Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d44581f-c25b-313d-9c84-79fdd7867951.roa
File:                     7d44581f-c25b-313d-9c84-79fdd7867951.roa (raw, json)
Hash identifier:          C1+BDvp5+wvU+gr8rfyMCSwv7AZufZzNaYvHeGd26UE=
Subject key identifier:   C8:6B:93:39:7F:68:4A:CC:C4:E7:E6:B1:0E:65:12:E6:EE:2B:E9:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584565FC8DD24273FF724BA738C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d44581f-c25b-313d-9c84-79fdd7867951.roa
Signing time:             Mon 01 Apr 2024 06:31:35 +0000
ROA not before:           Mon 01 Apr 2024 06:31:35 +0000
ROA not after:            Sun 30 Jun 2024 06:31:35 +0000
asID:                     834
IP address blocks:        74.114.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:fc:8d:d2:42:73:ff:72:4b:a7:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 06:31:35 2024 GMT
            Not After : Jun 30 06:31:35 2024 GMT
        Subject: CN=16978575-b2fd-4561-b57d-4fc1b89837b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:aa:f2:f2:2e:52:1e:ce:6b:55:4f:39:01:
                    2e:22:7e:22:be:5a:fa:c1:4c:a2:26:7e:47:9c:d2:
                    01:e7:61:c2:e4:a7:e9:ae:8a:7c:1b:f2:b8:f4:a2:
                    f5:d0:a3:dd:61:27:4b:af:74:6b:d9:1e:b1:dc:78:
                    0c:af:3f:af:ed:02:85:f1:ec:40:77:db:85:cc:41:
                    59:fc:b8:79:0a:01:e4:71:51:b3:00:a4:dd:56:f8:
                    3d:96:da:d4:69:84:7f:83:92:13:0c:d5:cc:76:5e:
                    a1:53:f7:a4:15:92:39:0e:62:94:1e:44:80:c1:3a:
                    1f:a6:2f:cd:fc:c4:f2:24:77:6a:2a:0c:98:22:fc:
                    7a:00:ed:ba:39:43:54:40:e2:6a:da:37:dc:24:2d:
                    39:94:22:46:32:40:2a:5d:2f:78:89:05:79:6a:48:
                    a3:dd:a6:de:d5:f9:52:b5:15:a0:5f:87:76:4c:b6:
                    bd:4f:20:52:ee:b6:23:a3:50:97:c3:71:ea:25:02:
                    ea:4c:49:d7:1f:d8:c1:c5:0d:cb:e8:2f:82:83:6f:
                    0b:8b:29:36:e9:02:fe:a2:d6:cb:1d:69:c3:ce:ca:
                    fa:e1:a1:6f:b9:f8:50:20:d8:f4:60:d8:72:fc:17:
                    33:b5:72:90:7b:b1:80:1d:09:c3:90:a0:e4:75:a2:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:93:39:7F:68:4A:CC:C4:E7:E6:B1:0E:65:12:E6:EE:2B:E9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d44581f-c25b-313d-9c84-79fdd7867951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:b9:31:2c:c1:cf:03:ec:bd:06:ae:3e:e4:00:55:9d:a3:
         c3:d1:91:f2:89:c8:29:2f:c3:65:5c:2d:f2:e9:7c:ef:23:e1:
         68:5a:ee:31:5b:7a:f9:db:69:97:06:8d:cd:7d:b6:1c:2b:b4:
         46:25:82:95:43:ff:90:fa:ec:87:65:d6:68:49:00:c0:f7:d9:
         13:a5:e1:be:26:da:8f:49:f2:aa:26:c0:83:75:1a:43:33:85:
         b7:95:f2:80:21:61:7e:b0:7d:9f:82:12:67:6d:ec:1e:23:ca:
         cf:25:ba:41:8a:be:fd:85:b0:ff:59:01:d5:08:4d:a4:30:87:
         44:bc:39:ef:43:69:cb:99:b7:f9:9b:cb:44:36:ab:e7:8a:b9:
         51:ce:6b:02:bd:6f:a5:36:8a:cf:80:f5:1a:aa:2e:eb:dd:c8:
         58:5a:8d:fd:a4:2d:e5:58:31:b8:90:42:e4:8c:c4:64:7a:c6:
         9b:ef:26:aa:69:58:87:b8:21:54:3e:52:9d:d8:e2:94:fd:bb:
         33:1b:1c:03:33:7b:1f:32:26:ce:13:a5:ac:ec:de:a5:56:46:
         0c:ad:15:3d:76:3c:17:a6:ab:e5:e0:25:a2:cf:0a:d7:b4:71:
         d1:18:3d:4a:85:fd:8e:11:df:6a:cf:13:f8:51:64:49:f2:15:
         7f:b4:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 18:38:46 2024 by rpki-client on console-fra.rpki-client.org