Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e4cdecf5-8ea0-3a16-99a3-465cf4d3a9d4.roa
File:                     e4cdecf5-8ea0-3a16-99a3-465cf4d3a9d4.roa (raw, json)
Hash identifier:          QsITV+jRP/d2cTAuoFZyGlPS9Ku/Ai3Yu1FQJKJe35c=
Subject key identifier:   2E:18:1A:65:F1:EB:57:D0:B6:2A:A0:04:7D:C7:A2:6F:E5:37:F7:E9
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858466BC48345A9ED50E78D0C21C0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e4cdecf5-8ea0-3a16-99a3-465cf4d3a9d4.roa
Signing time:             Thu 04 Jul 2024 01:00:26 +0000
ROA not before:           Thu 04 Jul 2024 01:00:26 +0000
ROA not after:            Wed 02 Oct 2024 01:00:26 +0000
asID:                     13213
IP address blocks:        173.244.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 08:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:c4:83:45:a9:ed:50:e7:8d:0c:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul  4 01:00:26 2024 GMT
            Not After : Oct  2 01:00:26 2024 GMT
        Subject: CN=2bbb52af-6faa-4709-81be-f82e77b8e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:a9:8c:b3:0c:7a:68:04:81:fa:b8:5a:16:
                    0b:9a:95:87:ab:ca:fa:2e:8f:aa:65:86:dd:8a:5a:
                    f6:95:70:4e:9b:8c:a3:b7:c1:14:12:28:bd:82:ab:
                    07:bb:cf:af:ac:8b:47:a4:83:fb:92:26:d4:f4:3c:
                    90:12:57:bd:c9:03:ce:3c:aa:24:10:2d:62:db:41:
                    c9:12:0b:da:f8:f3:08:b8:26:79:29:2d:bd:f6:72:
                    2a:43:ea:47:90:3a:2d:c6:ed:01:1d:73:44:37:8a:
                    60:d1:b7:68:6e:db:c2:af:3c:32:4f:17:c5:45:7d:
                    71:46:21:e1:f5:33:84:72:14:a2:cd:c6:38:e6:6f:
                    cf:ab:94:54:d6:10:84:aa:f0:ee:1f:b0:3e:46:e5:
                    bf:c1:93:8d:49:b7:f5:cc:5a:53:49:cb:cc:7c:d2:
                    02:c4:a5:fb:9e:16:66:77:ec:36:ff:4b:82:c1:a9:
                    17:82:a8:8e:f2:ef:39:e2:86:62:0c:97:d4:b3:a7:
                    c4:fb:7c:e1:a8:86:bc:fa:10:3b:9c:24:ce:22:7e:
                    34:18:3d:76:e5:87:19:e9:9a:a7:70:e7:a5:40:ea:
                    a6:2c:f3:a3:81:6b:a1:04:fe:07:d8:f5:11:b6:43:
                    0f:1c:7d:8e:8e:c1:91:84:b6:2f:90:c9:3c:17:01:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:18:1A:65:F1:EB:57:D0:B6:2A:A0:04:7D:C7:A2:6F:E5:37:F7:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/e4cdecf5-8ea0-3a16-99a3-465cf4d3a9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:11:56:90:4f:16:ac:9f:f5:73:17:e8:3e:71:66:d0:5a:
         4b:10:f7:2d:8b:61:a7:6b:0e:22:5e:27:6c:43:22:d1:89:1e:
         ab:2f:fd:c4:81:a2:9d:4b:cc:88:1e:0d:ed:bf:f8:09:4c:01:
         3b:6e:e2:7b:de:62:fc:b9:8a:da:3e:29:56:e3:1b:b0:6b:68:
         0f:88:fa:12:af:59:0d:e1:72:2a:f9:6f:e6:51:ca:22:7c:a7:
         a4:d9:dd:ba:2e:f4:9e:5a:af:d8:08:d1:37:98:68:25:1a:93:
         3e:fd:fe:bd:04:a7:ad:0b:ae:92:24:5d:8b:97:3b:04:b1:86:
         c7:b7:e5:d1:fb:50:97:dd:6a:18:ac:7b:99:57:a3:3e:2d:12:
         6c:ef:56:03:c1:fb:22:74:c4:58:b3:76:cd:d1:d2:ed:ae:fe:
         08:c4:4e:be:ff:c7:2e:68:5e:58:59:4d:13:ee:cb:e8:55:a1:
         68:dc:b8:46:2f:56:12:3a:4f:27:fc:2e:1d:ff:04:9a:0f:81:
         61:ab:05:cf:1e:aa:c5:f4:9d:55:c6:55:1a:b5:b7:6c:d0:21:
         d8:d1:d5:04:90:9b:00:d0:e2:a8:57:48:fd:e7:57:5a:13:dd:
         66:89:65:fb:f3:42:0b:d4:9c:95:09:34:da:b0:4b:42:a7:f1:
         c0:4f:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 11:03:18 2024 by rpki-client on console-fra.rpki-client.org