Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a66ca5cd-d637-3d61-9b2e-7968b354278f.roa
File:                     a66ca5cd-d637-3d61-9b2e-7968b354278f.roa (raw, json)
Hash identifier:          tOqOfRF3cesITns1k5Ae1EbBJulu2TkL04sfLoAybes=
Subject key identifier:   30:3A:A7:D5:2E:E1:48:44:79:6E:8E:84:4F:BE:51:E2:A2:E2:1C:CB
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584138EB6140894CC449FC3BFE80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a66ca5cd-d637-3d61-9b2e-7968b354278f.roa
Signing time:             Tue 14 Mar 2023 12:00:00 +0000
ROA not before:           Tue 14 Mar 2023 12:00:00 +0000
ROA not after:            Mon 16 Jun 2025 04:00:00 +0000
asID:                     36492
IP address blocks:        162.120.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:38:eb:61:40:89:4c:c4:49:fc:3b:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 14 12:00:00 2023 GMT
            Not After : Jun 16 04:00:00 2025 GMT
        Subject: CN=2b1aa3ee-bb9b-45a0-a133-a95dd07111d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:d0:79:9a:d7:e6:e0:1f:47:13:13:11:52:
                    17:25:79:0b:09:a2:6a:1c:8a:da:18:7f:a3:22:f5:
                    85:a2:e4:02:7b:c7:a4:02:90:1e:3d:12:98:ec:44:
                    ba:4e:5f:5f:2c:43:21:7f:fa:cb:82:b9:e6:68:0a:
                    53:3b:ab:b3:cb:a5:70:52:3d:8e:99:28:1e:da:21:
                    a7:f9:fe:c3:a8:71:8a:33:36:2f:99:3f:be:a4:f3:
                    96:87:ec:92:02:19:97:4c:63:a3:24:99:69:49:5e:
                    96:1d:31:d0:ba:e8:00:15:ac:72:b8:8f:81:5f:7e:
                    30:d0:85:ee:00:b6:4c:21:a3:c7:ab:5e:a5:e6:6f:
                    f5:c1:1a:eb:cc:c1:61:76:38:fd:0c:6b:2b:75:c5:
                    c4:de:2a:4d:a4:5b:9b:95:f4:9c:a7:af:e3:84:3d:
                    b2:e3:95:0e:bd:be:af:2d:e5:be:1e:1d:a0:f9:e6:
                    2a:6e:d9:4a:d5:c0:ba:6c:fb:a5:d5:7a:0a:c8:ec:
                    9f:98:49:ad:39:9f:71:1d:8a:e2:89:89:66:99:05:
                    2c:2e:a9:50:99:0e:74:6e:1f:f1:32:56:f1:62:9b:
                    36:c4:a4:ed:8d:d0:95:ce:fc:43:07:37:46:8b:ea:
                    25:f1:47:71:fe:3d:1d:95:73:d1:f3:5a:f5:ac:17:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:A7:D5:2E:E1:48:44:79:6E:8E:84:4F:BE:51:E2:A2:E2:1C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a66ca5cd-d637-3d61-9b2e-7968b354278f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:5c:0c:8f:2f:10:0b:77:da:d0:95:5d:f0:11:eb:ba:12:35:
         5e:d6:73:78:de:1b:ab:9a:8b:2f:fe:46:c1:ca:b0:ec:51:87:
         66:4c:e9:70:29:eb:af:47:8e:73:33:ef:bc:31:70:f7:7e:a2:
         e3:c7:e6:37:ce:35:54:8f:58:44:90:2e:cb:f2:21:59:e0:37:
         13:f9:56:6c:ef:e6:e1:37:3a:49:04:75:4e:a3:0a:96:9f:1b:
         63:e3:8f:da:4d:8f:e1:6e:6c:73:65:26:cd:75:e3:00:cf:55:
         02:b8:3e:60:21:c3:dd:d3:4b:38:00:b0:e9:5f:61:24:c8:3f:
         a7:1a:90:86:52:50:22:3a:89:af:6a:60:68:88:7a:b1:e6:8b:
         c1:c4:22:2a:19:cf:0e:f1:c4:ca:99:c9:32:73:52:70:02:f5:
         53:88:b8:34:bc:4f:ee:b7:bf:40:85:cc:4c:d8:98:9a:8d:29:
         67:58:56:a8:b5:73:ce:36:a0:24:88:11:0a:60:24:22:0f:23:
         ee:ae:22:cc:61:14:c2:30:fe:9c:2a:38:a0:fd:48:81:52:53:
         52:ca:11:23:97:24:63:c3:1d:fd:e3:12:e4:7d:cc:1d:99:9f:
         19:41:ff:2e:1b:cc:45:d7:ab:7a:18:90:48:fd:d1:4c:2a:60:
         84:af:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----