Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/362914c4-5b41-3806-867b-8d8c89a33dee.roa
File:                     362914c4-5b41-3806-867b-8d8c89a33dee.roa (raw, json)
Hash identifier:          udMS/uF47bqiVOQQbZT+A5zM/k6ktEtf61ScfbNHPKo=
Subject key identifier:   33:3B:57:71:33:1C:F0:42:AA:91:18:DC:85:A7:A7:95:FC:C7:99:9E
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B70FFF456B1B091C34257C0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/362914c4-5b41-3806-867b-8d8c89a33dee.roa
Signing time:             Thu 05 Dec 2024 16:01:24 +0000
ROA not before:           Thu 05 Dec 2024 16:01:24 +0000
ROA not after:            Wed 05 Mar 2025 16:01:24 +0000
asID:                     376
IP address blocks:        132.213.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:70:ff:f4:56:b1:b0:91:c3:42:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 16:01:24 2024 GMT
            Not After : Mar  5 16:01:24 2025 GMT
        Subject: CN=173364db-12ca-4dfd-ad21-8d5ce0a6151b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:f1:7b:ef:06:b4:ca:19:85:54:2b:04:9a:
                    af:ae:08:ac:12:1b:33:e1:33:90:f1:14:bb:1b:f0:
                    f9:db:7b:4d:6d:d2:e8:9c:1d:1a:ef:2d:89:88:f7:
                    30:4f:83:d5:55:df:c6:c4:f3:e5:a2:85:d2:b6:c1:
                    06:13:0a:a3:8d:27:7e:83:11:08:fe:5c:bb:9a:ac:
                    47:f3:aa:0b:dd:41:f2:38:74:ef:1c:fa:be:22:16:
                    30:25:e9:0e:a5:92:e3:c5:d0:e3:89:25:9e:dd:c3:
                    3c:16:9f:66:5e:12:72:ea:4b:be:e2:2c:72:58:b1:
                    c8:38:13:11:0b:72:80:83:8b:7e:41:6d:26:a4:bb:
                    7c:49:e9:50:d4:aa:0c:a5:65:87:ee:b2:68:af:b5:
                    d6:6c:06:98:0b:0f:93:cc:55:f1:00:90:02:31:14:
                    b4:dc:dd:93:b0:01:0d:28:da:b7:b9:51:53:b1:74:
                    a3:83:e2:04:e0:ba:83:0c:36:35:5d:3a:c9:1f:84:
                    bd:b6:cc:53:7a:9d:f5:47:ab:bd:34:5c:51:2e:89:
                    71:9f:ac:0b:72:1a:76:69:10:9e:68:75:a8:55:51:
                    0e:d3:42:3d:44:1c:5f:05:b4:03:07:9c:44:12:ee:
                    34:d6:14:d6:45:0f:ce:91:60:96:f2:20:ff:d6:b7:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:57:71:33:1C:F0:42:AA:91:18:DC:85:A7:A7:95:FC:C7:99:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/362914c4-5b41-3806-867b-8d8c89a33dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:16:6b:c0:79:ef:98:02:80:bc:ae:04:cb:a7:fe:53:9a:eb:
         92:d1:ed:72:97:97:3d:72:cb:45:50:5a:0e:15:bf:5c:c2:62:
         f9:a7:b0:84:17:28:8b:00:8e:b0:3d:46:28:5b:94:8d:c2:7f:
         47:8f:91:16:ab:e9:eb:e0:54:43:af:68:40:ec:62:c7:80:c5:
         47:a1:3b:24:20:4e:24:e3:93:7a:11:f7:db:fe:f1:0b:d5:86:
         fd:2c:5e:ee:a5:79:2b:f2:45:16:b0:4d:2b:e7:8a:cb:e4:c5:
         62:05:11:46:85:67:04:ef:e4:09:04:26:4e:5a:ed:60:db:ff:
         99:88:2c:86:e6:25:ae:f6:1a:41:5e:a8:27:63:5d:a6:c8:ee:
         3d:c5:31:4a:33:33:d5:cd:f9:ad:23:17:4b:80:b4:f0:c3:e3:
         f0:9f:50:33:c0:a6:87:38:43:05:c7:ce:c8:25:94:c7:22:00:
         9a:b2:ca:33:29:14:98:93:a5:78:06:1c:cd:09:44:9f:ee:3a:
         16:6c:c5:58:30:e9:fe:60:04:69:82:b7:ca:c8:58:79:ad:d8:
         c9:44:94:59:10:58:bd:34:19:05:e0:df:30:96:ec:3c:05:c6:
         2a:21:0b:28:ad:56:48:39:b2:8c:60:43:80:43:ff:95:4f:70:
         24:3a:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org