Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/64bc4f82-ace7-3b80-aa52-40f7fa7ade02.roa
File:                     64bc4f82-ace7-3b80-aa52-40f7fa7ade02.roa (raw, json)
Hash identifier:          4B2hflsKQ7RoU6EvvdaJW0NmtMNJjJga+fRYo0LPlHc=
Subject key identifier:   FF:BC:FC:CD:DA:63:58:47:10:9E:A6:8B:A7:09:61:DC:56:1D:DB:23
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584547C7A0C15BEE514733C97880
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/64bc4f82-ace7-3b80-aa52-40f7fa7ade02.roa
Signing time:             Thu 21 Mar 2024 10:50:42 +0000
ROA not before:           Thu 21 Mar 2024 10:50:42 +0000
ROA not after:            Wed 19 Jun 2024 10:50:42 +0000
asID:                     212150
IP address blocks:        139.5.20.0/24 maxlen: 24
                          137.59.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:47:c7:a0:c1:5b:ee:51:47:33:c9:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar 21 10:50:42 2024 GMT
            Not After : Jun 19 10:50:42 2024 GMT
        Subject: CN=32d739e1-0e0c-4fd0-9d4b-d1434525cd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:67:54:8c:f5:8a:4b:d1:63:4e:2d:38:09:
                    56:88:99:c1:72:41:75:a0:b5:e1:4d:19:99:37:48:
                    9c:d7:57:a5:02:12:30:62:c2:69:ef:c2:f1:96:29:
                    e4:59:46:fd:dd:99:ea:b7:ad:59:e8:0a:72:9f:9a:
                    12:6a:7e:49:f2:3e:83:55:a6:2e:85:85:37:16:c3:
                    16:cb:4d:c3:4c:1b:75:69:1c:79:c1:7b:8b:13:ff:
                    7d:20:fc:89:3a:9e:16:61:07:b2:43:66:a2:cc:31:
                    ea:5f:7a:f6:d4:64:36:e6:c2:e7:e3:b8:7f:a5:78:
                    01:68:8f:23:0a:01:69:bd:3a:c4:1f:5a:f0:f8:c9:
                    c9:eb:f5:6c:3a:be:ff:48:94:9c:e5:7a:16:ae:ff:
                    b3:22:9d:2c:f4:52:5c:ae:35:fb:1c:e9:6c:b7:eb:
                    09:a3:f8:7c:84:12:cc:7b:13:a4:b5:e2:b2:d5:50:
                    c7:b5:ff:04:64:ad:c3:18:28:06:0f:83:ee:7f:9f:
                    39:ac:f0:83:99:f7:ca:4f:c6:4f:20:b1:02:1a:cd:
                    2c:5b:c2:96:18:d9:71:41:0f:86:f1:98:81:26:1b:
                    bd:d7:f2:4e:f9:3b:1d:ac:aa:4a:e9:78:d3:2f:5d:
                    cf:2d:f5:1d:75:b9:64:08:bf:b7:f6:a0:71:0c:ae:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:FC:CD:DA:63:58:47:10:9E:A6:8B:A7:09:61:DC:56:1D:DB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/64bc4f82-ace7-3b80-aa52-40f7fa7ade02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.62.0/24
                  139.5.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:27:e2:38:d5:68:4f:77:c5:52:aa:83:9f:f8:55:14:55:
         b3:af:d1:72:a3:ea:9a:e6:25:d4:f4:09:f7:45:f8:cb:07:fc:
         66:64:65:c4:a7:67:cc:a6:d0:9c:51:b3:70:db:54:2a:ed:55:
         fd:f9:b1:22:21:bc:89:97:43:36:fb:e8:21:fa:83:35:66:cf:
         c9:a6:62:ec:a0:74:c9:24:72:3f:cb:0d:e7:dc:d7:92:8c:1e:
         48:cb:3a:b1:11:0a:87:9d:1c:d3:eb:02:d0:ec:3a:b4:fe:9c:
         2a:35:2c:87:7a:ca:fc:2c:15:e8:60:76:51:44:df:da:2e:d3:
         00:30:11:ce:06:9f:29:eb:1d:c4:bd:75:7a:fa:94:1a:51:0d:
         2e:06:83:14:21:47:28:60:01:cd:db:27:bd:d3:62:9e:03:5a:
         10:f4:bc:70:54:bf:ad:77:3c:0d:af:6f:23:20:32:f3:9b:cf:
         3a:03:ac:78:ba:d5:84:c7:46:08:52:89:cd:0c:8e:3f:ed:7f:
         39:38:a1:bd:37:ce:c1:57:e3:2d:06:5d:53:70:65:26:41:3c:
         e4:51:51:98:cb:bb:46:ad:12:9e:b5:e4:16:25:33:a9:d8:3f:
         4b:3b:fb:6f:8a:c1:a2:29:ea:99:43:da:c8:c9:f2:e8:6a:34:
         0d:9f:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 11:01:11 2024 by rpki-client on console-ams.rpki-client.org