Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b75f96a7-e280-3a11-a7fa-aebda5d75ff0.roa
File:                     b75f96a7-e280-3a11-a7fa-aebda5d75ff0.roa (raw, json)
Hash identifier:          +sv6OqlTU0l0SUIo9J7FiIedLE4BBV0Ja1Vx6xYNULo=
Subject key identifier:   43:DA:E1:85:DC:3B:57:75:79:75:55:FC:5F:FC:99:C3:B6:A5:FA:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309FAF132C010484EE8754D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b75f96a7-e280-3a11-a7fa-aebda5d75ff0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:f1:32:c0:10:48:4e:e8:75:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d424a537-91fb-4c36-91f4-4032aaf05f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:fe:94:c8:68:3a:37:8c:78:91:c7:2c:ed:
                    15:fe:34:62:5d:cd:3a:c7:b1:58:49:e4:1f:0f:d2:
                    3f:e6:5f:be:27:89:8c:49:2a:36:14:2c:bd:5e:00:
                    7c:6c:1d:52:b3:8e:25:b2:48:95:fe:16:6b:f9:92:
                    eb:43:23:bb:a1:e0:5d:c2:26:28:df:1e:2d:09:4c:
                    68:50:19:b2:0a:2d:2b:31:9d:7e:fc:46:49:6b:64:
                    d8:53:30:c1:2f:e1:db:c5:36:0a:03:8d:75:a8:47:
                    d4:38:de:4d:ef:74:fc:d4:2e:c5:d2:02:2b:6a:15:
                    dc:23:d6:5d:f1:83:1d:2c:7d:27:27:6f:9a:59:36:
                    c8:df:83:ca:80:59:9b:a4:3c:99:9b:43:c6:fe:e3:
                    77:2e:d6:11:4f:c7:cd:f6:e7:93:5c:10:af:c7:65:
                    75:26:cd:33:7e:1a:28:31:4e:92:71:d2:6f:6b:89:
                    9a:d9:51:46:e6:54:16:25:cd:e8:d5:f9:67:fe:44:
                    80:ea:ee:1c:0b:0b:d0:2f:40:4e:8e:ec:2c:40:97:
                    0e:ee:5d:26:56:57:87:11:63:07:2b:e9:0d:7c:1a:
                    ff:03:85:fc:71:9e:b9:69:8d:ea:4f:d1:13:d5:e0:
                    4d:39:80:f4:a7:0c:6d:0a:8b:65:41:ea:f4:23:fc:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:E1:85:DC:3B:57:75:79:75:55:FC:5F:FC:99:C3:B6:A5:FA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b75f96a7-e280-3a11-a7fa-aebda5d75ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:af:ec:b5:83:fc:7a:15:c7:27:92:d2:e6:48:e2:c8:37:4a:
         ad:7f:63:4f:21:1a:ea:29:3d:27:30:f3:e7:eb:bc:4b:7d:c1:
         2b:71:03:52:19:82:c5:17:29:ae:00:8f:e5:ea:9f:a8:72:b1:
         be:8a:56:36:eb:1b:c3:c2:fa:df:f8:98:66:33:af:0e:5a:e7:
         dd:7c:49:2c:5e:ef:e6:f4:a1:1d:c0:c2:b6:cb:5d:f6:57:29:
         a4:26:d2:d2:15:2b:46:35:12:b1:79:ed:15:30:72:cb:a7:c9:
         1b:34:8b:3f:03:66:a3:84:51:e9:f5:c5:62:83:a9:25:c3:74:
         5d:5f:fa:09:91:85:8b:42:7f:3b:b4:25:24:71:9f:18:13:0e:
         4c:cc:c2:f0:71:81:5b:9f:f0:82:36:5c:82:68:ce:61:13:a8:
         57:4a:44:bb:4e:97:a5:bc:ae:5a:ce:12:e5:fd:73:57:8d:88:
         53:38:53:4b:9c:58:f5:fd:7c:45:16:89:06:4b:b2:9a:a2:79:
         02:bb:0f:3f:2f:2e:a9:36:85:2e:2f:17:9d:17:c6:39:19:f8:
         cb:7c:9e:17:9c:c0:b1:30:17:a6:08:36:db:9f:ce:79:e3:43:
         e7:91:9f:c0:a0:d0:fa:c0:73:fb:9e:2d:13:cd:ce:ff:65:87:
         9e:1b:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org