Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa
File:                     dd431272-55e1-31f9-9f87-a1425a7991e6.roa (raw, json)
Hash identifier:          MfqcRdy2dxKCrWa8Y8GTeZibJk67Czr74p+HPlrqIqs=
Subject key identifier:   90:D4:D6:EF:98:9E:6A:2B:7A:49:F6:05:CF:70:5A:84:B8:87:68:13
Certificate issuer:       /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial:       010D0C9F43285847C8D9D4A58875CC385D715880
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     11613
IP address blocks:        66.33.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 22:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d4:a5:88:75:cc:38:5d:71:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=e4358336-0b2d-4f7d-9544-b5d53568005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:f1:4e:09:37:be:ff:16:5c:ba:59:5e:fe:
                    07:c0:49:e2:fa:90:99:10:17:4a:ae:cb:f9:60:f4:
                    42:62:4d:ed:6b:66:57:35:d5:33:9e:6b:61:24:87:
                    3b:45:2a:5e:59:f6:3b:8c:c7:50:46:86:d1:fd:f7:
                    37:9b:cf:28:0b:85:45:2b:ff:d8:d9:38:8d:e0:e1:
                    dd:87:27:91:0d:99:a6:98:e0:09:b5:ec:df:f0:3e:
                    9d:88:c4:83:96:6d:88:0d:f5:4b:20:bf:40:75:88:
                    0c:4e:c7:34:f8:3d:8e:85:2f:3d:92:27:c9:3d:90:
                    b7:7f:43:c8:97:aa:80:17:53:d2:df:b0:35:73:9c:
                    7e:8d:89:0b:44:fb:ff:53:7d:07:98:b7:ad:2c:f5:
                    da:7c:09:24:4a:a8:a4:7e:09:30:c4:82:c9:25:47:
                    e2:b9:eb:e9:1a:49:a5:13:22:d4:fb:15:91:f9:22:
                    be:b6:23:84:85:cb:1b:df:b5:79:fc:d1:8e:17:bc:
                    24:13:6c:48:94:de:b4:0c:05:ae:7c:54:91:f7:70:
                    3d:8d:37:7c:ab:fe:e1:06:1a:b0:36:7b:a5:7e:82:
                    06:6e:40:8b:2b:cc:a8:c4:11:87:57:1b:47:79:81:
                    23:b2:7b:3f:02:15:d4:6f:c9:05:7e:b5:e5:47:27:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:D6:EF:98:9E:6A:2B:7A:49:F6:05:CF:70:5A:84:B8:87:68:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/dd431272-55e1-31f9-9f87-a1425a7991e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl

            X509v3 Authority Key Identifier:
                keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:03:8a:e4:b6:56:47:c0:55:dc:64:1c:5e:30:a3:45:e5:
         4f:6c:37:90:56:f7:68:85:22:88:8e:76:bf:83:a7:09:48:6a:
         65:7c:f6:25:33:04:80:9d:7d:b0:f0:bc:7a:0c:d9:81:f5:45:
         40:95:64:9b:27:66:fb:d6:b2:68:67:03:2f:5c:b6:16:a8:27:
         4b:1d:7a:e5:69:5c:5e:3b:6a:41:d7:d7:62:e8:47:52:bd:69:
         1d:0e:dd:cb:92:9d:e8:5a:4b:3a:f3:8f:87:d3:20:08:7c:fe:
         c4:5c:1f:86:03:50:6e:99:5f:7e:36:a2:f8:ed:42:12:72:2a:
         ad:c6:21:a8:39:97:23:ac:0c:e6:8d:dd:8e:d3:2e:09:9d:84:
         87:5b:54:c0:c2:60:37:35:ae:ee:5b:d2:6d:a6:44:14:88:3e:
         7f:35:df:f0:4b:5c:d5:df:1b:1d:0a:76:18:5f:4c:33:2d:5d:
         62:89:1d:91:36:b1:94:28:e5:10:8b:b8:60:81:a3:d8:1e:24:
         3c:ac:aa:b1:b4:ec:7c:2b:7b:2b:a0:04:cc:10:51:19:bd:31:
         e0:8f:f5:d9:a9:df:fa:b3:41:f7:0d:68:a4:2c:ed:28:7a:05:
         ec:1b:4c:0f:28:c8:15:9e:ac:f6:c2:ed:e1:c7:fd:91:dc:5f:
         7f:8d:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:11:07 2024 by rpki-client on console-ams.rpki-client.org