Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15f78bb9-3419-396e-9af8-cf54f85b0ac4.roa
File:                     15f78bb9-3419-396e-9af8-cf54f85b0ac4.roa (raw, json)
Hash identifier:          jyb6XbayKvRMNm4eW29H/H0ShPUEFluC/dLI9NjfbDU=
Subject key identifier:   90:71:1B:A2:E1:49:6B:92:89:47:7B:85:EC:D3:DA:04:C9:79:1E:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584797E149D8B237513EEC729D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15f78bb9-3419-396e-9af8-cf54f85b0ac4.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     20473
IP address blocks:        104.165.3.0/24 maxlen: 24
                          104.165.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 10:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:49:d8:b2:37:51:3e:ec:72:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=2cc9407b-6c34-4b68-be8b-1ed6bbef3b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:eb:da:db:0e:8f:3a:44:4f:08:53:0d:18:
                    17:d5:48:c3:73:16:b4:ee:2c:e5:e2:18:0b:1e:94:
                    03:61:09:58:ac:27:59:d6:41:c3:ce:35:51:bd:17:
                    66:73:ba:20:24:0b:9c:4a:71:44:0c:b9:77:c1:a8:
                    a1:5e:3b:14:5a:0e:c7:30:10:46:4e:21:ac:8e:b6:
                    8d:36:74:05:16:aa:ad:42:2f:bb:7e:06:8c:ca:4c:
                    0f:e7:ca:af:93:7d:b3:05:4d:06:91:7d:00:f3:ad:
                    7f:2f:5f:ac:96:9e:05:7b:b7:3c:6b:29:89:23:a1:
                    ee:6d:c1:7e:90:cf:f9:9b:8f:37:83:93:bd:31:bd:
                    61:ea:71:12:6b:8f:e4:93:9e:b8:07:b6:7f:56:9f:
                    5f:96:e7:76:9d:a3:c2:e6:b3:4d:b6:db:b7:f3:88:
                    63:5f:b1:be:aa:6a:94:c4:c1:27:2c:2e:e6:5f:53:
                    43:4d:14:11:69:84:9d:3a:1b:1a:db:63:d8:57:a4:
                    8e:e4:a4:7f:69:f9:9c:73:d4:3b:b8:c8:b3:99:90:
                    b6:da:f8:9b:2d:1a:9e:5b:49:40:59:14:bc:cf:69:
                    cd:f9:11:ef:e8:8a:b7:76:b2:7d:f7:ed:6d:a8:ae:
                    01:ee:ef:9a:d4:75:e8:02:97:8a:6a:c3:48:a3:35:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:71:1B:A2:E1:49:6B:92:89:47:7B:85:EC:D3:DA:04:C9:79:1E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15f78bb9-3419-396e-9af8-cf54f85b0ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.3.0/24
                  104.165.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:a1:41:c1:66:b3:04:ba:5d:b1:1f:0e:5e:4e:ce:85:e5:
         f1:a3:00:7e:dd:11:23:33:92:39:00:a6:2e:4c:98:b5:b4:3f:
         51:f6:fc:e7:67:dc:32:88:19:b2:48:8c:62:fe:a5:07:37:1f:
         55:22:8c:6e:4a:cb:48:f3:b1:9d:f5:19:00:5b:3b:be:b4:62:
         9d:5e:7b:aa:53:79:d5:79:2a:bb:0e:b4:24:bb:7c:75:a4:df:
         c3:0b:cf:60:6e:f3:74:fb:45:e1:f2:8b:bb:e4:2b:e5:ab:2f:
         fd:ee:c2:34:e5:35:f2:54:8a:15:2c:89:ef:18:c3:7a:a5:1d:
         1c:a8:03:eb:04:ce:5b:98:81:ef:a4:0f:8e:ae:b8:ee:9d:d9:
         e8:b3:00:69:78:be:e6:37:45:ce:b4:68:89:7f:c7:44:eb:ce:
         4c:72:f5:9b:6a:30:cb:cc:35:cd:9c:7b:c5:40:eb:23:46:66:
         56:ec:5d:56:23:49:62:ee:bf:a1:5f:ef:2c:fa:68:31:ec:66:
         7a:ee:d5:25:88:b3:36:a7:14:16:37:ed:38:1f:b6:76:bb:23:
         06:08:19:bd:4f:94:59:db:1c:54:0f:69:55:f4:22:c8:0f:3d:
         e2:82:24:67:ad:5d:4e:a3:f6:17:df:d5:b5:a9:4a:e5:b0:24:
         ab:ae:83:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:14:12 2024 by rpki-client on console-fra.rpki-client.org