Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f42aa18e-dd1e-32f9-abd8-9eae4bdcbc99.roa
File:                     f42aa18e-dd1e-32f9-abd8-9eae4bdcbc99.roa (raw, json)
Hash identifier:          z+4qXT6NczCFXGTzT6voM8CRF7jCZa9hAYUSg4X61hs=
Subject key identifier:   7F:82:0B:2D:B3:C8:32:CA:B3:6C:DD:4E:FC:8C:4E:3E:5C:CF:D9:3E
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584773965C51F55722F08740B800
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f42aa18e-dd1e-32f9-abd8-9eae4bdcbc99.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     32780
IP address blocks:        206.190.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 09:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:5c:51:f5:57:22:f0:87:40:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=283bb170-5959-4672-b370-b1bb95fa0d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:1b:4d:1f:06:6a:3f:aa:35:59:c9:dd:e3:
                    64:ff:b0:8e:8a:87:c3:4a:98:d9:23:69:69:68:46:
                    53:55:25:a5:cc:0b:8c:4c:cd:3a:52:a5:5f:cd:ea:
                    8e:48:3e:f9:30:29:70:07:9c:15:e1:30:44:6c:1a:
                    96:5d:5f:50:80:ea:c1:be:a0:42:9e:1a:95:f6:ca:
                    6b:27:2a:a9:6c:d6:3b:9e:f9:18:ac:93:3b:61:9c:
                    9f:be:11:1c:4f:80:94:4e:81:b1:00:09:72:35:cb:
                    5d:35:36:33:53:24:bc:24:11:03:a2:d5:ea:2b:f7:
                    55:7a:ff:00:f9:a3:a3:33:74:e2:d5:02:6a:f6:f9:
                    1d:54:87:64:09:b9:39:40:cd:44:5d:d3:a3:9c:c2:
                    75:c5:54:fe:f7:05:27:cb:23:37:40:df:1f:4f:0c:
                    ea:49:40:df:6d:10:6a:02:8c:e2:69:72:ff:62:01:
                    37:52:5a:bc:8f:1c:af:62:44:f2:c6:58:37:5a:53:
                    93:df:67:8b:42:cf:57:d8:0e:58:8f:46:ba:66:52:
                    8c:14:a3:ba:bd:d1:aa:5e:aa:9a:2b:50:cc:b1:4a:
                    30:5c:50:ac:2f:8b:89:18:c1:8b:ea:5b:c9:c6:b6:
                    26:68:9c:f7:40:ce:11:80:02:45:c8:09:b9:6c:c1:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:0B:2D:B3:C8:32:CA:B3:6C:DD:4E:FC:8C:4E:3E:5C:CF:D9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f42aa18e-dd1e-32f9-abd8-9eae4bdcbc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.190.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:52:35:7a:79:de:5f:9c:42:f5:38:74:5d:fb:51:0e:f9:
         35:72:db:90:07:72:91:a6:c4:c0:85:57:dd:2f:ae:ba:db:5a:
         2f:2d:6e:68:24:32:21:b3:4e:87:a8:d5:c8:ea:df:32:1b:58:
         d2:a6:0c:21:60:c5:79:18:97:11:a3:7b:b7:bd:d5:09:ec:41:
         1e:65:d1:38:55:bf:0a:ee:c7:5b:a2:13:1a:89:a1:47:70:5e:
         5d:b8:cc:a7:ea:2e:eb:c4:e7:ce:e6:d1:fd:6f:b8:36:01:41:
         bb:b7:ec:07:53:f6:88:cb:e8:e3:34:23:00:78:03:69:bd:9a:
         52:d4:7d:bc:ce:02:c8:44:e8:bf:23:a3:72:4e:37:e4:50:92:
         42:82:5a:89:a8:d5:57:ee:bd:3f:b7:cf:33:86:96:71:f0:0b:
         3f:50:ea:4d:fb:64:57:97:2c:99:7e:5b:8c:ff:ce:79:bf:b1:
         d0:81:db:76:b6:2a:69:cb:bc:8d:22:40:d4:ea:5e:f5:d8:33:
         05:e3:e5:40:4b:55:bd:e8:d2:4a:06:1c:c0:f3:e4:57:39:b5:
         37:a4:e8:cb:9c:ff:63:9a:a5:cf:77:a8:16:19:75:8f:9f:ff:
         0c:c1:ae:22:fc:73:a9:66:da:77:9c:5e:20:0f:58:30:2a:a1:
         17:d1:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:59 2024 by rpki-client on console-fra.rpki-client.org