Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0dfc5fe5-1c4c-3ac9-b8c2-9f95bf2135b5.roa
File:                     0dfc5fe5-1c4c-3ac9-b8c2-9f95bf2135b5.roa (raw, json)
Hash identifier:          mNK4wBrAJZLLyrRrOYSzLyOU8TgmeSxYjy9tQqhZR/I=
Subject key identifier:   66:FE:A3:5F:83:9A:04:35:84:D6:A3:A0:EF:DF:57:6D:45:D6:A1:53
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328583FD125D9063562543EBCF3E9C0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0dfc5fe5-1c4c-3ac9-b8c2-9f95bf2135b5.roa
Signing time:             Wed 07 Jul 2021 21:05:36 +0000
ROA not before:           Wed 07 Jul 2021 21:05:36 +0000
ROA not after:            Sat 08 Feb 2025 05:00:00 +0000
asID:                     14315
IP address blocks:        45.59.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Jan 2023 17:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:25:d9:06:35:62:54:3e:bc:f3:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Jul  7 21:05:36 2021 GMT
            Not After : Feb  8 05:00:00 2025 GMT
        Subject: CN=c49a98e3-b628-4100-95e9-b3a157cead50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:30:b5:35:26:4d:0c:d3:c5:8e:dd:de:aa:
                    c8:88:96:a5:32:9a:e9:1d:89:64:bf:d5:7f:7d:2e:
                    22:fb:30:e9:5f:f4:df:80:86:27:de:15:e4:8e:a1:
                    f5:e1:7c:d2:30:df:80:73:fc:11:8a:1f:ca:10:1a:
                    44:fb:07:5a:b1:a8:39:0e:b7:8b:1a:5c:f1:79:82:
                    2f:b0:3f:5e:c3:7e:a8:8f:3b:0e:f9:c2:88:82:37:
                    aa:a2:05:e9:12:13:13:f4:e9:74:22:04:00:a5:1b:
                    f2:c5:4b:4e:a5:46:f5:85:66:87:6c:a9:dd:ee:cf:
                    16:44:d6:04:e2:02:f3:d5:6e:88:8b:7a:f9:0b:fe:
                    ed:cb:41:06:78:b0:b5:07:96:ee:3f:e6:6b:9f:ed:
                    7f:a7:cf:be:26:62:e3:bf:d9:fd:af:80:66:e5:16:
                    4a:0d:b0:a0:7b:05:d1:f0:54:21:82:d1:d4:de:14:
                    62:92:6a:cc:ae:55:83:39:7c:bb:6b:cf:90:eb:62:
                    03:c6:ba:7f:93:58:23:73:44:a8:8d:3a:79:87:1d:
                    1a:21:58:14:bf:06:99:58:0e:6e:5d:00:c0:74:68:
                    44:57:99:26:b4:ba:f9:b6:49:a0:ba:57:c0:92:35:
                    6b:f9:a2:07:4d:ba:65:2b:4c:32:ac:09:99:c3:9d:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:A3:5F:83:9A:04:35:84:D6:A3:A0:EF:DF:57:6D:45:D6:A1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/0dfc5fe5-1c4c-3ac9-b8c2-9f95bf2135b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ae:81:6c:cb:96:1b:16:9a:f9:65:c6:c3:a8:75:c2:17:fe:
         f0:5b:8a:9d:09:74:e9:f3:14:8c:ea:a4:e8:36:f5:a2:c4:c5:
         74:7d:76:58:32:b1:bd:11:95:fe:b0:e3:8a:e5:ec:bf:5a:e0:
         96:65:92:09:c0:11:e4:b8:ba:b0:b4:ef:08:e3:ca:30:76:17:
         13:0d:d9:6c:2b:b4:04:5e:e8:73:d5:eb:67:b4:39:8b:e8:55:
         73:05:78:9f:92:39:a6:08:86:ab:62:2a:84:79:63:a3:35:50:
         d4:84:dc:b6:54:5d:6f:4e:1b:e7:5f:80:57:1c:18:61:15:79:
         27:27:0d:dd:8b:d0:78:10:bd:e1:af:2e:b1:9b:c3:a6:8e:c5:
         66:48:7e:fb:c7:30:78:1b:7e:2d:c7:bb:f6:7d:01:6b:9f:35:
         7a:0e:fb:9d:a9:29:ff:be:76:81:07:0b:5f:e7:8d:84:2a:28:
         f6:40:53:4c:99:1a:60:c0:1f:e5:64:e4:b9:e9:cc:25:6c:fd:
         dc:f1:5a:f3:19:d3:1a:c4:e9:22:dc:b3:5a:9e:0f:a4:87:89:
         a5:14:67:49:4a:32:93:c8:ad:54:ab:70:d7:1f:5b:9d:b9:2b:
         84:5e:ab:6b:99:db:aa:c3:c9:65:bb:ee:fe:53:75:e7:d7:52:
         2f:95:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org