Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/453dec58-c0d1-37aa-9620-4362830d45ad.roa
File:                     453dec58-c0d1-37aa-9620-4362830d45ad.roa (raw, json)
Hash identifier:          rolOO57G9LWSN9Gv9iay01c/Oy8Nd4GHoz5OcUL3Zec=
Subject key identifier:   13:96:E1:7A:37:2F:1F:2A:18:35:2E:42:52:82:DB:D4:3C:2B:3A:0C
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858471BA5A67D75517395C5AAD700
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/453dec58-c0d1-37aa-9620-4362830d45ad.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        161.69.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 14:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:a6:7d:75:51:73:95:c5:aa:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=d418b0b7-cdef-496e-b7bd-85a5fb91eb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:59:ab:b1:9a:5d:f3:22:60:f4:ef:9b:0b:
                    ee:f8:27:a6:c6:d4:9d:6e:03:bd:0c:75:92:1c:2e:
                    5b:d9:a2:88:04:b2:f4:14:c2:76:46:de:2d:bd:76:
                    43:76:0c:49:db:5f:9d:cb:49:88:31:62:be:db:0b:
                    bb:b9:0a:1e:9a:b7:1a:14:27:50:33:24:ae:32:6a:
                    b6:91:06:d5:19:46:1a:9d:b0:75:95:2f:3e:25:61:
                    94:bf:15:85:3a:5c:e0:04:92:49:33:27:9f:df:35:
                    1b:97:0c:80:21:82:40:01:01:fe:d2:b3:c0:ed:44:
                    34:e0:ad:f3:cb:17:a5:08:c1:f7:a6:04:20:b4:6c:
                    0c:32:43:9a:37:b4:50:27:39:a3:5a:10:0f:cb:65:
                    92:ae:7a:d6:2e:fe:1b:5d:f2:24:e5:4b:fb:d3:dd:
                    95:2f:66:ec:3d:a2:d7:1e:32:29:87:5a:03:cd:b9:
                    ea:bd:d2:08:55:01:18:17:f8:a6:e8:dc:40:a3:e4:
                    a5:04:d5:21:96:6e:a0:61:c9:f3:17:90:d6:78:fe:
                    5b:26:8c:e0:f2:d4:2e:68:51:a7:58:f3:88:6b:af:
                    f0:bd:5c:5a:ac:04:9b:19:5e:6b:7d:b0:1b:f8:02:
                    3e:a1:11:db:25:c6:ad:80:07:6c:4e:a1:09:15:78:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:E1:7A:37:2F:1F:2A:18:35:2E:42:52:82:DB:D4:3C:2B:3A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/453dec58-c0d1-37aa-9620-4362830d45ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:02:58:b3:9a:99:1d:f1:bc:1d:c7:e8:49:70:7c:44:22:dc:
         b0:c1:fc:15:63:e8:4b:9c:28:d4:ff:9e:67:5f:e7:2f:cb:94:
         c6:0d:b6:60:16:20:7b:e7:06:fa:52:cc:09:77:f7:bb:70:a8:
         ab:39:ee:8a:32:55:6a:54:03:2f:0c:93:ae:8f:de:0d:13:24:
         d9:6e:95:09:fc:11:f6:ca:cf:33:1b:3a:b8:96:c3:01:38:ec:
         41:c3:37:9d:1f:12:eb:ae:56:cb:8a:8b:7b:70:35:d2:e1:de:
         fb:a9:67:7d:c1:62:57:59:f3:37:04:10:01:c4:1d:2f:b9:a5:
         35:9c:47:da:09:de:27:c1:38:4b:d0:db:db:f0:39:8e:9c:85:
         87:6e:70:6b:89:3e:aa:8a:86:ec:30:0a:23:56:83:4b:13:c2:
         67:7a:ba:e5:a9:62:19:a0:d1:55:3b:de:1e:c7:c7:a3:5b:12:
         53:b2:25:91:5a:54:c8:42:e3:96:7e:56:ff:1c:5f:8c:68:9b:
         9b:7d:52:66:e4:0b:47:09:be:94:ac:bb:4c:1b:e4:ec:e4:08:
         59:4b:23:4d:f9:66:70:3c:0a:71:df:af:04:ee:ef:95:5a:f2:
         7d:57:ba:3c:8d:dd:f2:35:4d:84:a3:4c:33:43:7b:ff:8d:ce:
         00:ca:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org