Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b0a2615-1921-3a30-87f2-4091f5f93a11.roa
File:                     3b0a2615-1921-3a30-87f2-4091f5f93a11.roa (raw, json)
Hash identifier:          41HV25Bmkv6nZ1qSaDF0rbVfug/ruYrO4sjLnrY0Vp8=
Subject key identifier:   F7:0B:4F:FA:46:D0:66:E7:9C:03:24:C5:33:93:59:B6:8F:01:F7:DA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858442303FBC29D7081D621AA2480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b0a2615-1921-3a30-87f2-4091f5f93a11.roa
Signing time:             Thu 07 Dec 2023 14:00:20 +0000
ROA not before:           Thu 07 Dec 2023 14:00:20 +0000
ROA not after:            Wed 06 Mar 2024 14:00:20 +0000
asID:                     54252
IP address blocks:        192.177.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 13:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:23:03:fb:c2:9d:70:81:d6:21:aa:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec  7 14:00:20 2023 GMT
            Not After : Mar  6 14:00:20 2024 GMT
        Subject: CN=972be095-d305-45d4-ac67-2cf01fbd0b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:2b:31:a1:30:8e:5d:51:5b:42:19:21:c5:
                    66:c2:e2:9a:0f:d4:e8:c5:9d:53:e4:81:32:37:2c:
                    0d:e7:63:d1:c3:ab:74:d9:25:39:b9:75:40:14:95:
                    de:9d:02:77:a7:85:7e:93:73:80:10:5d:76:01:be:
                    9e:92:3c:9e:8f:5d:96:9f:f3:2d:77:50:47:3a:6b:
                    3e:ab:4f:b9:b0:47:4a:b7:62:52:f9:ba:1b:e5:21:
                    3a:56:4b:49:08:2b:72:fe:2e:66:76:db:60:da:c8:
                    25:a2:8c:df:c0:62:87:ae:60:06:7c:07:c5:fa:61:
                    02:3b:66:3a:93:ea:3c:7f:ef:de:ec:64:e8:64:76:
                    2b:45:db:ce:58:c3:72:2c:f8:12:7e:5b:38:60:15:
                    38:a2:e2:0b:4d:71:01:db:a8:8c:6e:cd:8b:67:fe:
                    24:dd:4d:a1:d3:ff:45:8a:cf:d2:c5:51:17:19:9c:
                    7b:dc:07:ff:65:47:15:00:2a:6f:3e:41:6f:8c:7e:
                    96:6b:7c:06:29:51:46:8a:14:73:d9:39:44:ac:8e:
                    a2:91:3c:82:82:7c:56:16:51:52:38:13:86:4f:f2:
                    98:ea:f7:ae:75:ef:26:89:b8:de:ef:2a:e0:f8:87:
                    2e:08:49:9e:94:c2:d2:ef:04:f4:0a:1e:a5:06:12:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0B:4F:FA:46:D0:66:E7:9C:03:24:C5:33:93:59:B6:8F:01:F7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b0a2615-1921-3a30-87f2-4091f5f93a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:5c:bd:c7:73:cb:1e:0a:ff:7d:fb:10:c1:b0:8e:ea:00:
         57:1e:d4:b8:19:ef:1b:79:10:f4:47:dd:f0:4f:3a:5e:7a:0a:
         a9:e5:f5:1f:d6:d1:47:2f:9a:ce:5c:87:4a:ca:a6:92:3f:ef:
         8a:2e:04:38:09:11:7e:20:09:2a:6d:d1:13:be:9e:d2:5c:26:
         c6:44:e7:f6:69:c4:e3:11:44:22:29:70:e8:c0:ca:59:e8:c5:
         ff:b6:7a:42:b2:78:91:59:70:40:a2:c0:d2:90:09:7f:dd:5b:
         0f:59:cc:9b:8d:18:c9:cb:88:5c:97:b0:de:21:db:f7:96:01:
         6b:3d:2e:a0:c1:7f:63:9c:f7:e5:83:cf:02:24:18:80:e9:ed:
         2f:9f:68:53:0e:ab:bf:52:b1:0b:c3:18:6a:3a:a7:af:d1:e6:
         ba:c0:ea:cd:44:8e:b9:57:13:26:a2:8b:3e:77:0d:2d:3a:a5:
         47:e5:91:7f:9b:ad:fd:15:8b:46:ce:17:fa:0e:0b:f2:15:2d:
         c6:3e:cd:d7:68:51:27:6e:51:a6:90:a7:25:dd:a9:a9:72:8c:
         32:fa:ed:af:8f:aa:5d:89:fe:60:93:e9:eb:08:b2:73:f3:8e:
         8c:17:f9:d8:a7:84:c4:85:43:f8:a2:a1:96:c2:5e:f7:4d:e3:
         4b:7d:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 17:51:12 2024 by rpki-client on console-fra.rpki-client.org