Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fab87582-735e-30b1-b03c-92b484be473e.roa
File:                     fab87582-735e-30b1-b03c-92b484be473e.roa (raw, json)
Hash identifier:          jCDzZxMkEf2Sf0zqQBeXCo4iHbDcrdRlN8bfXhFQW0M=
Subject key identifier:   94:ED:6A:D4:50:38:C3:BB:2A:35:B0:23:31:70:00:56:8F:E7:8B:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858452884196BE6C2EFE1F2CCBF40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fab87582-735e-30b1-b03c-92b484be473e.roa
Signing time:             Sun 10 Mar 2024 06:04:34 +0000
ROA not before:           Sun 10 Mar 2024 06:04:34 +0000
ROA not after:            Sat 08 Jun 2024 05:04:34 +0000
asID:                     834
IP address blocks:        184.174.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 21:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:84:19:6b:e6:c2:ef:e1:f2:cc:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 10 06:04:34 2024 GMT
            Not After : Jun  8 05:04:34 2024 GMT
        Subject: CN=0e072687-5149-4a1f-8400-ad226f941487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:c1:47:99:1e:d1:f2:7d:da:3f:41:6d:74:
                    ff:a9:8c:8c:36:92:91:1b:31:c2:8b:12:17:a1:03:
                    67:24:cc:a8:e0:9d:e4:3c:a7:d0:8f:5e:b8:df:b5:
                    b2:f6:8c:e7:6f:68:56:bd:69:25:8a:71:9d:94:35:
                    33:89:1d:7e:49:77:26:93:96:6d:bf:ba:29:ba:a1:
                    1f:a1:23:f5:85:aa:9b:dc:e8:5b:d6:d7:0f:67:4a:
                    8b:72:36:36:54:07:f6:c8:10:45:29:0e:ca:d9:7e:
                    72:3a:08:4d:98:1b:bc:e8:10:b2:32:ff:07:6d:05:
                    d9:6e:2d:b2:0b:20:7d:b1:16:b1:3d:2b:f3:22:4a:
                    ca:0d:30:e7:81:9b:7a:7f:c7:7d:26:7f:37:91:17:
                    f3:27:57:d4:e9:7d:c5:7c:eb:05:d3:b4:f9:4e:0d:
                    d2:5f:f7:2b:4f:0b:3b:b2:91:1c:f5:36:df:6b:ce:
                    8d:76:46:a8:76:44:aa:8a:8f:60:04:74:ee:1e:9b:
                    af:c3:3b:f8:56:b0:f0:3f:20:e6:47:ce:05:78:c8:
                    54:12:ef:b4:33:30:ae:cb:fd:3a:e5:52:a1:03:f6:
                    4f:3c:5f:e1:58:4f:7b:fd:c1:71:41:59:27:4f:5e:
                    bc:4e:d1:75:0a:a5:5a:39:fe:f4:76:34:06:27:d5:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:6A:D4:50:38:C3:BB:2A:35:B0:23:31:70:00:56:8F:E7:8B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fab87582-735e-30b1-b03c-92b484be473e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:48:2d:e7:c5:46:90:82:31:14:d3:e3:d1:dd:57:5d:31:b7:
         62:61:44:3f:16:cf:fc:c2:ae:d6:9b:ed:5b:5f:ee:98:48:b1:
         76:93:e1:48:79:02:10:fc:20:d9:69:a5:76:4d:fd:8d:35:db:
         2e:9c:d7:f6:9c:ac:37:04:6f:b2:96:d3:5d:47:18:36:ef:59:
         d9:d5:5c:5b:3c:bd:9d:3c:20:52:d2:1f:e4:93:80:ed:4c:2c:
         cd:90:64:9f:6f:5c:8f:9f:8a:d7:6e:54:5d:29:4a:39:1b:eb:
         41:48:d3:8a:03:f7:67:bb:e0:41:3e:fd:74:c8:26:3b:dc:f2:
         31:91:2d:98:86:1f:52:7c:fe:3c:89:ae:f0:38:fe:13:1e:60:
         82:3f:72:dd:35:ba:b5:10:2f:3a:fd:cd:72:6e:aa:c2:60:f0:
         85:eb:d1:9d:d1:6c:1d:32:18:c7:85:b7:71:df:19:f5:6b:03:
         6e:40:bc:a6:a1:3b:cd:49:b7:3d:eb:55:1c:e4:2c:f0:55:78:
         19:58:76:9a:20:ee:3f:2d:8f:aa:ff:0e:dd:84:b5:dc:91:14:
         df:6c:bd:74:fe:fa:89:c3:1d:9c:91:20:8e:dc:c3:fc:c4:13:
         44:63:99:52:16:c4:1e:35:8b:8a:48:5b:ec:56:9b:43:63:3b:
         05:4d:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 22:58:41 2024 by rpki-client on console-fra.rpki-client.org