Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2d080215-ff9f-3abc-a980-fcd9180614af.roa
File:                     2d080215-ff9f-3abc-a980-fcd9180614af.roa (raw, json)
Hash identifier:          bY/SWr4BFs1bCHj9VklJdama+gDB/UL61MvLFZdDwOA=
Subject key identifier:   C1:96:EE:4F:E9:BD:1F:DF:8F:4C:2A:33:F8:C1:64:87:A7:81:57:31
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584138EBA75C75BB35F8B96D4980
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2d080215-ff9f-3abc-a980-fcd9180614af.roa
Signing time:             Tue 14 Mar 2023 12:00:00 +0000
ROA not before:           Tue 14 Mar 2023 12:00:00 +0000
ROA not after:            Mon 16 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        162.120.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:38:eb:a7:5c:75:bb:35:f8:b9:6d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 14 12:00:00 2023 GMT
            Not After : Jun 16 04:00:00 2025 GMT
        Subject: CN=6bb33110-daa0-470f-a989-75d8656108db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:5d:d8:63:06:5c:51:e1:6d:73:5c:54:d9:
                    ec:a6:99:4a:8d:a4:54:99:38:5c:3a:18:2c:46:cc:
                    b7:b4:2b:be:4d:9e:6a:d9:11:63:7c:09:c1:6e:ab:
                    97:f9:0e:36:9c:fd:d0:40:23:8f:8d:8f:3c:17:c9:
                    19:00:95:70:88:b4:1c:8e:28:b7:ad:69:59:45:ed:
                    20:da:7d:c6:d7:ad:39:cd:79:c3:55:07:56:c7:9f:
                    6d:11:69:10:db:87:bc:06:bb:eb:10:fd:1d:e9:d8:
                    27:6c:7c:dd:c2:73:4a:5c:ee:b9:2b:83:8d:c3:a4:
                    ab:7e:94:1c:d3:72:c9:eb:25:19:79:24:ed:56:bd:
                    99:78:40:1a:85:59:13:76:d9:03:47:51:de:ea:db:
                    5a:47:ef:79:6d:8d:68:40:c7:bf:51:e8:b4:aa:c5:
                    6e:8f:01:25:2a:96:64:81:6e:e0:f5:d7:78:56:64:
                    cb:3e:1b:ea:2a:09:14:19:e0:22:42:f9:02:b5:20:
                    76:c9:7f:63:c4:88:d6:6a:02:dd:19:6a:40:6a:53:
                    81:56:c4:25:b4:cb:0c:19:3f:2e:9b:70:e5:db:6f:
                    a3:6f:80:3d:87:8e:96:db:f4:a3:4e:a5:14:2b:1f:
                    1c:bc:04:ec:25:b3:08:21:0b:33:20:2e:59:f9:d0:
                    b0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:EE:4F:E9:BD:1F:DF:8F:4C:2A:33:F8:C1:64:87:A7:81:57:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2d080215-ff9f-3abc-a980-fcd9180614af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:0b:fe:22:68:fb:cd:5c:5a:2a:3d:46:bd:eb:06:97:11:35:
         a0:71:d1:f8:6d:91:63:02:b9:94:df:08:ba:03:3c:67:d7:d5:
         49:66:45:eb:c6:b0:25:ac:57:09:2c:f3:e9:a3:45:30:cd:2e:
         a7:d3:36:a6:c7:2f:9a:20:ce:d2:02:f2:95:1d:d0:00:d7:f3:
         c9:0c:c1:7b:c2:bb:16:7a:eb:6d:be:35:85:33:e8:f0:67:a0:
         98:7f:28:88:c1:11:26:f3:87:75:4f:c0:ff:29:28:00:e1:a5:
         dc:88:59:18:ff:3d:cb:ff:2d:b9:fe:3b:bf:3a:0c:23:f2:c6:
         08:2c:ad:b1:1e:30:24:53:c3:b6:62:be:a2:f9:2f:19:3f:36:
         a7:9e:89:6e:3a:6d:52:af:b4:75:ab:3d:32:ad:1d:40:c3:16:
         93:d1:f3:2e:f6:f8:75:61:c3:10:86:a9:bd:2a:ae:38:97:66:
         c3:f3:6e:d7:97:87:fa:24:ab:94:54:0d:e8:5c:92:b3:82:11:
         5f:64:99:60:b5:3b:b7:98:c4:cd:4f:ef:37:a1:14:25:34:4e:
         db:3d:4b:1e:25:59:03:ea:09:c7:79:d5:1b:a6:fb:1a:82:0a:
         56:b5:bf:b7:b5:22:35:55:f6:7b:e5:85:0f:a4:fa:3f:af:a5:
         6e:f7:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org