Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01/1099f314-8735-3075-a805-bb80069f48fc.roa
File:                     1099f314-8735-3075-a805-bb80069f48fc.roa (raw, json)
Hash identifier:          BMhH7wATR5nvXa5gU98/+0l2IQZQJB2gXv5P75rLzHU=
Subject key identifier:   15:71:E2:3E:F2:57:09:30:0F:9B:C0:44:82:D5:92:F9:AB:54:FF:23
Certificate issuer:       /CN=ccf46bd4-f860-493f-a25f-e2ab1245be01
Certificate serial:       010D0C9F43285841024545250FC8584CCA3A2600
Authority key identifier: 51:10:A5:37:2C:8A:39:AE:FC:DE:7F:18:1A:11:6F:FB:54:7B:FB:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01/1099f314-8735-3075-a805-bb80069f48fc.roa
Signing time:             Thu 23 Feb 2023 16:59:33 +0000
ROA not before:           Thu 23 Feb 2023 16:59:33 +0000
ROA not after:            Wed 28 May 2025 04:00:00 +0000
asID:                     400354
IP address blocks:        23.138.88.0/24 maxlen: 24
                          2606:a240::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 23 Feb 2023 18:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:02:45:45:25:0f:c8:58:4c:ca:3a:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf46bd4-f860-493f-a25f-e2ab1245be01
        Validity
            Not Before: Feb 23 16:59:33 2023 GMT
            Not After : May 28 04:00:00 2025 GMT
        Subject: CN=7ebc2628-988a-4c4b-815c-05538c23597c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:0c:89:87:50:41:cb:a5:93:9f:62:01:26:
                    bc:c2:b2:ff:d3:4e:2c:41:18:ec:1e:6f:74:11:38:
                    01:fc:ac:48:f8:62:b5:68:cd:4a:d4:86:7c:ff:0c:
                    9e:97:4d:f5:21:54:82:47:c8:da:d8:2d:ac:86:58:
                    2c:d9:10:03:13:a8:54:63:39:55:af:f9:9b:02:e0:
                    78:36:94:ba:ea:10:99:cd:95:ff:e9:12:25:7f:b1:
                    14:20:f2:16:a6:3e:d8:f9:a6:e7:31:3b:42:e3:b9:
                    50:10:0f:6e:30:57:b5:d5:4e:3f:d6:a5:0a:bf:a6:
                    f4:3f:a8:bf:4c:2a:9b:36:c8:37:2a:80:ae:2c:5f:
                    e4:01:35:15:c7:46:2e:f7:7b:1e:83:fe:d6:c7:fa:
                    66:f4:45:20:4a:c6:06:c5:84:d3:94:00:da:f0:26:
                    29:a3:f7:76:69:57:fa:8c:11:71:52:ba:e5:b0:73:
                    49:81:f5:69:74:07:52:b3:e2:9e:9a:c6:29:0e:0a:
                    b3:76:54:56:47:66:d5:f1:58:d7:58:24:7c:34:47:
                    21:00:15:15:38:f9:d8:b2:15:8b:cb:41:87:40:f1:
                    43:3d:c5:5e:64:b5:d8:2d:f2:4a:95:8c:b9:9a:42:
                    e7:24:d4:06:ae:62:7e:86:8b:00:bd:b3:71:d5:f5:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:E2:3E:F2:57:09:30:0F:9B:C0:44:82:D5:92:F9:AB:54:FF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01/1099f314-8735-3075-a805-bb80069f48fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01/ccf46bd4-f860-493f-a25f-e2ab1245be01.crl

            X509v3 Authority Key Identifier:
                keyid:51:10:A5:37:2C:8A:39:AE:FC:DE:7F:18:1A:11:6F:FB:54:7B:FB:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccf46bd4-f860-493f-a25f-e2ab1245be01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.88.0/24
                IPv6:
                  2606:a240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:f7:2d:8a:fd:ed:8f:54:a4:cb:fc:7b:57:7c:90:27:8c:
         02:fb:8f:d5:4b:69:b6:8f:99:71:01:bc:2e:24:ad:eb:8f:f4:
         16:4f:ce:4b:06:d7:70:43:a6:42:0b:16:be:0b:94:d4:71:c3:
         1e:39:58:c2:05:ec:53:09:73:02:32:61:93:72:d0:a9:e3:4c:
         33:bf:f8:71:90:bc:c6:50:5f:ec:3a:33:d4:cc:a6:e7:0e:f2:
         a7:5d:09:16:5c:c6:fc:5b:6d:56:38:2c:7d:02:e2:b5:fb:be:
         49:f5:cd:0b:ae:df:e7:55:ca:f5:0a:d2:04:e8:83:a8:99:0e:
         2e:a9:47:b3:fd:bf:74:43:2f:77:03:90:32:f3:59:ed:ce:6f:
         2b:4b:20:2a:11:2f:8e:a3:d4:30:78:5a:4a:3d:73:77:a1:55:
         0d:b7:55:4e:1e:6e:e6:74:4b:cf:ee:1b:41:e3:54:15:5c:32:
         45:e1:ec:d3:1a:44:6c:80:84:f6:f5:c7:04:51:47:76:97:17:
         eb:9a:42:2a:5e:e7:90:88:08:cd:92:d9:85:a1:7e:63:a5:34:
         2c:22:3f:32:36:a8:10:dd:a9:2b:b4:3a:c2:35:f3:55:b9:ab:
         d5:07:d6:b4:e7:56:c0:32:9d:42:5c:35:07:94:07:69:d2:1c:
         5a:b7:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:35 2024 by rpki-client on console-ams.rpki-client.org