Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1ba9f6fa-3562-33de-a26d-b350d057a0ab.roa
File:                     1ba9f6fa-3562-33de-a26d-b350d057a0ab.roa (raw, json)
Hash identifier:          A3h5qgurbYL4T9qXdvqUbpnxHptV+b5+Row+n5K401g=
Subject key identifier:   F4:8E:20:3B:C8:A9:CA:5A:13:7B:39:CA:11:35:9D:A5:27:75:EA:AB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EACB854B2C96E012D76C80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1ba9f6fa-3562-33de-a26d-b350d057a0ab.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.116.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ea:cb:85:4b:2c:96:e0:12:d7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=798fe385-ab10-4799-9625-0bfa9b0f414e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:56:9c:c2:01:88:af:91:97:eb:6c:1d:d3:
                    75:96:ad:20:36:f6:ff:2b:60:3a:64:2f:43:ac:f6:
                    fc:55:a5:3a:7c:85:39:41:a4:c6:69:6c:da:7f:63:
                    85:44:1a:56:d2:aa:c6:7a:e4:74:fc:d2:b5:83:90:
                    73:9c:ed:f0:4a:4e:d1:dc:c7:47:2a:c9:b9:9e:0e:
                    fe:40:ae:3b:b7:6f:4b:14:89:d6:9a:1b:e5:a5:4c:
                    ff:33:fb:37:a3:72:61:36:21:7c:7a:0f:91:c9:98:
                    43:8a:b8:99:a3:71:0c:d2:08:02:a8:46:04:0a:76:
                    d8:da:fb:1f:1d:91:49:88:3c:09:cb:66:be:10:64:
                    94:fc:ca:8a:a1:b7:67:3a:85:d4:a3:77:74:f4:0e:
                    82:fc:24:3e:1b:48:ec:11:1d:64:4f:8c:03:26:56:
                    db:66:d9:8b:cf:6f:db:68:ca:df:1f:e6:09:98:4e:
                    03:0b:e2:7b:fb:84:b5:78:13:9e:44:e2:e4:3a:56:
                    c3:66:df:9c:5b:db:d8:23:e8:06:5f:7d:cb:a3:3a:
                    c6:72:f6:d1:09:73:02:70:5a:c6:03:03:3a:af:f5:
                    57:17:49:33:b4:40:bc:3c:9a:be:5e:01:dd:f3:8b:
                    27:39:19:26:50:16:15:a0:88:af:1b:7b:32:17:c6:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:20:3B:C8:A9:CA:5A:13:7B:39:CA:11:35:9D:A5:27:75:EA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1ba9f6fa-3562-33de-a26d-b350d057a0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:26:fd:2b:3d:0b:b4:4b:27:ac:18:94:2b:12:af:be:88:dc:
         65:bf:9e:7b:aa:30:d2:08:6b:63:68:b6:ed:ec:da:3e:ef:bd:
         cc:83:fe:ad:bf:d5:80:ab:d2:25:39:c4:53:3f:54:db:24:4d:
         73:9a:59:fa:51:53:fe:a5:30:fa:bb:0b:18:c1:40:3b:c0:b6:
         de:6c:d8:9d:ab:82:49:0f:fb:e4:04:65:85:74:08:60:3c:09:
         cc:ae:4c:ee:a6:c3:ab:34:94:59:d6:5d:e3:f1:de:81:02:32:
         36:66:db:13:f9:37:c9:27:28:58:79:d7:7a:1b:50:f3:73:9f:
         6c:12:63:2a:7b:dd:5c:90:61:7f:0d:3c:8e:4d:01:71:29:a8:
         66:68:32:91:5d:1c:7b:62:b9:a3:b2:7e:bc:37:f0:aa:8f:9a:
         ab:cc:cf:17:85:f0:a6:d9:2d:b6:f5:54:ab:be:88:df:02:53:
         ed:50:49:71:49:01:e8:2f:ff:19:1b:57:72:a4:bc:4f:c4:81:
         34:0b:63:37:43:c3:2f:83:a9:c6:eb:6a:88:65:43:a8:55:12:
         89:bc:5a:d3:c1:bc:1d:b0:41:ae:ea:1f:c7:7c:18:79:78:db:
         33:f0:cf:9a:11:80:dd:3f:14:ed:35:fb:e8:1c:a7:3e:f5:d2:
         04:61:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org