Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e470cc3b-5943-39fb-8d88-cce041acbca1.roa
File:                     e470cc3b-5943-39fb-8d88-cce041acbca1.roa (raw, json)
Hash identifier:          vxFSaVJ24tM6QUlM4PKu3fwHN/IhvuIzIgQ9IAMqKv4=
Subject key identifier:   B7:4B:7E:BE:A7:37:59:6A:D3:B6:2D:01:45:D9:8D:33:50:B2:88:14
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858450EEACDB116E55E05C3D9B500
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e470cc3b-5943-39fb-8d88-cce041acbca1.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     396998
IP address blocks:        209.142.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 12:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cd:b1:16:e5:5e:05:c3:d9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=eea9b406-4def-45eb-8eb6-9f82768ed44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:c7:47:cd:64:74:b8:a8:e1:73:75:99:6a:
                    91:1d:c2:ea:7d:f3:55:1f:cb:74:0c:4b:9a:bb:9c:
                    8c:86:61:a9:b7:54:5c:fa:31:bf:30:40:6f:75:52:
                    37:8e:ef:10:6a:66:b5:d9:33:40:27:68:1c:c6:d6:
                    a5:18:db:fa:e4:d9:9b:6a:d7:88:b2:e1:26:a5:03:
                    40:7d:aa:64:c4:51:59:c9:58:33:c4:4d:ca:a6:94:
                    ec:95:ee:0f:5a:9b:50:73:ed:b8:9d:b1:73:6f:d6:
                    bc:71:fb:1d:56:da:33:52:1b:90:ff:e2:c1:d5:25:
                    62:56:13:5a:2c:d4:a1:7a:ca:d0:a9:3f:03:30:51:
                    2d:48:7e:3d:84:61:ae:7f:58:ad:58:07:e6:98:a7:
                    e8:08:04:6e:26:b7:44:de:f4:8c:6b:8f:fc:b9:67:
                    59:fc:d6:85:c1:22:0c:e2:67:e7:e8:df:1f:da:25:
                    fc:81:cf:54:92:8a:45:fb:9b:b6:ea:94:7d:d8:3a:
                    79:d5:2d:16:04:80:ec:44:07:a6:90:e9:16:d3:8b:
                    0f:56:09:b8:06:6c:08:4b:67:e7:eb:03:85:8a:da:
                    e5:85:41:ff:1e:9d:1b:f0:45:5d:6a:40:2b:0d:b9:
                    71:b1:f4:44:b1:28:53:a3:6d:c6:13:63:54:c6:5d:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4B:7E:BE:A7:37:59:6A:D3:B6:2D:01:45:D9:8D:33:50:B2:88:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e470cc3b-5943-39fb-8d88-cce041acbca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:35:f8:ba:b7:f9:f5:c4:e9:c9:31:a5:9f:3f:86:c3:55:d5:
         72:0f:cf:1f:95:74:7c:72:32:84:f8:f5:08:de:14:c7:1e:63:
         70:de:11:e4:ac:8b:59:93:08:fd:e5:09:98:f5:1d:e0:74:6a:
         db:e3:4b:3d:a8:2d:d1:9a:de:e9:3b:23:e6:f3:30:f7:ef:74:
         6a:3c:98:3e:6d:66:24:24:71:ee:61:48:69:c2:de:59:ac:ab:
         4a:02:07:21:77:e3:3c:9a:15:2b:b8:32:8d:c6:cb:ea:e0:8b:
         4e:fe:d8:1a:4a:94:8b:32:3d:01:15:49:28:95:14:9b:4c:6a:
         24:56:09:d3:11:be:23:b2:9d:e8:21:ac:fa:92:0c:39:d7:39:
         70:f8:ad:18:9e:e3:cf:c1:24:f3:97:be:8a:71:5d:2b:ea:5b:
         5d:92:7e:25:db:5b:b4:09:d6:d6:b8:63:6a:48:f8:63:12:8f:
         29:a4:55:3c:0d:b5:ae:6c:23:97:71:27:f8:95:31:f7:4c:df:
         63:cc:3f:38:ec:c2:5d:14:59:5e:c7:96:66:ca:52:f1:28:44:
         23:53:ae:69:ea:b7:76:5b:f9:57:6c:53:48:46:c3:f1:b6:ed:
         22:b6:04:f3:14:0d:4b:1f:82:3d:00:6b:f2:35:3a:43:5b:e3:
         76:a2:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 14:53:39 2024 by rpki-client on console-fra.rpki-client.org