Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/be66de07-302e-3171-9858-41d987408861.roa
File:                     be66de07-302e-3171-9858-41d987408861.roa (raw, json)
Hash identifier:          DZ+20VcCN6IPah+1v626aR9h/6J3OQGCnSIUSC+EclY=
Subject key identifier:   91:C8:35:CD:C3:FF:61:3D:A1:D7:B1:8F:AA:3D:46:B7:75:7C:B0:28
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285845210134D09E68E365E103BB80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/be66de07-302e-3171-9858-41d987408861.roa
Signing time:             Thu 07 Mar 2024 13:30:11 +0000
ROA not before:           Thu 07 Mar 2024 13:30:11 +0000
ROA not after:            Wed 05 Jun 2024 12:30:11 +0000
asID:                     16589
IP address blocks:        103.251.27.0/24 maxlen: 24
                          103.76.255.0/24 maxlen: 24
                          139.5.21.0/24 maxlen: 24
                          103.207.44.0/24 maxlen: 24
                          103.71.60.0/24 maxlen: 24
                          45.115.61.0/24 maxlen: 24
                          103.228.87.0/24 maxlen: 24
                          137.59.60.0/24 maxlen: 24
                          137.59.62.0/24 maxlen: 24
                          137.59.63.0/24 maxlen: 24
                          116.206.97.0/24 maxlen: 24
                          116.206.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 05:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:01:34:d0:9e:68:e3:65:e1:03:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar  7 13:30:11 2024 GMT
            Not After : Jun  5 12:30:11 2024 GMT
        Subject: CN=f77a6409-289c-4946-84ce-a5790307d2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:6a:97:20:23:7e:17:db:41:f6:9a:69:db:
                    18:8a:14:8a:6a:03:d4:5c:bf:51:ed:96:c5:71:99:
                    9d:cb:93:a8:26:52:dc:08:ed:95:12:7f:a6:17:2b:
                    76:38:b4:f6:5c:d4:f0:f0:d0:7c:93:f5:49:29:11:
                    f8:c9:90:2f:01:0e:32:2d:d1:68:dc:2f:65:41:32:
                    17:3e:ec:25:2d:d2:3e:87:33:20:fb:5b:02:e1:f6:
                    4a:01:b2:ae:2d:7c:41:e4:ea:30:42:c1:c8:cb:85:
                    4f:9b:9b:c9:84:69:14:9a:9c:6f:bf:b6:b6:1c:7a:
                    69:cf:e4:8c:c0:3b:6f:87:ac:5c:e3:b0:a2:ea:93:
                    ea:17:47:b5:da:73:6e:57:0c:4e:7c:ec:d2:87:ec:
                    92:bf:7b:25:b3:53:fa:bb:69:3e:df:2e:1f:af:f3:
                    3e:a4:1b:b6:bb:ff:87:4e:74:2d:df:70:e2:77:3c:
                    42:d2:ce:7f:56:a7:ec:3a:12:dd:5c:4d:2e:a2:19:
                    99:54:30:07:b7:c4:7d:cf:93:cc:d7:4f:0b:7c:bf:
                    3f:36:b4:3b:9d:b3:35:97:cd:60:c4:7c:7f:c0:21:
                    a2:bf:43:26:45:d7:ab:e8:3e:fd:ac:26:51:64:57:
                    97:90:58:b1:12:f6:b2:80:74:e3:76:70:84:cd:eb:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:35:CD:C3:FF:61:3D:A1:D7:B1:8F:AA:3D:46:B7:75:7C:B0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/be66de07-302e-3171-9858-41d987408861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.61.0/24
                  103.71.60.0/24
                  103.76.255.0/24
                  103.207.44.0/24
                  103.228.87.0/24
                  103.251.27.0/24
                  116.206.97.0-116.206.98.255
                  137.59.60.0/24
                  137.59.62.0/23
                  139.5.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:cc:66:db:4f:75:f2:ad:e6:38:d0:d6:3b:94:b5:75:01:
         c2:3b:4c:2b:f3:3f:2c:8d:ff:af:3b:da:2a:b6:69:7d:88:db:
         99:fe:a6:1c:5b:e8:76:52:93:f3:7c:39:49:47:65:40:a5:b3:
         60:d0:7f:4b:8d:74:e5:b5:fc:dd:63:b1:f4:c6:e6:ef:60:40:
         2f:b9:dd:96:98:49:32:f5:9e:e3:20:fc:43:07:12:74:a4:4d:
         d4:03:27:05:16:52:e5:09:26:30:f5:7a:c8:05:05:61:16:db:
         63:bb:c1:bc:2c:35:6a:36:b2:11:57:fb:31:f5:95:9f:55:93:
         e2:ce:7a:2c:d2:e0:43:94:77:70:1e:9e:48:be:d2:c0:0b:b7:
         28:92:c6:fd:34:d2:26:9a:7e:4f:8d:b2:29:fc:ca:92:a6:e5:
         45:24:43:25:78:a9:73:25:c5:74:6f:fc:f0:60:78:cd:eb:82:
         6f:38:bc:19:0d:0b:e9:14:5a:79:3f:37:13:08:ef:67:21:9f:
         3d:e3:22:3a:2b:bb:3c:5f:a9:4d:a6:57:39:93:1d:c3:2f:00:
         6d:3c:9b:e3:6f:de:17:6c:8c:b1:ec:35:df:f0:6d:0c:ee:60:
         90:ef:55:08:b0:8b:0c:88:61:4c:8f:cf:52:af:16:ac:80:52:
         11:51:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 06:06:23 2024 by rpki-client on console-fra.rpki-client.org