Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8ffdb9e2-1502-3801-8770-db9356476a07.roa
File:                     8ffdb9e2-1502-3801-8770-db9356476a07.roa (raw, json)
Hash identifier:          6fCMOwu1wOx4m2VkaQsFrLIrTFisc/Y//x6jeFK53MQ=
Subject key identifier:   97:19:82:CF:8C:0D:D5:49:A4:30:3C:E1:F8:34:05:19:F0:9C:55:A1
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285847D87B99E691DCDD44B9AB9700
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8ffdb9e2-1502-3801-8770-db9356476a07.roa
Signing time:             Mon 11 Nov 2024 16:23:36 +0000
ROA not before:           Mon 11 Nov 2024 16:23:36 +0000
ROA not after:            Sun 09 Feb 2025 16:23:36 +0000
asID:                     394437
IP address blocks:        66.249.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 18:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:7b:99:e6:91:dc:dd:44:b9:ab:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Nov 11 16:23:36 2024 GMT
            Not After : Feb  9 16:23:36 2025 GMT
        Subject: CN=cd0878df-84b5-4f31-8c96-6f911357045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:5a:e2:2c:0e:0a:10:f4:8a:90:06:82:d5:
                    9f:b6:eb:28:f6:0f:a9:79:5e:04:9f:5b:0e:c3:5d:
                    41:89:6f:03:68:17:a1:43:fd:ca:09:6c:4a:02:d3:
                    9c:d1:28:d0:9e:49:d7:62:76:1d:f2:47:ee:05:10:
                    ca:3a:4e:e3:49:8d:79:71:bb:fb:81:ac:b2:24:4b:
                    09:bb:15:09:ff:03:25:13:28:84:25:69:71:50:8f:
                    96:1b:31:57:90:f3:07:ba:d4:fe:d6:b2:bb:91:7f:
                    ee:7a:ef:9a:0a:be:70:b9:91:60:a5:b1:0a:e0:56:
                    e0:dc:de:a6:34:7d:f4:79:35:1f:5e:3c:2c:0b:1d:
                    c2:ea:d4:df:a7:a6:c6:07:d8:4e:a2:cb:f4:1e:49:
                    ac:88:54:ba:d0:bf:46:9b:93:48:e3:17:49:42:5a:
                    a8:d5:34:44:df:28:4a:04:e9:46:6d:bf:b4:37:f6:
                    5d:ad:c5:c1:3e:62:d9:46:0a:38:7f:8d:46:ef:b9:
                    25:18:c7:1a:3b:8d:32:a1:0a:c0:8f:b9:eb:e5:16:
                    42:50:45:12:64:0b:85:ca:71:4c:60:af:62:70:83:
                    73:8c:d4:8e:79:97:b5:95:eb:46:7e:45:22:26:66:
                    54:d1:18:3b:0f:bb:23:35:64:79:b8:3e:eb:dd:1a:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:19:82:CF:8C:0D:D5:49:A4:30:3C:E1:F8:34:05:19:F0:9C:55:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8ffdb9e2-1502-3801-8770-db9356476a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:83:8f:88:b8:e4:01:61:f9:0a:44:7d:f6:3b:64:a8:02:
         c1:77:f4:5e:a6:d9:14:07:3b:c0:b1:25:6b:81:12:cd:b7:19:
         2a:cb:1f:61:e0:f5:8d:b4:f8:88:13:e4:a3:9d:8f:94:80:4a:
         64:23:45:6c:00:97:f7:7f:20:bc:82:20:7a:63:00:a6:38:3c:
         e9:73:58:85:84:01:5c:d2:2d:59:0c:ac:ba:22:ab:6e:ff:b9:
         a5:06:70:c9:5c:aa:ae:60:90:4d:b3:db:9b:66:c0:6b:64:b5:
         c9:32:e5:16:6f:06:c7:f1:c6:7f:2f:01:e4:a8:5b:b0:f0:fd:
         a5:86:3e:28:b9:68:9b:4b:2c:d8:c7:17:20:7c:4d:f5:34:af:
         2e:a7:f9:eb:fa:30:e9:b0:02:1b:a3:21:56:e3:d7:3c:6e:ee:
         5f:81:7a:e4:f3:92:98:cd:e3:a4:56:d6:18:f1:33:6e:11:d1:
         5b:43:60:56:11:77:76:7e:fd:94:f6:a8:8f:ea:34:f8:4b:36:
         da:26:42:ae:b8:6c:85:93:6d:8a:da:44:f4:6f:4c:5d:4d:87:
         4f:4c:0e:ab:10:17:39:96:b1:53:e4:05:9f:28:0d:d4:23:b5:
         dd:13:62:3a:30:f2:15:e8:d6:30:9c:66:e6:45:db:ed:fd:90:
         46:85:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----