Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6e85ce2-954e-30a8-a88d-70d97219401b.roa
File:                     f6e85ce2-954e-30a8-a88d-70d97219401b.roa (raw, json)
Hash identifier:          Z0RosKGAD9EPti/8LRJqd+cYTrLxlLh9+vYlsZmqh20=
Subject key identifier:   96:5D:8A:9C:7B:25:4C:EA:EC:27:6E:7B:B5:BA:E7:30:F9:4B:00:2E
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B65C5536F4E30499829CA80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6e85ce2-954e-30a8-a88d-70d97219401b.roa
Signing time:             Thu 05 Dec 2024 15:38:46 +0000
ROA not before:           Thu 05 Dec 2024 15:38:46 +0000
ROA not after:            Wed 05 Mar 2025 15:38:46 +0000
asID:                     376
IP address blocks:        132.213.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:65:c5:53:6f:4e:30:49:98:29:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:38:46 2024 GMT
            Not After : Mar  5 15:38:46 2025 GMT
        Subject: CN=e4a8a76f-a55b-4b84-9831-c693c9f2a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:7f:9a:55:95:0b:b7:16:4b:72:89:68:1a:
                    58:ec:d2:08:99:f6:ac:f6:58:d4:1c:55:cb:cd:e4:
                    1f:18:c4:70:b2:5e:b2:14:e3:65:89:3e:93:47:6f:
                    5e:65:7c:45:33:b4:38:de:44:30:38:de:c2:77:d2:
                    e3:91:8a:3d:04:57:c0:49:32:94:17:6d:60:ea:3f:
                    c1:11:10:8d:86:0e:c8:b1:60:a5:48:c7:b9:43:99:
                    99:9e:ba:fb:38:83:09:20:49:d8:a8:82:12:98:0c:
                    47:e0:7a:e0:44:27:02:e5:16:d9:91:50:b5:b0:11:
                    96:d0:29:92:ab:52:a9:c5:a6:05:2b:14:ac:35:01:
                    63:58:bd:74:77:82:5c:c6:81:ba:ff:bc:a2:eb:bf:
                    57:f4:d1:f6:a8:6c:3c:56:38:bd:73:d2:a5:00:df:
                    35:7d:ba:d5:1f:37:f3:d0:76:ca:33:b0:fa:2a:72:
                    d9:51:65:26:84:6f:06:e0:a3:2d:4b:5f:22:bb:ef:
                    78:d5:eb:7f:8c:b8:4f:5a:c1:6d:57:37:3b:9c:e7:
                    8a:f5:b7:21:d8:9b:4a:5b:d0:ee:ce:65:79:a6:c8:
                    fb:66:94:af:86:3f:eb:62:12:74:ae:28:ee:f8:31:
                    38:d5:fc:88:49:77:76:42:a2:96:d3:3f:0d:54:92:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:8A:9C:7B:25:4C:EA:EC:27:6E:7B:B5:BA:E7:30:F9:4B:00:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6e85ce2-954e-30a8-a88d-70d97219401b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:41:d3:55:ac:8a:33:86:fb:04:10:1c:33:42:42:07:70:24:
         54:0e:62:d0:e9:20:43:a6:92:0d:46:01:7a:ee:80:51:c0:4d:
         51:2a:53:dc:2a:23:c6:a3:e2:91:54:e7:9c:95:5c:02:77:41:
         93:6f:ce:3c:91:69:e6:c9:78:a4:1a:15:fc:60:d6:96:a0:23:
         bd:a4:6a:dd:80:e7:a5:b2:ee:67:3e:50:00:87:97:c3:2b:0b:
         e7:be:c6:71:d9:10:72:cf:08:a3:1e:53:38:0a:4d:4b:9c:f3:
         65:02:05:8a:31:01:a9:a8:92:07:24:42:cf:f0:c3:71:84:ae:
         0d:8e:6f:6f:34:47:26:fa:5c:ca:5c:97:70:b8:b2:97:38:fa:
         7b:14:5e:34:55:44:6d:8c:cb:6e:c6:da:a6:29:54:77:2b:d3:
         2f:62:93:7c:82:fb:7a:5b:0d:97:a9:ec:e3:7c:15:45:9d:21:
         ea:65:14:89:3e:a6:d7:e3:53:ac:67:25:bb:ba:41:74:48:b0:
         96:85:dd:15:c0:4f:02:1a:a7:93:99:b2:76:6e:e6:10:38:e5:
         b8:de:89:32:88:fa:a8:86:5c:f5:33:68:85:b7:33:18:77:30:
         57:44:30:58:4e:7a:fe:c9:af:61:0c:0d:3c:28:79:0d:48:07:
         99:cf:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org