63:33:9e:70:b1:8d:ca:95:
         5c:40:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org