Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7bb46450-f794-3728-bb41-9146b0ec3799.roa
File:                     7bb46450-f794-3728-bb41-9146b0ec3799.roa (raw, json)
Hash identifier:          PY3WQH9r3gSo8WF4ww91WBgf1M7UCaigmCFTbEyxbS4=
Subject key identifier:   FB:23:93:6A:0E:07:81:F3:D4:9A:35:18:44:9D:4A:F6:65:A8:CD:45
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858472F3070EB979D9F0420E2AD28
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7bb46450-f794-3728-bb41-9146b0ec3799.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     394437
IP address blocks:        66.60.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:70:eb:97:9d:9f:04:20:e2:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=352d9f88-54d9-40c9-8fa2-af92d07678e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:2a:e8:83:b0:b4:d7:c6:8d:57:2f:15:f3:
                    07:31:89:f7:f9:10:50:db:9a:1f:24:54:1c:6a:58:
                    f3:d2:ab:35:0d:b0:c4:c3:48:8a:7e:f0:c3:4c:25:
                    ec:c7:07:73:02:dd:c7:0d:f8:e2:36:ec:b9:fd:f5:
                    1b:d9:71:f1:4e:05:64:8d:40:95:c5:10:02:82:4d:
                    59:ee:01:60:14:7c:ba:c2:18:f3:9a:47:f2:9d:fe:
                    8f:53:41:60:33:13:25:1a:8e:f0:f5:d4:ee:fc:7c:
                    9a:4c:c8:7b:27:14:b1:5c:09:60:05:62:bf:35:c0:
                    e6:92:14:09:c4:c3:3f:2f:6d:62:ec:bc:22:9b:a5:
                    cb:fc:04:17:24:a3:d0:e7:ce:f1:72:b1:a8:b8:81:
                    da:08:1b:d3:50:92:c8:08:4a:bf:4a:ef:4d:bb:ba:
                    92:a7:0e:1c:6b:42:df:cf:20:96:b9:47:d4:5b:40:
                    e2:5b:66:4e:c1:41:6f:85:31:38:fa:73:e3:74:25:
                    53:3f:a1:69:49:fc:1d:0a:10:db:b0:4e:6d:44:94:
                    27:47:af:f3:2e:f9:4e:40:e1:f5:5e:48:ae:f9:3c:
                    5c:50:63:f8:58:00:32:82:31:75:6a:11:39:0d:55:
                    20:ec:de:ba:79:89:25:a8:3b:b7:5d:13:ca:43:51:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:23:93:6A:0E:07:81:F3:D4:9A:35:18:44:9D:4A:F6:65:A8:CD:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7bb46450-f794-3728-bb41-9146b0ec3799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:7e:c7:c5:bb:86:5d:3e:73:ca:9e:5d:d0:46:49:d4:64:
         6e:77:aa:2c:5e:8e:b7:81:b5:0a:1b:f7:8c:84:13:34:8d:ce:
         ec:fb:ab:ac:8b:c1:3d:01:b4:38:01:5d:48:6a:6f:77:3b:ec:
         60:a1:51:e9:32:95:32:b2:8a:9f:aa:bd:b2:26:65:cf:7d:09:
         13:70:15:30:fa:ab:ca:44:97:c3:05:d5:b4:62:2c:57:d7:1b:
         45:a2:cb:1f:24:fe:e0:d0:d0:b6:53:a5:02:b0:d8:de:ce:be:
         fa:d1:17:a2:50:91:33:f0:1d:f7:44:f0:85:24:27:0a:d7:41:
         ed:2c:91:3f:8a:aa:80:1e:b9:2e:6b:d0:30:88:72:3c:1f:86:
         cd:81:8a:a7:13:a0:d3:b5:8d:e7:b8:c8:75:92:b7:53:f5:03:
         3e:4d:6a:51:da:d3:e8:bb:c0:7f:20:83:37:6f:1f:4a:92:19:
         00:6b:50:68:bf:19:78:4e:bb:19:5f:46:49:22:1d:c8:b5:bd:
         a7:63:e8:b5:89:f4:d9:1f:6f:b0:e4:ec:2b:8c:45:c3:0a:65:
         60:22:d4:ed:b9:fd:6d:85:45:c9:aa:d2:92:8c:0f:78:70:c8:
         3e:14:80:3a:2b:0e:1f:fd:30:18:23:5e:d1:e0:de:39:52:e4:
         19:66:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----