Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1703e53-e4e9-3f6c-8c55-8cd55a6024d4.roa
File:                     b1703e53-e4e9-3f6c-8c55-8cd55a6024d4.roa (raw, json)
Hash identifier:          kLR8dTuxCWRmvOtcfX6pwP0uGUd4oJ3tVnOTNNqt9iQ=
Subject key identifier:   B9:04:08:EB:FF:1A:EE:C0:26:C5:8A:F4:A3:C2:9D:59:CD:D7:88:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845C873A072518BE52D47271200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1703e53-e4e9-3f6c-8c55-8cd55a6024d4.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     2129
IP address blocks:        206.164.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 13:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a0:72:51:8b:e5:2d:47:27:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=d6483873-e4ef-4c39-838b-a6a49e9c4dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:1f:c8:47:e2:3f:7c:5a:67:25:fc:d8:ff:
                    0c:48:b8:77:9b:26:df:12:14:0a:9c:95:60:42:f8:
                    b6:ee:0d:45:60:2f:07:d7:b4:9c:57:e6:a3:7a:72:
                    57:4e:42:64:5f:c8:d5:19:bc:51:c3:c9:59:c7:c1:
                    f8:7f:fc:fe:65:ac:88:1a:0a:94:b8:89:f5:41:91:
                    a6:dc:15:4a:a1:ea:dc:e1:1a:9b:ee:90:7f:2e:0a:
                    59:8a:e7:89:65:ec:3b:fd:07:7f:d6:14:a9:4c:4e:
                    35:2c:40:1e:58:c9:28:fa:44:cf:a8:58:5e:c6:b6:
                    00:83:a1:97:c9:86:d1:ee:b1:89:00:3e:57:0b:cd:
                    b5:8c:ab:b8:3e:40:ea:d4:53:82:c2:02:23:07:f6:
                    ec:f4:96:32:ec:90:c5:ef:da:19:f0:c1:36:ef:44:
                    b5:f2:3e:07:77:0e:cb:7f:8b:d1:d0:03:e3:41:5c:
                    9f:ba:99:b2:ec:e1:39:96:f9:3d:cc:15:9f:b6:51:
                    44:21:bb:3b:f3:0f:49:c2:dd:90:0a:92:99:60:bb:
                    57:08:83:0c:e6:48:f5:b3:03:65:1c:74:90:43:0d:
                    af:3e:b7:24:9a:4a:f5:d2:eb:30:f3:b0:a7:f1:14:
                    0a:f8:dc:46:e6:a0:ab:70:25:9e:c5:2e:43:bb:d1:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:04:08:EB:FF:1A:EE:C0:26:C5:8A:F4:A3:C2:9D:59:CD:D7:88:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b1703e53-e4e9-3f6c-8c55-8cd55a6024d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:eb:b6:71:d1:dd:e5:a3:fd:95:f8:89:a3:2a:f3:6c:47:
         02:ee:22:58:b6:82:0e:da:ad:81:5a:15:9d:93:bc:87:52:47:
         be:b5:9d:db:6d:ae:c4:b7:81:3c:d2:15:0a:ae:27:2b:3e:5b:
         f5:1b:20:7b:ea:e6:47:cf:46:9c:84:5f:28:1d:6c:54:6c:b8:
         d8:6c:3b:78:74:93:9c:0c:23:09:31:45:23:31:ad:b5:e9:45:
         a7:62:62:6c:7d:14:3b:5e:ae:11:15:93:0a:cb:da:4e:8e:7c:
         cd:8d:65:0e:81:41:be:03:e5:d7:0e:19:cb:83:b0:8b:c4:c7:
         5e:5d:96:f9:13:7c:53:3b:c4:77:d8:9d:75:74:5c:de:0a:e2:
         bb:87:c8:91:3c:47:61:22:fb:04:c5:bb:7b:c3:be:c3:df:51:
         79:16:4b:ea:42:bf:3c:a7:12:94:7d:87:59:a1:1a:f2:70:69:
         62:6d:cd:06:60:b0:04:35:a3:dd:43:2b:58:16:67:4d:a6:ec:
         16:0a:36:c7:f7:c2:f5:c6:48:c5:97:c0:3e:f3:f2:2b:cf:ae:
         9c:e0:a4:e2:3a:9b:22:76:97:fd:86:48:f0:e5:9d:75:90:b6:
         da:f4:79:7b:18:4c:f6:99:16:33:dc:79:3d:86:45:d7:91:3d:
         4f:d6:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:17:08 2024 by rpki-client on console-ams.rpki-client.org