Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dec4de3b-9548-328a-a161-11ece0127d61.roa
File:                     dec4de3b-9548-328a-a161-11ece0127d61.roa (raw, json)
Hash identifier:          nSPPggiZLCBHeXdJKnRkZlcrZWNWgVfeyWfzEjDNSpI=
Subject key identifier:   DC:9D:D0:3A:02:98:61:24:94:BE:C8:40:38:A9:FC:38:EC:FF:FB:59
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1596C2D773DB569DF97280
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dec4de3b-9548-328a-a161-11ece0127d61.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:96:c2:d7:73:db:56:9d:f9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d2ef50d2-d413-4634-80db-bcd750267f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:e7:7b:55:2b:b0:44:78:7b:b9:3f:04:3c:
                    60:50:a3:06:10:dc:59:92:65:ed:8b:e0:9e:82:7c:
                    58:8c:18:82:3a:7e:8b:a4:4e:38:44:53:81:37:cf:
                    d1:45:ac:ff:9a:65:08:21:29:55:cd:ac:8d:48:65:
                    20:87:7f:51:04:ea:77:a2:21:34:60:8d:dc:3d:22:
                    a0:7e:b4:5b:30:c5:74:f7:a2:bb:20:f3:ca:11:58:
                    d6:e2:9c:92:7f:2e:28:15:15:89:71:d2:f0:91:fd:
                    c4:07:40:d8:2f:02:0a:bb:79:8b:e9:4a:7b:53:4f:
                    12:29:63:28:e8:79:74:b3:c3:05:8a:e4:b8:7c:f7:
                    be:c0:5d:5f:4e:b5:e9:b0:03:3e:2a:12:d9:c5:bf:
                    5f:22:ed:bc:8f:b6:2f:b3:4d:c7:03:c8:b3:b3:24:
                    1e:54:cf:cb:53:3f:d1:51:84:c6:5c:56:d7:2c:e2:
                    5e:7c:57:a7:68:a9:8c:e7:26:55:7b:54:06:e3:72:
                    0f:cf:75:67:93:b3:12:6d:d2:40:e5:e4:7e:77:df:
                    59:d9:52:5c:c1:2f:27:a9:ab:14:13:8a:ed:7b:71:
                    92:38:31:43:4a:85:7c:70:f6:75:3e:2d:73:08:f1:
                    3a:97:0f:55:35:73:d8:14:93:db:de:4e:27:59:c0:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:D0:3A:02:98:61:24:94:BE:C8:40:38:A9:FC:38:EC:FF:FB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dec4de3b-9548-328a-a161-11ece0127d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:1c:28:26:b1:38:a7:7c:91:e0:87:ff:97:fd:ab:5b:5d:
         6e:8f:7d:f8:e9:17:5b:d3:af:40:87:cd:2d:e8:31:a7:e4:af:
         4e:de:f5:ec:ac:1b:36:0f:69:3d:73:68:c6:b6:2e:e9:10:a4:
         4b:74:ee:b2:54:29:82:09:c1:c2:0b:fd:87:d8:5a:7f:5d:05:
         d0:3b:1a:24:88:b8:07:9b:30:cc:a1:2c:21:47:f9:52:1f:23:
         b0:72:85:5f:4d:a0:c6:15:ea:e3:79:20:45:c5:9d:bb:61:09:
         7c:1c:8e:00:b0:03:61:8f:e4:f3:7c:4a:e5:8c:6a:b0:e0:2c:
         92:27:7b:cb:e3:d9:50:bf:cb:d7:ec:34:2c:ce:c1:e0:08:88:
         3e:a6:2a:a6:cd:2d:fc:38:e2:d5:59:93:cf:90:c5:c7:6d:ee:
         91:84:1b:f3:8f:fa:d2:3d:e8:26:14:de:05:60:86:c9:7e:2c:
         80:f8:55:ef:41:6e:44:1d:82:79:9f:22:73:6b:5a:df:07:ff:
         94:2c:6a:75:7a:36:76:b8:3b:dd:e7:92:85:8b:b5:8c:bc:6a:
         4e:57:46:ff:fb:b0:2b:2f:b3:8f:05:af:ed:2f:b3:fe:93:7c:
         47:f9:ab:53:6f:90:72:4f:69:c5:0b:00:a1:b8:51:42:1f:ea:
         58:4a:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org