Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eff00df0-07ed-3901-8f04-78d44175a166.roa
File:                     eff00df0-07ed-3901-8f04-78d44175a166.roa (raw, json)
Hash identifier:          Fc1LPHLQSUFX4KG1g770EdG/xxg2LKIusW9s3QVUC94=
Subject key identifier:   FC:4E:97:C4:0D:A1:7F:E5:70:22:97:11:29:D2:FC:34:57:4B:E6:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584800AFC93922E5EE8982157340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eff00df0-07ed-3901-8f04-78d44175a166.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     7029
IP address blocks:        142.252.208.0/24 maxlen: 24
                          192.177.59.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 27 Nov 2024 11:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c9:39:22:e5:ee:89:82:15:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=1fc34771-61a6-42b0-9e11-53644de15582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:7b:20:18:2d:10:ca:6d:63:32:9e:71:30:
                    d2:15:54:fb:cb:90:e6:84:bd:be:51:fd:63:d2:fc:
                    8d:33:f1:18:92:0a:d7:1e:8f:b0:c1:04:1b:2d:a9:
                    40:f0:ff:88:bb:78:ec:24:c0:8b:bb:83:7d:15:8e:
                    43:e0:d9:cf:f4:00:f0:cc:50:91:f3:eb:3c:db:12:
                    79:84:e7:e4:c6:73:c1:6d:4c:ac:81:0b:a9:78:c0:
                    5b:4c:6a:fc:de:21:03:7f:1b:57:fd:02:b6:e8:74:
                    a2:27:fd:06:40:49:c4:39:60:8f:f0:63:8c:86:ad:
                    fb:7c:33:c0:25:87:c2:0e:63:52:55:2f:0b:3f:34:
                    a6:43:b8:1f:53:f4:c4:f7:79:63:4f:ac:b3:33:c3:
                    44:2e:f0:ca:a3:38:64:b6:ff:2d:9e:2a:e7:58:af:
                    c3:aa:4d:d5:54:71:6c:5e:92:58:f4:72:3d:07:ef:
                    7a:a6:26:e1:49:71:1c:91:52:dc:f4:aa:f2:fc:b8:
                    77:13:67:0d:f9:e6:0c:26:df:d6:e4:65:0c:ed:1f:
                    50:f8:8f:6d:35:69:73:4a:98:bc:53:ab:3f:b3:0c:
                    c7:68:0f:4a:d6:96:5f:8d:25:91:73:ca:51:e8:17:
                    f9:9e:cc:9a:23:11:ec:e9:cb:6f:cf:2b:e9:59:e5:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4E:97:C4:0D:A1:7F:E5:70:22:97:11:29:D2:FC:34:57:4B:E6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eff00df0-07ed-3901-8f04-78d44175a166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.208.0/24
                  192.177.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:7e:9f:01:b5:fe:3b:4b:57:17:72:1c:3b:b3:24:9c:ce:
         57:51:d0:40:48:5e:3a:32:29:0f:35:6c:cc:8e:b2:27:b6:40:
         2b:97:87:70:a9:cd:c6:53:69:d0:d0:12:6c:cf:95:ff:f0:1c:
         9d:5a:5b:73:78:4e:25:7c:3f:6f:ee:d4:af:f1:cc:3c:78:bd:
         ff:49:00:f2:88:ef:ec:9a:cf:8a:6e:8d:12:53:fd:fe:38:c8:
         e5:a6:b9:37:3c:16:ce:18:19:f3:29:b4:1f:c9:84:37:15:ca:
         67:58:d3:4f:dc:7a:b3:71:7c:f7:d8:03:25:a7:d9:14:55:f7:
         22:d3:37:8e:d2:ac:31:e0:40:bb:85:13:91:22:79:13:8a:24:
         f9:44:c9:04:42:90:a0:01:2c:56:f3:26:d3:87:13:87:f9:a3:
         0e:93:5f:98:b3:69:fb:45:ed:b0:36:16:c0:31:a7:f8:19:12:
         6d:49:14:21:f9:35:b2:9b:df:4e:1d:6e:b2:5a:7a:38:25:40:
         f3:82:e0:62:e5:93:47:09:98:ba:15:d9:68:57:27:4e:5b:d2:
         f7:84:8b:52:aa:43:73:75:79:e2:4f:30:37:a6:ce:1a:bd:6e:
         1e:a8:33:42:2c:b5:95:54:62:4c:1b:4c:f2:53:54:c1:81:51:
         14:a3:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:37 2025 by rpki-client