Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/4f947a7c-7e86-342a-96f5-7105f29febfd.roa
File:                     4f947a7c-7e86-342a-96f5-7105f29febfd.roa (raw, json)
Hash identifier:          mPIaGuAm4y0hbX2VEDvAHWJo8elHYa0mKfQa33JofVQ=
Subject key identifier:   80:EE:1F:F8:D4:CB:FF:A5:EC:3C:F3:CA:4B:79:0E:2D:42:40:D0:77
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F432858451BB107CAB8928AC1A6E7A080
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/4f947a7c-7e86-342a-96f5-7105f29febfd.roa
Signing time:             Tue 05 Mar 2024 15:49:36 +0000
ROA not before:           Tue 05 Mar 2024 15:49:36 +0000
ROA not after:            Mon 03 Jun 2024 14:49:36 +0000
asID:                     205663
IP address blocks:        104.193.194.0/24 maxlen: 24
                          104.193.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 14:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:b1:07:ca:b8:92:8a:c1:a6:e7:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Mar  5 15:49:36 2024 GMT
            Not After : Jun  3 14:49:36 2024 GMT
        Subject: CN=3c70780d-0f97-499f-afcf-88b3b4baf019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cb:01:e1:ea:13:2b:d7:7e:55:c1:18:09:51:
                    24:7b:6a:9b:58:fd:10:db:9c:72:27:ec:f6:9b:aa:
                    ed:bc:38:dd:50:2d:40:26:15:29:f5:11:8e:39:0f:
                    de:c3:e1:b5:26:33:9f:03:9c:60:21:fd:01:4a:3e:
                    87:da:ac:7d:52:0b:6c:68:75:21:71:d7:9b:8e:b0:
                    ca:a3:28:cb:1f:ba:5b:97:c2:fd:fd:c8:6b:5c:f0:
                    e7:d7:f8:23:80:50:40:1e:54:33:38:8b:8c:35:2c:
                    5f:42:87:d1:12:61:fe:61:40:45:09:22:90:8e:7d:
                    59:38:83:ab:d4:96:40:63:ad:92:36:80:7f:7a:17:
                    90:a1:58:c0:89:f0:9a:18:75:9d:f3:8d:7f:5a:04:
                    79:b7:d5:b8:6a:a2:f6:79:85:67:55:ee:e5:51:a7:
                    71:bc:b9:f7:cf:84:1d:2a:97:4b:b4:60:e3:04:d3:
                    b7:db:53:2e:82:a2:95:ff:7d:da:18:64:e1:52:9a:
                    b8:da:7a:c6:0a:5a:1f:0d:2e:9d:ff:da:92:8d:23:
                    e6:6e:a6:1e:4d:67:f6:01:9f:e2:d5:2a:cd:cd:e5:
                    74:9d:c1:20:9b:37:bf:a2:05:37:ea:91:c9:83:af:
                    61:bc:f3:d6:5f:19:84:62:bb:0b:65:33:d7:2f:56:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EE:1F:F8:D4:CB:FF:A5:EC:3C:F3:CA:4B:79:0E:2D:42:40:D0:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/4f947a7c-7e86-342a-96f5-7105f29febfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:ad:c3:a8:45:c7:d1:37:41:47:18:8c:39:22:58:92:76:
         c2:54:3e:5e:44:5a:ca:79:22:5d:24:68:2a:0c:00:21:45:62:
         a4:d3:f7:74:2a:57:a1:d9:94:e3:5d:f6:87:a3:24:e1:e4:37:
         99:6a:02:74:82:17:0b:31:0f:57:ce:b6:ee:a1:9c:55:44:ba:
         58:cf:8f:18:c9:47:18:89:af:71:1e:53:e4:93:75:93:3d:ea:
         0f:d6:04:70:b8:9f:33:a2:e9:de:74:72:78:77:a5:fb:0b:72:
         f0:bd:7c:0e:7e:7a:a3:e2:6a:57:21:a8:19:68:25:91:50:8d:
         a2:e2:df:90:5c:91:99:a9:b1:01:2a:14:5d:1b:0d:93:9f:20:
         4c:54:d9:8d:3d:46:0e:96:b8:b1:86:2d:5f:79:33:1e:1f:89:
         c8:ff:a4:19:1a:9b:6a:92:c2:8b:2a:7a:6b:b5:85:9c:f6:7b:
         26:a7:92:0b:dd:55:b2:c3:0e:48:20:d0:a5:fe:4d:b3:22:78:
         43:a4:b0:1e:b4:3f:88:24:58:9b:db:c1:99:25:ec:60:fc:4b:
         ef:59:87:af:dd:de:f2:d1:9e:74:61:a4:22:f6:63:07:49:f1:
         d9:78:6b:01:a4:be:ab:ab:1b:69:de:45:ce:a3:31:b7:13:38:
         21:7b:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 18:37:49 2024 by rpki-client on console-fra.rpki-client.org