Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aadf239b-0e35-3bbd-9fac-db15a839a813.roa
File:                     aadf239b-0e35-3bbd-9fac-db15a839a813.roa (raw, json)
Hash identifier:          ge4i5KGHDR7xP3ZMybyNHe9O9oBi0oW+jypO2AJ8uMg=
Subject key identifier:   E5:6B:4E:44:F0:51:BC:E3:0E:A2:0D:77:80:22:6F:CA:B2:38:70:09
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309FE0026A1F0ED3014522740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aadf239b-0e35-3bbd-9fac-db15a839a813.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:00:26:a1:f0:ed:30:14:52:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=93236abd-6c7c-45ff-a387-f4e12fa5c49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:a2:ae:36:24:9f:11:55:d7:e6:d3:3a:97:
                    af:01:5a:21:9d:39:08:2b:82:69:44:42:43:5d:17:
                    5d:b3:3c:dc:68:ab:2c:cb:37:ac:07:50:14:31:81:
                    46:9a:5f:ef:3f:db:c0:94:42:a0:26:be:21:51:fc:
                    eb:fa:0f:da:6a:28:06:7e:e3:cd:36:56:3f:f3:31:
                    d1:37:54:a9:23:69:e5:ca:23:0e:dc:86:5a:89:81:
                    99:1c:79:2b:fe:22:db:6c:c8:96:52:1a:d7:1c:6a:
                    90:4b:2f:d5:c2:0a:71:f5:f1:4d:f3:80:15:88:6c:
                    fb:8e:bd:5b:0e:4e:71:be:90:ca:ca:58:f7:61:70:
                    3f:64:42:22:b1:6b:b1:f6:11:40:8a:af:ce:b4:89:
                    d7:c4:7e:44:15:be:f7:54:e5:00:5f:25:3e:c3:94:
                    0d:a8:72:b4:47:8c:1f:3d:fa:4f:8f:8b:fb:2c:c9:
                    df:31:35:14:7c:d9:f9:33:16:29:8a:7e:c8:53:5b:
                    64:66:34:f8:3c:62:3a:66:70:27:8f:c3:c3:0f:4d:
                    76:ec:f5:51:6e:1b:5d:39:65:b5:4b:b7:7b:ed:94:
                    8d:d0:83:8a:3f:eb:a9:06:b0:65:3a:73:66:16:cc:
                    eb:c1:dc:f3:d0:5b:fb:25:e5:c8:c0:31:69:c0:0f:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6B:4E:44:F0:51:BC:E3:0E:A2:0D:77:80:22:6F:CA:B2:38:70:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aadf239b-0e35-3bbd-9fac-db15a839a813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:87:2a:30:b0:d0:aa:7b:6b:83:a3:fc:4e:0e:57:2e:19:00:
         f7:b7:5e:56:fb:f9:32:58:2a:7e:11:20:b8:d3:1f:53:cd:11:
         f0:91:da:c9:93:1a:36:5b:f0:4c:4e:c5:d1:17:a1:98:be:15:
         ee:8a:b1:dc:c4:62:9d:c5:5c:25:cb:10:c7:bb:d0:9a:54:fc:
         a8:b3:3f:cb:0b:89:66:d8:98:e6:e2:1d:8f:6b:57:f9:8e:49:
         03:db:a3:b3:4f:f4:96:e5:c1:e0:4e:a3:4d:03:c5:4d:ad:00:
         17:08:15:ee:b9:c5:48:21:6c:c8:b7:17:95:a9:80:ca:46:27:
         83:d0:2e:cf:8f:78:f7:14:7d:05:74:c4:86:27:ee:a2:6f:23:
         7c:f1:c5:78:37:dc:b0:cc:b3:88:94:3b:5d:cf:d3:5d:26:e6:
         68:63:5e:d4:39:b0:a4:56:7b:b8:e3:22:a2:d3:ec:26:cc:9c:
         68:37:77:f3:a9:96:f8:13:d6:8c:b6:e3:ee:de:94:57:30:3b:
         d7:f8:2c:fd:c7:9d:51:58:6d:2a:f9:2d:40:17:5c:f0:29:2e:
         e6:d7:d2:3b:93:46:d2:5c:82:0b:e1:b7:8e:57:0f:4f:6d:1a:
         07:26:de:d3:33:4e:96:ea:b9:31:cd:75:bb:b3:9c:93:3f:04:
         3c:42:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org