Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/16420ce6-1379-365e-80fc-48c62e0847ae.roa
File:                     16420ce6-1379-365e-80fc-48c62e0847ae.roa (raw, json)
Hash identifier:          ewrfSO5zffi4+ngw6BRYTS7gC7ZPxWWisE2F+tZ+/WE=
Subject key identifier:   AC:72:B1:B1:FE:8D:7C:C9:28:96:52:C4:7C:32:C2:33:C8:44:9C:97
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F43285845B7B387061523C0C5107BCC40
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/16420ce6-1379-365e-80fc-48c62e0847ae.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        67.212.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 07:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:87:06:15:23:c0:c5:10:7b:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=93e169ea-c2d1-46f7-8735-b0d82e6f8f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:a3:bd:89:9f:ff:88:c1:35:1c:03:85:15:
                    cc:88:ff:14:20:f5:70:7d:bf:3e:c6:40:11:07:3f:
                    9c:d7:21:84:04:86:53:e5:ab:8e:b9:77:20:b3:00:
                    9f:10:74:43:20:d9:42:fe:85:e7:3b:a1:e4:b6:c5:
                    be:fc:82:83:87:7f:92:15:fa:83:72:0c:03:bd:a6:
                    f7:71:f3:22:30:b2:fa:b3:5b:7c:c7:b8:b6:24:1f:
                    57:82:67:a5:4c:bf:bf:5e:63:fd:f1:fd:7f:93:5c:
                    d5:db:4d:2d:fd:c5:2b:00:41:31:20:5f:20:73:03:
                    42:80:d1:98:ef:c8:dd:79:4d:c7:07:bd:cf:f4:a7:
                    83:75:a8:88:60:60:a0:01:c3:91:ef:90:a3:e0:11:
                    bc:10:f5:4e:68:35:1f:f3:1b:a8:13:2d:fc:80:d9:
                    88:a4:20:ff:63:94:bf:d7:0a:31:db:d8:5b:5c:f6:
                    18:ab:6d:68:4c:29:11:79:f7:f8:b9:dc:74:c5:77:
                    c8:a8:92:c0:66:55:6f:6b:ba:98:f7:80:5b:e7:90:
                    73:1c:79:ab:17:6f:26:49:9d:aa:67:0a:7d:52:27:
                    90:49:40:c6:d5:7c:53:07:da:db:70:44:86:a0:08:
                    14:3f:a7:c4:46:1a:24:f0:40:d9:2b:fc:f2:3f:1a:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:B1:B1:FE:8D:7C:C9:28:96:52:C4:7C:32:C2:33:C8:44:9C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/16420ce6-1379-365e-80fc-48c62e0847ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:91:1b:32:56:e0:69:c7:82:86:0c:d8:1e:50:30:9c:2c:
         35:68:77:94:41:ec:c2:13:63:d9:be:57:70:f5:86:eb:83:b5:
         08:2d:a3:07:5a:99:0d:c3:47:6b:cb:ef:0a:b0:c9:3b:b8:a6:
         dc:96:51:3c:bd:e5:1c:67:07:8b:53:57:5f:c7:62:5e:8c:42:
         f8:0f:4b:60:c1:6d:ce:b7:21:14:ab:e1:43:25:c3:e3:4e:df:
         38:1f:63:0b:19:4d:dd:ad:e1:90:ab:e7:11:b8:bd:06:32:d0:
         27:32:04:b1:f2:99:3f:7d:f7:9f:3c:04:09:ab:62:46:ee:a5:
         dd:10:cf:06:fb:5e:12:0b:dc:dc:73:ad:e2:6c:b6:0b:69:82:
         1a:2b:9b:43:bf:97:62:59:ab:16:cb:df:9b:d7:67:a2:1c:2a:
         76:0a:00:e6:69:91:3f:27:de:66:b0:21:be:e0:19:cb:d2:fb:
         43:a4:e5:c9:ff:f5:36:ec:af:aa:55:de:7e:42:75:f5:8c:cd:
         48:82:77:52:20:05:c4:6b:fb:7d:e2:8a:33:04:8a:62:b9:5f:
         46:60:db:6c:6a:92:b2:a8:33:60:13:94:2d:4d:cb:55:73:08:
         66:43:52:79:4c:e1:b6:d2:a3:21:f3:4f:25:50:8b:cd:8c:a5:
         b0:5b:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 10:06:39 2024 by rpki-client on console-ams.rpki-client.org