Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/eba804dc-97d4-321a-8dfa-a1e0b302977d.roa
File:                     eba804dc-97d4-321a-8dfa-a1e0b302977d.roa (raw, json)
Hash identifier:          7E6SMaLRk3v+y1oj42MsCCPuJ/3pEbeLCG2wMHtsURQ=
Subject key identifier:   62:5D:CE:3A:71:0C:77:98:93:88:D4:E4:4F:31:4B:91:E6:4A:6B:B9
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F432858442F29DD41B6FB721B43EC4A80
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/eba804dc-97d4-321a-8dfa-a1e0b302977d.roa
Signing time:             Mon 11 Dec 2023 22:26:29 +0000
ROA not before:           Mon 11 Dec 2023 22:26:29 +0000
ROA not after:            Sun 10 Mar 2024 21:26:29 +0000
asID:                     271
IP address blocks:        204.239.84.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 20:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2f:29:dd:41:b6:fb:72:1b:43:ec:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Dec 11 22:26:29 2023 GMT
            Not After : Mar 10 21:26:29 2024 GMT
        Subject: CN=f8802acb-f220-4e8b-a486-01317837f5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:df:7c:81:d4:db:0d:30:14:40:cb:3c:12:
                    07:d1:77:ec:46:d4:f8:c7:78:ca:28:18:75:ff:c7:
                    e0:04:59:79:d5:fd:7a:ee:c6:1f:90:c2:65:2f:e6:
                    73:49:b4:26:1a:17:44:9d:51:2f:60:47:6b:42:75:
                    59:fd:77:fd:c6:77:77:87:f7:43:f8:8f:bf:90:d0:
                    86:20:65:eb:b3:03:02:5c:30:71:9b:ad:91:c6:2f:
                    f5:97:32:8d:98:51:8e:a9:83:91:e0:cd:f7:c9:34:
                    21:15:71:cc:1d:de:62:8c:ed:ab:0f:f0:6f:46:30:
                    8c:5e:0d:32:58:69:4f:58:25:df:c3:62:19:9a:7a:
                    a0:1c:88:84:e9:6b:6b:0f:57:ab:23:60:e9:66:c8:
                    e9:4e:ea:b8:1c:62:b6:56:21:a2:00:db:f6:8e:62:
                    af:d8:bd:a3:1f:f1:47:6d:5a:65:6a:cf:41:4a:11:
                    45:6f:82:97:2e:1e:64:d5:45:30:d4:9d:84:41:14:
                    c5:46:e4:6d:86:af:27:5b:36:7b:a9:bc:24:5b:f1:
                    b1:86:2a:b0:1f:d1:d0:43:c3:5a:86:61:ea:e8:da:
                    e9:2e:2c:2a:2e:ca:09:e2:51:0c:1a:df:be:7c:64:
                    ec:5b:1c:e0:61:ee:12:8e:40:2f:7b:c1:4d:6d:37:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:CE:3A:71:0C:77:98:93:88:D4:E4:4F:31:4B:91:E6:4A:6B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/eba804dc-97d4-321a-8dfa-a1e0b302977d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:89:96:93:07:53:1c:73:65:dd:5c:a6:df:5b:d6:11:7d:b7:
         e9:5b:9f:6e:c1:22:7c:c9:8f:ff:f8:58:ae:84:c4:87:f3:47:
         24:b6:cf:bf:2b:1b:44:65:78:3b:e6:39:51:63:a1:37:24:40:
         2b:5f:22:fc:65:a3:e9:32:bc:bd:b8:09:fd:9f:ef:d1:a7:88:
         1b:44:ba:35:de:b8:eb:82:72:b3:c7:65:2e:cc:74:a6:32:a6:
         8d:0c:be:50:f9:85:a6:b3:52:35:34:f5:54:3b:9e:66:d6:05:
         dd:41:87:32:a2:e5:ad:79:82:82:2c:e0:f2:fe:45:a4:e1:a9:
         a2:0f:a7:0a:50:c6:b2:26:c9:73:eb:ba:2a:8f:07:40:a0:5d:
         63:7f:a4:9b:6a:35:32:1d:76:85:21:00:1f:05:bd:2c:d1:79:
         eb:38:b0:ff:c1:40:27:ea:9c:6b:eb:a5:79:d5:31:8d:53:6d:
         c4:97:6f:bc:19:eb:fd:5a:9a:7b:bf:a8:75:9f:cc:16:10:6e:
         7c:5a:f3:70:92:87:61:8c:fa:92:a8:24:f9:66:6a:a5:51:5e:
         8a:32:8a:c3:9a:73:9d:87:95:f0:90:96:e4:dd:ca:b4:f7:80:
         2b:07:95:b1:aa:b5:b9:16:1b:b8:d1:6c:8e:b9:31:a6:5f:fb:
         fc:97:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:44:35 2024 by rpki-client on console-ams.rpki-client.org