Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/e596e010-5817-3300-856e-290f76f5a0b7.roa
File:                     e596e010-5817-3300-856e-290f76f5a0b7.roa (raw, json)
Hash identifier:          UgkwaIokiU5wssS940NqrqMPjbsdUgNraoNBrCR2voA=
Subject key identifier:   15:90:E2:ED:FA:15:96:91:BC:D8:3B:EE:B2:B5:C5:63:2B:4C:0C:BF
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858455D82135E199C05993649C940
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/e596e010-5817-3300-856e-290f76f5a0b7.roa
Signing time:             Fri 29 Mar 2024 05:38:20 +0000
ROA not before:           Fri 29 Mar 2024 05:38:20 +0000
ROA not after:            Thu 27 Jun 2024 05:38:20 +0000
asID:                     149181
IP address blocks:        103.24.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 10:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5d:82:13:5e:19:9c:05:99:36:49:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar 29 05:38:20 2024 GMT
            Not After : Jun 27 05:38:20 2024 GMT
        Subject: CN=9e2f9b9e-e50a-43e3-b30c-2589bbe8e22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:d3:01:e4:98:d9:36:26:9d:bf:f3:ff:14:
                    c7:0e:2b:18:a9:e2:f6:f1:78:58:61:9b:95:2a:ac:
                    d2:a5:f1:08:05:ec:23:8c:5e:3c:c1:21:0d:1f:1f:
                    c1:87:a3:0c:10:fa:0e:2f:14:4e:98:17:5d:b9:1d:
                    44:46:d2:0d:42:a2:40:84:39:da:a1:70:f0:1b:b7:
                    07:a0:de:a1:ec:56:48:93:69:89:ea:44:d5:3c:1d:
                    9a:31:12:87:4a:e5:bd:08:0b:b1:24:4b:95:fd:bf:
                    c0:b6:73:a2:4b:f2:70:29:c7:2b:c5:99:9d:ba:0c:
                    b3:81:85:c2:bd:d9:1d:a0:ae:96:3a:b4:ba:97:84:
                    a2:e8:00:3a:af:91:fe:91:d3:54:2a:36:27:ec:75:
                    c3:c6:ec:f0:b9:52:76:dd:00:ee:c2:55:86:0d:ba:
                    bc:1b:d7:88:2c:7b:48:81:63:b8:55:f5:f5:13:49:
                    10:42:1d:95:29:c4:34:f3:fe:ac:69:1e:1b:c5:29:
                    1a:b0:3b:96:c8:0f:f4:89:9a:78:5a:14:f4:81:ec:
                    ef:17:c0:63:6a:aa:6d:bc:eb:2c:65:51:01:c7:d5:
                    17:ec:c5:8a:99:5d:0d:a5:0b:e6:f2:35:75:22:9c:
                    8a:bd:23:bb:9e:52:5d:33:e1:d6:0a:04:e7:5a:ff:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:90:E2:ED:FA:15:96:91:BC:D8:3B:EE:B2:B5:C5:63:2B:4C:0C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/e596e010-5817-3300-856e-290f76f5a0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:33:2c:8c:38:34:41:99:dd:5a:54:bc:a5:65:49:cd:dd:82:
         2a:bc:70:a1:68:b5:f3:d5:97:56:5f:fc:70:17:ea:fe:b7:07:
         75:be:ed:71:45:d4:98:39:2f:91:d3:84:90:ff:57:d0:e5:d0:
         b2:99:de:fa:40:6b:56:a9:83:bb:b5:cd:bc:a7:6b:88:3d:29:
         24:4e:54:12:c8:8d:19:cd:aa:cf:71:2f:06:b3:71:d2:94:9b:
         94:6f:20:8f:ce:70:ac:7c:c6:b2:25:27:e5:f2:7c:2c:eb:f1:
         de:a2:f6:6d:5a:fc:3f:20:33:01:8d:57:13:62:82:b7:7b:b1:
         c4:99:cb:e8:cd:33:63:84:7f:06:ed:aa:d6:64:dd:0d:cd:b7:
         09:a0:0e:e8:ec:fd:d6:73:dd:0b:fc:3b:45:3c:e5:a4:be:a8:
         a0:9d:d7:01:99:31:61:78:d2:bf:10:9b:2f:c5:61:9b:d5:3d:
         c4:a5:d9:52:3d:e2:9f:fd:fb:62:7b:50:39:2a:12:b5:c9:99:
         46:d4:f0:ab:5f:8b:3f:75:73:28:f0:f0:55:0b:57:fb:96:30:
         b2:26:f3:c0:fd:fa:e3:f5:43:07:04:7c:57:81:7b:d8:d2:24:
         b4:3b:da:65:3c:c3:9c:5d:68:15:5b:ee:68:e4:b2:55:fc:bb:
         0f:e7:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----