Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/b6731c47-9b1f-349a-8c24-4e02e8a309b1.roa
File:                     b6731c47-9b1f-349a-8c24-4e02e8a309b1.roa (raw, json)
Hash identifier:          bSVGy5ae/tyVK8Z0sNyOlVDv6a5OI7GM2O0OEU3p3Ag=
Subject key identifier:   60:59:23:75:35:DD:F2:2B:5C:C8:7A:7D:FB:07:E6:50:E2:69:DB:6F
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F43285844C64D572B34498A819959B480
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/b6731c47-9b1f-349a-8c24-4e02e8a309b1.roa
Signing time:             Sun 04 Feb 2024 01:45:01 +0000
ROA not before:           Sun 04 Feb 2024 01:45:01 +0000
ROA not after:            Sat 04 May 2024 00:45:01 +0000
asID:                     834
IP address blocks:        136.175.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c6:4d:57:2b:34:49:8a:81:99:59:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Feb  4 01:45:01 2024 GMT
            Not After : May  4 00:45:01 2024 GMT
        Subject: CN=311d05f8-d6ce-4934-97f6-a7e021ffc1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:a0:1d:a4:28:ab:42:bd:46:02:05:86:1d:
                    67:ba:66:14:bc:f8:9f:b6:4a:2b:a6:06:02:b3:5e:
                    98:33:2d:03:fd:b7:6d:a6:2d:84:6e:b6:e8:01:5c:
                    b3:61:e0:12:24:c2:ff:13:c5:d9:63:72:c2:1e:79:
                    90:d1:93:11:63:51:06:3d:4b:13:0c:89:07:73:1d:
                    76:42:f4:11:cf:02:4a:45:de:21:cd:87:98:e5:d5:
                    2d:96:dc:b4:d9:7c:41:37:d8:3f:1f:94:12:e8:f7:
                    7f:ff:a4:70:c4:59:a5:9f:78:6b:23:de:07:24:3f:
                    1c:a1:a5:70:87:d1:4b:b9:4f:ce:2f:7d:a4:ce:5d:
                    7f:30:bc:29:cb:67:5b:4e:61:cc:9f:34:29:e7:c9:
                    81:23:0c:46:87:b3:6f:c1:b6:87:75:36:13:23:a4:
                    6a:ca:b2:97:e7:db:be:24:c7:b3:00:a4:ae:3d:72:
                    d2:8b:8f:97:ab:86:65:1c:95:16:77:cb:6d:c4:e2:
                    79:7d:c3:3b:32:e5:60:3a:da:40:0b:87:6a:9c:26:
                    8d:28:ad:65:ca:b2:e4:d6:c0:0c:9f:d4:0b:27:31:
                    c1:da:bc:77:61:de:96:3a:95:df:fd:16:8e:be:1a:
                    f3:e4:30:85:1f:0f:11:08:a2:32:8a:1d:fc:e1:77:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:59:23:75:35:DD:F2:2B:5C:C8:7A:7D:FB:07:E6:50:E2:69:DB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/b6731c47-9b1f-349a-8c24-4e02e8a309b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:82:ff:50:38:ae:8b:58:f6:33:d3:82:8e:67:35:40:0a:
         b3:be:a0:68:32:fe:f3:b5:64:81:7c:dd:94:43:d6:a0:fa:98:
         6d:1e:b1:65:19:6c:e7:d2:40:2f:c2:fc:4b:1a:a9:91:8c:c1:
         47:82:50:b7:56:72:bc:6c:22:36:f8:dc:96:e0:ea:aa:f3:84:
         cf:65:cf:2e:b4:58:2c:72:6c:8f:0f:e4:fb:19:a1:30:7b:1f:
         0f:56:c8:8e:09:22:da:17:53:b2:79:5a:d9:ac:66:9d:8d:bf:
         e2:34:97:8f:b6:24:51:cf:97:25:3f:80:49:25:f4:89:a0:3f:
         f7:7d:b9:62:b4:4b:38:b8:61:5e:f2:37:4f:cb:e4:96:50:e2:
         30:e7:b4:a5:3a:d0:4e:34:be:9a:83:7f:41:e2:5b:82:6f:a9:
         1d:da:2f:59:75:54:83:01:7a:bb:ac:26:bd:4b:43:82:2c:fb:
         2a:23:06:5f:66:8c:3b:c1:3b:05:b7:97:b4:81:7a:34:3f:3f:
         63:fd:e1:79:15:3d:9b:30:02:7b:92:3b:f0:07:5c:08:22:db:
         08:ae:57:70:04:83:4c:05:06:ea:55:7f:d7:05:39:5e:8d:0a:
         5a:8b:89:9b:b3:76:51:4e:ed:53:5d:16:c7:da:06:c7:85:fc:
         ea:33:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 03:28:07 2024 by rpki-client on console-ams.rpki-client.org