Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d433c8ed-9f4c-39b1-a506-40086fa08d50.roa
File:                     d433c8ed-9f4c-39b1-a506-40086fa08d50.roa (raw, json)
Hash identifier:          HlzaR55/xFOa8ryD/TgK0uKNEt5Rsu4fgR/MeaqyQgo=
Subject key identifier:   37:47:E8:D4:43:4E:4D:6E:00:02:48:D6:D8:66:A3:BF:C8:55:F8:6C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285846D71BF7E4F05D6D640CE17840
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d433c8ed-9f4c-39b1-a506-40086fa08d50.roa
Signing time:             Sun 11 Aug 2024 11:48:10 +0000
ROA not before:           Sun 11 Aug 2024 11:48:10 +0000
ROA not after:            Sat 09 Nov 2024 12:48:10 +0000
asID:                     31863
IP address blocks:        216.172.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 05:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d7:1b:f7:e4:f0:5d:6d:64:0c:e1:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 11:48:10 2024 GMT
            Not After : Nov  9 12:48:10 2024 GMT
        Subject: CN=04dab800-ed08-45e8-8f27-60d96407dd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:56:c1:93:7a:b4:08:e6:72:7c:25:60:29:
                    70:b1:42:6c:a7:65:61:55:25:a2:a4:44:6c:4f:49:
                    13:db:e0:62:6e:fc:14:37:b4:51:04:5f:e2:a2:0b:
                    e5:23:a9:6c:c2:43:73:72:f7:6c:29:25:e6:c3:67:
                    eb:5b:31:96:22:40:1a:95:3a:5b:42:7c:56:f2:9a:
                    3b:d7:ce:f2:8c:3f:e6:a3:1c:c5:03:3a:2b:c4:9d:
                    b9:d5:01:a2:e5:dd:dc:5d:06:8f:ae:bf:23:08:d2:
                    e5:67:59:5b:55:28:2c:79:23:ec:49:d1:3e:94:fd:
                    c0:e5:6f:73:ea:be:00:34:f1:72:43:a5:a9:5f:3f:
                    b2:9d:f3:62:78:bf:75:25:0a:db:4e:28:fd:5d:9e:
                    23:3b:54:54:45:5c:1f:cd:be:d8:6e:32:2a:f2:54:
                    2f:19:01:7d:9e:c3:89:5c:b7:e2:d6:28:f0:13:ba:
                    1f:a2:0f:e9:43:6b:c3:a5:65:8f:eb:73:fd:53:c7:
                    e9:89:8a:ba:15:d5:cc:b8:c2:53:58:20:c0:db:3e:
                    e1:36:50:95:ec:dc:b0:94:e5:fe:88:25:b2:63:08:
                    30:b5:13:79:8a:85:a4:87:4d:66:4e:67:a4:62:ef:
                    88:b1:9b:a1:02:e0:8e:58:a3:35:96:be:17:d5:9f:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:47:E8:D4:43:4E:4D:6E:00:02:48:D6:D8:66:A3:BF:C8:55:F8:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d433c8ed-9f4c-39b1-a506-40086fa08d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:b4:a4:65:ae:f4:c2:26:fc:0d:67:c3:2d:8b:42:40:4b:
         e7:13:0e:70:38:9d:97:33:98:78:e6:70:11:a3:4b:73:26:d3:
         bf:26:cf:b1:6c:16:7b:fc:02:c2:e1:ea:5b:cd:2c:a2:f5:6f:
         a9:43:9e:0c:4b:29:db:ca:94:03:b3:01:70:61:ab:df:50:03:
         36:7c:26:e6:3b:98:21:5c:5b:45:03:ec:9b:25:33:61:8e:5a:
         32:ed:2a:a1:f0:36:60:2f:d2:ab:75:bf:9b:1c:9b:de:cc:7c:
         61:04:b4:c5:97:5e:6c:cd:5d:27:71:28:bb:68:5a:6f:cb:ee:
         69:fa:c0:c0:22:b8:13:3d:a7:76:14:01:d0:f4:5e:c0:af:8d:
         8c:46:35:0e:19:f5:15:38:17:30:34:7e:ee:d0:de:2e:f9:99:
         84:03:bb:46:f2:df:ef:06:9f:4d:55:19:4e:17:6d:59:33:47:
         7f:0b:f6:ce:7b:c0:40:01:fa:c0:fe:3d:cc:50:3c:12:d4:4c:
         2b:1a:09:10:26:60:19:53:04:c9:11:7b:a0:8c:2a:7f:7e:6d:
         88:3d:21:2e:b8:ec:be:e8:19:da:8f:f4:24:bf:62:de:c9:4d:
         dd:66:7d:ea:74:75:28:13:76:6c:e0:d1:cf:8a:92:cd:48:7d:
         de:a9:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 08:22:50 2024 by rpki-client on console-fra.rpki-client.org