Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d01c1872-21c1-30b4-a474-0f481d31fefe.roa
File:                     d01c1872-21c1-30b4-a474-0f481d31fefe.roa (raw, json)
Hash identifier:          4nazq63bcOn7BfWbXV5EQk6oJPpnIRa8XS7HKNUx5hk=
Subject key identifier:   44:FC:50:05:35:76:A5:64:B1:65:A5:37:8E:38:54:82:54:72:D4:CF
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B647B90B9AA0F2A8EE40980
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d01c1872-21c1-30b4-a474-0f481d31fefe.roa
Signing time:             Thu 05 Dec 2024 15:36:10 +0000
ROA not before:           Thu 05 Dec 2024 15:36:10 +0000
ROA not after:            Wed 05 Mar 2025 15:36:10 +0000
asID:                     376
IP address blocks:        132.213.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:64:7b:90:b9:aa:0f:2a:8e:e4:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:36:10 2024 GMT
            Not After : Mar  5 15:36:10 2025 GMT
        Subject: CN=a1350896-1c76-4d24-b5fc-eaceeb7676b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:ff:38:0a:d9:95:0a:f4:2c:32:87:ec:61:
                    77:02:ec:07:7d:81:20:81:89:e0:0d:06:90:d1:8a:
                    cc:a7:91:34:c4:15:c6:1d:08:8e:5d:9f:9b:5f:8b:
                    99:a4:45:ce:22:0f:dd:47:06:b4:68:18:10:8a:f0:
                    a9:82:a6:f2:54:a2:2c:f7:a8:14:bb:97:3e:32:f9:
                    23:36:89:8e:2d:c7:72:3c:d3:83:d5:3a:ca:f2:90:
                    a7:35:90:c4:ae:e5:fb:f0:79:66:87:1d:47:59:1e:
                    f9:39:74:32:ed:0f:eb:09:4d:70:c6:00:58:48:8a:
                    2f:85:1f:f7:5d:fd:85:72:96:a9:26:a7:3f:8b:c3:
                    e4:0e:60:48:5a:fc:bc:63:68:75:3d:c8:be:e5:9f:
                    28:ae:28:1b:d7:db:8b:bd:4b:f0:36:61:05:8b:2c:
                    57:e7:35:08:3a:33:e2:14:82:c9:b9:81:5f:49:af:
                    61:42:33:56:b2:db:14:bb:4a:d7:c9:d9:24:03:b6:
                    28:9e:4f:2e:b4:7b:92:93:d1:18:bf:1e:48:41:45:
                    9f:e7:4c:40:2e:01:f6:6d:dd:7b:8e:65:62:02:63:
                    1d:64:a9:5a:82:26:bf:df:c3:95:de:86:fe:f3:88:
                    8f:ec:d7:c2:bc:76:f3:f7:64:b5:7b:d2:fb:f2:cb:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:50:05:35:76:A5:64:B1:65:A5:37:8E:38:54:82:54:72:D4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d01c1872-21c1-30b4-a474-0f481d31fefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:a3:20:8a:8e:33:d1:d5:63:73:11:9c:4c:d6:78:c2:48:
         cf:a6:c8:19:18:de:0a:8a:67:96:e8:b6:ab:27:ff:d3:19:b9:
         1a:7a:61:b0:40:e7:9d:62:39:a5:7c:f3:c7:82:cf:ec:3c:fb:
         c9:1f:57:6a:de:32:62:50:54:cb:2e:e3:2b:b3:20:77:44:d9:
         9e:49:49:7b:12:54:c3:06:e7:46:41:e2:79:8c:49:0f:a9:12:
         f7:a0:97:37:d3:f2:8e:14:5b:74:19:6a:c7:e1:ba:ec:b8:96:
         89:64:15:80:86:68:2f:be:de:1f:38:78:27:7f:7b:14:c2:a2:
         e3:68:d5:fc:af:78:db:5a:8a:0f:38:4d:18:fa:72:9c:ed:07:
         47:27:2c:2b:ae:61:6e:4a:31:16:2d:05:29:30:e3:7f:43:90:
         17:17:d9:a5:be:24:f7:77:37:48:43:dd:6b:c6:d2:92:04:52:
         84:30:2c:34:ed:cc:a0:ba:6d:03:a7:48:cc:e2:ec:3c:58:c0:
         88:ef:fa:69:0e:47:22:c2:f1:33:b3:ec:fc:97:b4:b1:8b:97:
         42:63:e5:85:83:63:15:17:93:27:93:7a:54:82:9c:e4:81:d7:
         56:82:e0:9b:a0:89:f6:6f:ab:14:c2:7f:7c:c1:86:6a:31:05:
         c9:68:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org