Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c95ffbf1-e094-3fa5-8b9c-bed470c996c2.roa
File:                     c95ffbf1-e094-3fa5-8b9c-bed470c996c2.roa (raw, json)
Hash identifier:          T+SlkjQoSdHs1dZa498p56rXHBFcU8io5phfPIAJWo4=
Subject key identifier:   B6:98:73:66:65:95:24:EB:67:C4:E3:47:44:CB:18:47:CE:53:8D:57
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847FF4A4F0115BB4BD469F57220
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c95ffbf1-e094-3fa5-8b9c-bed470c996c2.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     53356
IP address blocks:        140.228.23.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 22:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4f:01:15:bb:4b:d4:69:f5:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=c0822b68-387b-44bc-a5f8-d21bfb10323c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:89:56:1c:06:66:7c:99:2a:c1:6b:01:c0:
                    71:d5:8c:56:56:0b:6b:ce:29:95:fb:ff:64:97:0f:
                    14:71:6f:07:48:8f:04:95:27:c7:2c:ca:81:3e:6d:
                    fe:e8:17:3e:5e:6a:98:95:54:c4:6f:cb:bf:47:0a:
                    fc:63:ac:f4:e0:b6:d9:e9:30:30:27:ee:8d:9b:34:
                    d3:e7:5b:6c:4b:02:ba:7e:5b:46:ea:ca:82:15:15:
                    bb:4c:04:96:4f:07:4c:b7:de:df:cd:a3:df:35:25:
                    85:d3:94:59:13:8d:62:a8:70:ed:8e:4a:a2:6b:27:
                    cc:75:3d:a4:fb:23:87:4c:99:02:2b:55:9f:fe:02:
                    10:f8:f5:2a:fb:b9:69:d5:31:6e:42:84:df:94:34:
                    c1:3f:56:58:84:0f:53:9e:68:54:28:8b:b1:e1:be:
                    5b:2e:7f:ff:ac:bf:9f:fd:1e:4f:c6:9d:a6:13:1a:
                    e5:7b:56:b5:90:69:81:78:f6:f7:8d:5b:8a:bb:5c:
                    e9:1f:0f:98:f7:97:d9:cb:86:d6:40:3f:fe:a7:1f:
                    b2:e2:3e:4b:3e:cd:04:25:8a:69:e0:3b:2e:4b:3d:
                    16:50:20:ee:22:de:d2:ad:77:cc:54:5e:dc:95:03:
                    ee:5d:06:15:83:8d:3c:66:ed:97:df:de:2f:22:a1:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:73:66:65:95:24:EB:67:C4:E3:47:44:CB:18:47:CE:53:8D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c95ffbf1-e094-3fa5-8b9c-bed470c996c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f0:3a:f7:0e:5a:7f:05:3c:40:db:b4:53:2e:10:f0:76:5e:
         86:c1:79:2a:fb:b5:5b:e6:bf:17:fa:ca:c6:12:3b:2b:9c:63:
         e9:1c:5d:fd:74:55:5f:9b:3b:f2:b2:58:94:38:5f:ac:bf:75:
         0f:ac:d5:1a:84:40:96:c9:b5:d0:1a:7e:f0:69:20:5d:c5:c4:
         1c:41:76:72:fc:93:70:1d:1d:f3:ae:f8:f7:85:b7:12:75:d2:
         b4:51:74:b3:42:5e:db:49:98:3d:9d:80:53:9d:a9:62:c6:60:
         e3:5a:76:00:6e:03:a7:4b:3f:e9:6d:c5:ba:6e:39:ef:99:33:
         d8:6c:f7:79:66:bf:ab:0d:22:ca:35:3d:45:5a:70:4e:15:ec:
         53:e2:c8:c0:ce:e6:21:9f:dc:08:89:a8:15:69:fc:89:84:f6:
         5f:48:e0:8f:7d:01:bb:c6:c0:fc:db:12:68:9b:ce:d6:92:4a:
         3b:8b:f0:5f:0a:bc:30:13:26:79:a8:bf:39:1d:50:cf:2c:69:
         fe:a8:d9:04:4d:f7:65:4b:3b:90:c1:14:18:c5:55:a7:ca:21:
         f3:e0:6a:a9:a6:79:f6:23:b1:89:bd:05:a8:56:04:fd:41:b7:
         69:af:f8:b2:25:6b:f3:c3:46:d3:ad:8f:19:ea:87:fe:11:0f:
         9f:c8:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:48 2025 by rpki-client