Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a0e5bcc-4031-3414-aa9d-10cccdbc2132.roa
File:                     8a0e5bcc-4031-3414-aa9d-10cccdbc2132.roa (raw, json)
Hash identifier:          PkoPPHeCIjF83oiOU0fJauPq4XB1JJAhr5loLTgkGT8=
Subject key identifier:   8E:CF:EB:BD:B0:BF:A7:85:00:50:AC:C1:AF:42:45:87:4E:E4:ED:63
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858460EA45C99454BE45B1C891000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a0e5bcc-4031-3414-aa9d-10cccdbc2132.roa
Signing time:             Fri 31 May 2024 16:25:30 +0000
ROA not before:           Fri 31 May 2024 16:25:30 +0000
ROA not after:            Thu 29 Aug 2024 16:25:30 +0000
asID:                     834
IP address blocks:        66.78.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 11:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0e:a4:5c:99:45:4b:e4:5b:1c:89:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 31 16:25:30 2024 GMT
            Not After : Aug 29 16:25:30 2024 GMT
        Subject: CN=9cbb13be-9ab0-47e5-96c5-2be3043c4ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:b0:9d:72:5f:e7:8a:39:6d:82:ee:91:b2:
                    3a:fd:d7:f6:e3:0d:d0:3d:66:0d:32:a4:8f:be:6e:
                    6b:5d:bc:26:42:a5:01:d1:ee:95:b2:89:bb:9d:09:
                    87:9b:93:53:c8:b5:4a:d6:84:3e:09:d0:6d:39:04:
                    2d:f9:de:05:3c:8d:80:be:96:79:94:4d:17:7b:9c:
                    96:b1:8a:52:27:72:a4:77:83:2b:62:27:91:ef:50:
                    91:14:b5:b8:b2:bc:27:59:29:b5:31:4f:15:97:f5:
                    90:bc:b0:2b:37:f0:5d:74:41:31:b1:b4:5b:c0:74:
                    48:8b:9b:dc:d7:53:02:bc:41:2f:dc:65:30:49:bd:
                    64:6e:cf:96:ff:4d:47:50:eb:15:34:69:3c:bd:a4:
                    11:e4:cd:62:86:9a:32:b8:81:2a:3c:29:d9:32:8c:
                    3e:37:cd:5c:07:2a:cc:e6:ed:2c:de:49:7c:37:62:
                    e9:df:b0:6d:e0:a2:47:b0:18:27:ea:36:08:91:95:
                    4f:af:7c:65:5d:a7:45:e8:b2:2a:e3:b8:aa:05:b5:
                    66:9f:70:81:50:c6:7d:f8:21:87:38:9e:10:df:1e:
                    a1:6a:07:42:7e:9d:3d:1d:56:e5:57:de:78:31:2f:
                    4d:fa:57:e5:f3:89:63:be:4b:9e:48:75:a3:2f:07:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CF:EB:BD:B0:BF:A7:85:00:50:AC:C1:AF:42:45:87:4E:E4:ED:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a0e5bcc-4031-3414-aa9d-10cccdbc2132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:79:b5:e4:92:0e:81:59:41:f4:c3:ed:f7:da:14:87:cf:b0:
         d5:5b:15:ec:54:26:7a:9c:7e:05:96:b5:48:3d:8d:52:4e:b0:
         08:7e:75:75:f7:0b:eb:4b:fb:c4:28:d0:e4:bd:21:55:12:2e:
         e4:0f:8c:fe:9a:f3:6e:c2:1d:7a:71:5b:d0:fc:16:5c:40:00:
         02:7c:f4:b7:70:52:08:07:22:2b:c2:c0:cc:7a:13:66:81:e9:
         ff:b9:1a:ae:0f:5b:f1:a2:7d:6d:54:15:d8:31:31:5f:69:6e:
         7c:d6:a5:17:03:69:f2:f3:aa:47:42:f4:1b:f7:f3:34:01:f1:
         9d:e9:35:16:65:72:e3:40:1a:af:a0:e3:56:6f:94:44:59:2e:
         a5:07:7f:23:3f:4a:0f:38:97:29:93:c1:7a:65:2a:32:1c:31:
         04:37:ba:b7:6a:f2:d7:ee:92:a0:f5:0d:a9:77:1c:70:b8:e6:
         3e:25:92:44:1e:24:f6:60:47:57:bc:71:1b:d4:6a:3f:ab:61:
         46:08:54:19:02:4e:5e:06:00:91:4c:10:d0:e1:eb:55:eb:88:
         e9:22:58:a5:bc:38:90:77:3d:d9:8f:52:72:85:b0:0c:b4:8c:
         04:e8:b5:5f:03:24:ba:7b:aa:a2:9c:81:87:3a:4f:71:7b:d1:
         fc:73:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:29 2024 by rpki-client on console-fra.rpki-client.org