Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/25baab9a-4a3f-39df-9702-ff38c2c3d47c.roa
File:                     25baab9a-4a3f-39df-9702-ff38c2c3d47c.roa (raw, json)
Hash identifier:          0SUegMm+mCz+0JXR31GaCsu6ikzFr5zhbTvEkwSzmtM=
Subject key identifier:   BC:EF:2A:F5:3B:FA:F1:7D:0A:50:73:47:36:5E:92:5D:31:D8:56:C6
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720AA2F90C1874A1BB7C3A00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/25baab9a-4a3f-39df-9702-ff38c2c3d47c.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:a2:f9:0c:18:74:a1:bb:7c:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=79ed6bbc-b766-41c9-9ac7-3f20cbfc3c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:70:17:ce:1c:1c:2d:1a:3d:54:31:c6:32:
                    bd:81:a1:25:16:8d:8d:2e:e2:8d:3d:80:91:7f:1f:
                    37:72:95:c5:5b:d9:4d:8a:3f:a6:ad:0b:77:4b:b7:
                    a0:b2:c8:2b:de:35:0f:88:e2:aa:a7:71:53:dc:89:
                    60:e9:50:5c:4e:0d:00:bb:18:dd:d4:b6:ee:a4:43:
                    f2:da:db:2b:d8:74:65:c7:12:12:93:a7:65:97:fe:
                    a9:85:75:81:07:8b:6a:67:b4:4c:6e:da:65:48:0d:
                    e6:b4:b7:38:4b:94:23:06:18:00:ba:31:b3:10:18:
                    b2:c6:e2:bf:08:2e:6b:e9:9f:37:2b:c5:50:4c:7a:
                    5a:3d:02:84:a6:2d:14:18:cb:af:eb:b1:03:04:46:
                    df:f9:22:89:59:2f:40:f9:24:19:90:14:7e:9c:3e:
                    d9:b7:76:7c:d7:bd:db:d6:8c:04:c0:c1:12:34:2f:
                    f8:73:63:59:4c:4c:b2:6d:82:6d:7a:3b:1e:9f:29:
                    1d:0e:e9:15:41:cd:95:57:a8:7a:87:cd:16:66:08:
                    88:fb:03:a7:f8:2b:f0:2a:35:50:4b:23:27:00:68:
                    20:24:9b:39:d6:a8:57:e4:c6:f8:4c:1f:28:7b:b1:
                    5d:8c:48:9a:b6:fd:19:75:44:8d:90:40:0e:75:34:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EF:2A:F5:3B:FA:F1:7D:0A:50:73:47:36:5E:92:5D:31:D8:56:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/25baab9a-4a3f-39df-9702-ff38c2c3d47c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:79:5d:6d:26:9b:11:d5:e7:c9:4e:cb:ea:dc:f9:f3:1f:98:
         a7:71:13:36:8e:15:9b:16:2d:93:ad:0d:4a:9e:6f:8e:0c:79:
         1b:ef:aa:b1:c2:54:3a:29:c8:f3:df:93:73:4d:f2:34:40:b5:
         b6:bd:f3:ef:e1:76:15:35:df:90:3d:1f:5d:2c:f9:3c:1a:58:
         9f:18:30:cf:da:8c:e8:88:df:89:70:e3:12:03:f4:37:5b:86:
         a3:6c:45:6d:c7:4b:5d:ec:d9:85:93:a5:aa:63:e1:5f:4d:54:
         15:93:ea:d3:06:bc:ca:5f:8b:05:be:b0:57:03:a5:09:20:82:
         f9:4e:bc:7f:44:b1:83:a9:2f:d0:6c:5f:86:56:c6:f6:71:fe:
         86:a5:05:1d:ae:5c:16:b6:a0:96:88:eb:39:36:bf:08:14:62:
         71:74:9a:9e:f1:96:e5:c9:25:b4:be:c9:8a:3a:6a:67:d2:b3:
         9d:63:6a:e0:d6:10:f6:bb:7a:e9:18:b9:a0:cf:0e:e9:d5:79:
         b2:bb:2a:8c:8f:f7:c2:c5:7b:25:d0:14:bc:c4:90:de:6c:03:
         0e:90:da:1e:58:4b:18:67:72:9f:48:be:fc:85:01:62:11:ef:
         9d:45:a2:ab:8d:09:ea:6a:54:53:c3:e7:c0:13:63:7f:1d:8c:
         aa:28:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org