Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/2fa2352b-e768-3b33-b310-e547cef4d93b.roa
File:                     2fa2352b-e768-3b33-b310-e547cef4d93b.roa (raw, json)
Hash identifier:          k6ULA1NxyKZyhF0TIh4A4CaFAyA5+q3eG/J44w3o4zA=
Subject key identifier:   F6:C7:B2:9D:EE:1A:02:B9:77:63:B9:B9:EC:2E:76:34:E2:EA:8F:3D
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844CC963BE6DFC4BFB8599E1700
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/2fa2352b-e768-3b33-b310-e547cef4d93b.roa
Signing time:             Tue 06 Feb 2024 07:46:45 +0000
ROA not before:           Tue 06 Feb 2024 07:46:45 +0000
ROA not after:            Mon 06 May 2024 06:46:45 +0000
asID:                     149196
IP address blocks:        103.207.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 04:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cc:96:3b:e6:df:c4:bf:b8:59:9e:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb  6 07:46:45 2024 GMT
            Not After : May  6 06:46:45 2024 GMT
        Subject: CN=a889c4b5-d578-4e33-8136-1fd4a4f5c024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:c4:8b:5e:4f:aa:f3:30:e0:01:f6:d8:69:
                    ce:07:fa:af:bd:7a:45:6a:9a:36:68:96:b1:7b:33:
                    05:c7:d2:13:c7:a3:a7:dd:69:1e:ce:12:d0:be:04:
                    e1:29:18:3e:9e:4a:f1:00:30:b6:38:8f:75:7f:36:
                    ad:9a:11:b8:91:72:6e:0f:8d:32:f0:b1:67:ab:13:
                    27:4d:e7:92:c1:2f:ff:e6:a7:1d:b8:63:b8:45:79:
                    80:a7:97:e6:c0:dc:15:4e:6c:63:3e:87:46:45:76:
                    24:54:75:61:01:d1:10:e1:dc:8e:69:f7:23:7a:81:
                    54:c9:66:6d:d0:a4:8a:b5:b3:b6:3b:59:1f:7a:5d:
                    5c:b4:d0:f1:72:e4:ad:e3:79:32:46:bc:45:29:85:
                    d5:77:fd:a2:91:88:1f:ad:21:a5:3b:12:b4:a4:41:
                    49:7b:9d:12:9e:1e:79:f3:1d:2d:1d:44:9f:ff:d1:
                    99:68:b1:f6:ba:42:09:f3:3a:c0:7f:2e:fd:34:ac:
                    51:55:8e:0f:21:0a:6a:bc:a1:2d:84:1d:ac:04:84:
                    0d:ea:10:6e:e3:7e:0d:fb:48:77:6a:f6:ca:56:11:
                    07:97:df:e2:10:76:d8:70:93:ca:34:4e:2e:f7:c0:
                    d2:79:a8:df:07:17:ed:d6:5e:6e:3d:f5:9f:78:72:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:B2:9D:EE:1A:02:B9:77:63:B9:B9:EC:2E:76:34:E2:EA:8F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/2fa2352b-e768-3b33-b310-e547cef4d93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:42:e0:b1:f4:05:79:87:47:83:c5:2a:00:39:43:38:06:56:
         17:89:c8:ee:ae:0e:a6:83:ad:d1:68:8d:ad:bf:ff:c0:64:e3:
         ac:ae:a9:e6:0a:46:60:61:c1:c9:77:3e:df:52:dd:75:d3:02:
         f7:a7:fa:33:3d:64:4b:56:9a:fc:7a:bb:a4:48:63:37:a2:f0:
         d1:98:7b:37:4f:a8:79:63:85:de:97:ae:e5:5b:b9:e1:ca:fd:
         96:bf:f9:6c:53:04:e3:e4:87:e4:f4:de:44:80:ba:82:bf:23:
         ff:13:aa:5b:c6:ed:7d:b1:d2:63:55:86:f7:b5:63:ae:98:f3:
         f4:5c:a4:c3:35:c8:9b:6e:da:3c:2e:ff:44:92:e2:93:34:7d:
         25:f3:a7:a6:9a:e2:d0:9e:d4:d0:56:85:bc:e2:ec:58:d5:c9:
         aa:7f:1a:d6:58:cd:ff:e8:f3:cb:c6:df:08:6a:00:e0:72:19:
         6a:7d:9d:73:84:74:76:c8:7e:c8:20:eb:6c:5d:26:82:d7:a9:
         8f:31:74:eb:a4:25:20:3b:ee:48:aa:a7:b4:ba:c5:27:83:d0:
         f0:a1:ce:be:f0:8a:98:85:9d:df:10:5a:0f:f1:e1:cb:0b:2f:
         cb:65:47:bb:30:b9:25:cb:30:13:24:86:5b:6e:ec:be:82:3d:
         f9:c2:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 05:29:07 2024 by rpki-client on console-fra.rpki-client.org