Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28b47dd2-944a-3659-9f24-23f99933785e.roa
File:                     28b47dd2-944a-3659-9f24-23f99933785e.roa (raw, json)
Hash identifier:          RcE+f1VcbuGRHgTm0ihhLblTCjRnFps4gP+kGL/xIns=
Subject key identifier:   00:5C:10:B2:AD:C5:C3:6D:6A:9E:D8:3B:9A:A8:40:36:1D:29:67:81
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844D3D89D89EBDAA84EC5456E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28b47dd2-944a-3659-9f24-23f99933785e.roa
Signing time:             Thu 08 Feb 2024 22:11:09 +0000
ROA not before:           Thu 08 Feb 2024 22:11:09 +0000
ROA not after:            Wed 08 May 2024 21:11:09 +0000
asID:                     59895
IP address blocks:        198.102.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 17:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d3:d8:9d:89:eb:da:a8:4e:c5:45:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  8 22:11:09 2024 GMT
            Not After : May  8 21:11:09 2024 GMT
        Subject: CN=5099c410-3a5b-4a07-b19a-76347135e1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:8d:e6:9e:52:29:dc:d1:70:29:c4:35:78:
                    7b:75:50:9c:a0:8b:f9:a3:6c:53:47:a2:d4:10:0e:
                    0b:1b:fa:45:8f:a2:12:3a:5f:30:6c:61:d3:25:f0:
                    e5:01:0b:17:25:1f:8c:57:0d:a6:1c:18:38:be:c5:
                    86:a0:2f:9c:eb:79:43:e4:93:f9:83:24:e3:ab:c8:
                    15:8f:cd:85:4e:a8:fe:9b:98:d7:db:b9:da:58:ab:
                    0e:49:15:ea:d0:98:ec:b3:49:e4:71:db:bc:c9:da:
                    83:fc:84:83:ee:1e:35:6d:7f:b5:13:19:be:69:81:
                    dd:9d:6c:1d:44:81:46:ef:7b:93:1e:03:e8:6f:5e:
                    71:fb:77:37:1f:17:dc:30:9e:2d:6d:4c:19:38:f9:
                    e7:3d:ff:fe:a7:c6:58:46:2b:a0:33:01:0d:0a:22:
                    91:a4:47:93:b7:fa:a5:07:60:7d:cd:ec:a3:cb:3a:
                    9b:58:9b:d7:8f:69:93:46:03:76:ad:08:6f:05:16:
                    d9:92:7a:ad:82:d8:bf:eb:15:76:0e:67:c5:b1:fe:
                    bb:22:7c:23:4a:ea:8a:77:a5:35:b1:a2:b1:79:e7:
                    07:59:e7:75:d3:ef:3a:58:ec:3a:20:ab:3e:2b:0d:
                    b2:24:04:95:e9:0d:4e:20:4e:de:0e:8c:71:a6:ec:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5C:10:B2:AD:C5:C3:6D:6A:9E:D8:3B:9A:A8:40:36:1D:29:67:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28b47dd2-944a-3659-9f24-23f99933785e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:f8:0e:69:5d:6a:d2:e1:7b:7e:af:56:fa:c5:3b:4a:e6:
         47:63:20:22:b1:3a:d4:32:ac:c0:3a:23:b1:49:99:36:a8:ae:
         27:73:a7:ac:97:03:31:8a:06:50:dc:ce:63:22:d2:7d:e5:c3:
         8b:08:f6:46:a9:39:d7:e4:bc:c7:40:88:fe:89:87:50:16:51:
         a2:90:ec:9d:46:b6:27:6a:17:70:40:d3:5e:9a:b2:53:af:bf:
         90:9e:84:40:72:a4:c6:ba:7e:cf:80:5d:d5:88:7e:39:4d:d1:
         ff:24:e0:10:95:58:3f:60:76:59:cb:06:b2:05:28:2e:20:cd:
         dd:73:c0:47:7e:90:a0:3c:af:f4:60:08:f1:d7:9e:33:d6:3d:
         d2:40:e9:d2:51:de:b3:7b:29:b7:b8:7e:15:37:c3:c1:a6:ce:
         b7:a8:1b:c4:b2:8f:58:64:08:32:1d:dd:65:89:0b:fa:5e:60:
         9d:b8:ce:5f:dd:c6:38:43:1c:2b:97:8a:4b:78:26:1c:bd:a6:
         7a:19:75:ac:29:86:80:53:8d:d3:c8:22:87:c1:26:49:ed:a0:
         e7:1d:a2:0c:ac:85:0a:1d:7e:6f:74:07:e6:73:b0:0c:16:d5:
         0b:36:dc:8c:2b:1a:df:85:7c:d1:03:4c:77:07:f5:65:b2:9a:
         49:16:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:17 2024 by rpki-client on console-ams.rpki-client.org