Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/0145dd43-06b4-37c3-a522-02b7a1e97995.roa
File:                     0145dd43-06b4-37c3-a522-02b7a1e97995.roa (raw, json)
Hash identifier:          /jmbScNZb+Y4I+yhwHJeLGwAM2B4yvcwxEvf7hc1fcw=
Subject key identifier:   68:0D:A9:CB:68:C9:80:D0:63:31:0E:1F:58:22:20:6D:CA:DF:D3:53
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F4328584605DEA4F234A66689DB1E2700
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/0145dd43-06b4-37c3-a522-02b7a1e97995.roa
Signing time:             Tue 28 May 2024 13:00:34 +0000
ROA not before:           Tue 28 May 2024 13:00:34 +0000
ROA not after:            Mon 26 Aug 2024 13:00:34 +0000
asID:                     29848
IP address blocks:        204.108.162.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 17:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:05:de:a4:f2:34:a6:66:89:db:1e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: May 28 13:00:34 2024 GMT
            Not After : Aug 26 13:00:34 2024 GMT
        Subject: CN=ec2b0f18-4dd4-4cda-af9e-e18b1caf3748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:75:7a:11:d0:71:8f:c4:4a:43:5a:cf:cc:
                    c1:58:17:ea:81:0a:ab:c0:75:d2:30:fe:e2:3c:cb:
                    d9:af:74:0c:fe:a5:44:23:f9:a8:58:ce:82:56:c8:
                    99:55:d6:87:24:3c:31:85:34:53:4e:f1:f8:c9:4f:
                    b1:c6:3d:10:22:dc:10:28:7f:b8:09:ce:78:f5:3e:
                    91:41:86:c6:19:e0:66:05:ed:89:cd:af:63:bc:d7:
                    74:a4:1b:2d:14:61:ed:25:13:3f:22:cc:67:25:ad:
                    37:6b:b9:8e:ba:6a:05:ee:0f:ab:6e:14:63:9a:4b:
                    c2:84:46:e7:0a:8b:97:01:f3:ed:59:ac:a5:b5:40:
                    b1:83:b9:c9:58:0d:a4:b6:23:90:48:ce:e2:f5:a5:
                    ab:15:19:b0:da:38:5d:47:7a:49:9e:e5:7a:46:c5:
                    97:8e:27:6e:72:ad:78:19:a7:97:5f:e7:37:f6:e9:
                    cd:70:34:70:18:a4:82:53:0c:89:04:6e:bc:4e:c1:
                    4b:c4:5c:9d:6e:8a:a5:31:ff:22:e1:1b:db:1a:96:
                    fd:83:b3:f3:9e:10:cb:6e:b4:0e:88:7d:37:e6:2e:
                    8e:80:be:ef:8b:6d:39:a0:d6:61:3c:05:93:e0:25:
                    b7:dd:ca:74:1d:7f:7f:0d:79:21:06:dd:bc:7d:17:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0D:A9:CB:68:C9:80:D0:63:31:0E:1F:58:22:20:6D:CA:DF:D3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/0145dd43-06b4-37c3-a522-02b7a1e97995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:3e:fa:38:2c:6e:aa:62:a5:b6:35:9f:2a:44:7d:ca:91:
         d6:9c:90:ac:d2:79:6a:67:80:e7:28:fd:56:79:77:67:82:e8:
         03:6d:53:c8:ae:86:55:48:b2:88:f0:88:1d:40:04:59:26:36:
         66:a3:4c:26:70:dd:67:20:76:a6:26:db:3c:77:cd:14:19:9a:
         78:fe:ed:1c:56:b5:c9:60:c7:58:79:84:ca:81:4e:9f:38:ae:
         5d:70:64:b9:5c:50:c8:17:64:f1:2d:b6:6c:f1:f9:fc:1c:d2:
         45:a8:b9:fa:c3:20:6e:1e:02:6b:e9:ef:74:08:7a:70:5a:d8:
         d2:22:0b:4f:89:48:e4:54:60:93:45:05:ad:d1:1c:ac:e5:f4:
         46:c5:3e:94:3a:d5:01:fd:e2:14:8f:8d:88:fd:05:52:f7:66:
         f1:96:5d:29:ee:f6:1b:c7:08:ae:4a:df:82:c2:66:a5:85:ce:
         82:c6:17:af:1b:18:c2:76:d6:c5:50:a3:71:ff:d5:2f:d5:b8:
         8f:db:b4:c6:74:4c:06:72:dd:bf:fd:bc:00:d3:36:9a:ff:20:
         2e:10:32:95:ce:f2:85:7c:37:8f:81:c7:24:09:41:1c:d5:8b:
         4e:5e:a9:65:97:7f:1b:d1:5b:24:13:bb:12:e3:2e:62:ee:97:
         16:60:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org