Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/a39e4cd2-633f-3252-97cf-c9bdef850d0a.roa
File:                     a39e4cd2-633f-3252-97cf-c9bdef850d0a.roa (raw, json)
Hash identifier:          8wh4GEPQBAber0eleuHLJ9R1CQirhtn24y0zyI2GLEk=
Subject key identifier:   B1:ED:11:3B:84:D4:5F:8D:31:C8:C8:B7:F1:68:F4:83:C8:17:EC:09
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F43285847952BD764436B78E1053C7C10
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/a39e4cd2-633f-3252-97cf-c9bdef850d0a.roa
Signing time:             Fri 18 Oct 2024 13:43:44 +0000
ROA not before:           Fri 18 Oct 2024 13:43:44 +0000
ROA not after:            Thu 16 Jan 2025 14:43:44 +0000
asID:                     397373
IP address blocks:        104.245.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 11:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:2b:d7:64:43:6b:78:e1:05:3c:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Oct 18 13:43:44 2024 GMT
            Not After : Jan 16 14:43:44 2025 GMT
        Subject: CN=99fb0441-c8b1-45a1-90dd-ef5866e4819b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:67:3a:94:99:e3:01:dc:53:be:af:33:d8:
                    ef:15:65:86:36:e6:d4:aa:bf:bd:80:f7:78:e8:a9:
                    04:19:29:9f:c7:04:52:6e:45:1d:7f:b5:47:92:58:
                    07:19:97:4d:e4:88:00:90:eb:01:e2:a7:87:35:e6:
                    ee:73:a0:97:76:72:f4:7b:8e:1e:ca:f9:d5:d4:a2:
                    2c:aa:ea:b0:65:8c:63:61:d4:94:34:ce:71:bf:17:
                    00:8a:79:85:c8:25:69:7b:52:c3:18:8a:1e:ec:99:
                    a2:ca:e5:06:8d:dc:4f:c7:b8:cb:a1:a1:1f:5d:86:
                    6a:53:10:90:66:98:a6:5b:49:d5:24:91:0a:fe:21:
                    bc:65:48:0f:f7:75:de:78:32:93:04:84:8e:e9:93:
                    1c:95:ff:ae:ee:88:eb:bd:41:75:c5:04:57:cf:56:
                    21:25:bd:ee:63:b7:dc:6d:3b:ef:58:4e:9a:68:cf:
                    75:75:bf:3b:12:44:3a:2f:9c:1f:52:c8:04:70:61:
                    81:94:48:dd:c9:0d:56:85:41:b3:69:66:26:50:55:
                    a1:79:64:8e:ab:6b:60:83:3c:b4:da:4a:5d:cb:1e:
                    b1:39:94:76:1c:5b:33:95:ad:1e:7d:ee:46:37:77:
                    8d:e6:50:13:85:58:06:ba:ea:4d:87:f5:9a:a9:2a:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:11:3B:84:D4:5F:8D:31:C8:C8:B7:F1:68:F4:83:C8:17:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/a39e4cd2-633f-3252-97cf-c9bdef850d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:95:3b:49:86:d7:cd:28:c5:df:67:bb:b2:10:de:3a:e1:
         74:aa:73:48:c3:08:84:5d:24:b2:49:6b:1a:66:cd:e4:1a:fe:
         c2:68:44:7f:c7:9a:a9:6e:1a:17:be:b1:4c:43:3f:0c:94:36:
         63:58:55:c4:06:87:94:de:87:e5:b0:46:9f:46:09:26:eb:1e:
         4a:af:86:69:23:47:26:2a:87:1c:d7:1c:c7:3c:93:3b:fb:8a:
         63:aa:7c:4f:35:6f:fd:c8:3e:a7:78:2e:63:28:ce:63:b1:80:
         b0:c9:87:2d:4a:71:04:4b:03:ba:d1:37:58:64:bf:3d:a5:ee:
         c9:aa:d8:06:85:9b:52:69:c0:d8:d7:49:14:79:bf:81:ac:51:
         68:68:fe:3b:cc:bf:0d:e0:5d:22:92:f9:02:97:3d:94:fa:e3:
         b8:f0:aa:6c:d8:c6:5d:2a:98:c0:b4:ae:29:70:2f:75:79:16:
         24:2c:a8:38:10:f4:9f:ef:92:51:51:0b:8e:a0:c1:ba:30:ab:
         24:c7:36:c9:66:08:c9:4d:f1:de:4f:35:7a:77:42:7d:f0:c9:
         1b:8e:cd:bc:f6:31:d6:f1:2d:21:bf:95:9e:84:d2:f5:d9:9c:
         e4:f0:46:d1:1a:f1:03:24:cc:47:11:e1:ae:8c:7c:f9:2f:53:
         95:18:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----