Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64b04cc7-4d17-3fb8-9b34-0fade0e1bdad.roa
File:                     64b04cc7-4d17-3fb8-9b34-0fade0e1bdad.roa (raw, json)
Hash identifier:          4vP+5/wGL9mhO0GIaUKhE8CW2xLEcbAWfDC35ld7e4Q=
Subject key identifier:   61:4B:03:89:BC:E2:AD:FC:4C:58:5F:33:95:9E:E4:46:36:C1:C8:13
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FC47DAD0263A84461356C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64b04cc7-4d17-3fb8-9b34-0fade0e1bdad.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:47:da:d0:26:3a:84:46:13:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=958ca295-814e-46b7-afa4-3d45db64f39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:ec:fc:e5:b7:20:dc:2a:25:08:a7:40:67:
                    de:aa:77:32:c7:34:fd:98:08:74:8c:6d:60:bb:5f:
                    2b:f5:3c:58:13:e9:9e:b2:47:25:8a:a9:ab:be:65:
                    62:4d:89:53:0b:bd:46:6d:3d:17:47:bd:d1:72:3e:
                    3f:3a:96:77:3e:68:09:41:14:50:e4:ac:ed:e0:d1:
                    28:59:e1:19:55:63:0b:69:5c:99:6b:12:22:dd:4b:
                    29:c9:eb:04:ef:f3:f3:1a:f5:4b:e4:77:e7:03:d2:
                    f6:41:7d:31:2b:b6:67:17:59:63:6a:40:12:8e:3e:
                    7f:9b:d8:22:ad:33:f8:54:d6:c2:21:89:06:a0:e2:
                    65:45:e6:f0:d9:6a:e4:47:90:ae:99:c8:dd:c2:79:
                    b4:af:5f:38:07:cf:4e:46:40:eb:ae:a9:a6:fe:d9:
                    81:9e:4b:bb:0e:75:e6:e8:94:f4:fe:37:df:53:2a:
                    e8:46:0f:62:aa:8f:3b:e5:93:e7:5d:28:93:03:10:
                    4c:d7:3d:52:00:0e:a5:ce:9b:96:79:cf:03:49:5c:
                    f6:84:cf:74:41:d0:66:90:f3:2c:13:16:2c:89:78:
                    9e:c2:ec:07:2f:d1:e9:6c:3b:83:72:55:74:56:aa:
                    78:94:4d:a7:15:df:71:c0:33:81:48:42:f5:7e:f7:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:03:89:BC:E2:AD:FC:4C:58:5F:33:95:9E:E4:46:36:C1:C8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64b04cc7-4d17-3fb8-9b34-0fade0e1bdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:0d:66:0b:ad:6a:18:7e:7f:3f:67:97:f2:fc:ae:1a:93:f7:
         64:35:6d:54:4b:ac:db:4b:25:36:49:cb:96:54:08:e1:3d:04:
         ce:88:20:3e:a1:38:ab:09:4f:b9:f4:9d:03:4f:56:e9:d9:a6:
         53:a8:04:9b:03:58:b0:5f:14:bc:f7:c5:b8:12:68:1b:a0:1e:
         7e:90:e5:94:e5:96:8d:61:10:13:e9:a1:7b:c1:f0:21:b3:27:
         b5:dd:1f:18:53:75:d4:cf:86:bf:c1:d8:4d:aa:32:b7:20:f3:
         f3:9b:a8:f5:33:06:9c:df:a9:03:53:ff:bc:41:49:aa:51:49:
         2b:2d:c1:0a:23:83:b1:9d:bd:95:f1:54:14:6e:a2:e0:ca:ea:
         81:10:0b:79:7e:ba:2b:86:92:8d:f0:f9:ac:0c:da:52:6d:5e:
         66:d3:7c:ec:49:63:05:16:a8:75:45:ce:ed:54:42:c1:8c:7b:
         66:12:78:dc:f8:0c:ea:81:1f:65:a9:b7:e8:63:17:28:6b:77:
         71:d9:ec:bc:64:5e:cb:d7:15:e7:1f:6f:59:c8:61:43:b3:8e:
         87:af:ef:18:01:53:b4:0b:bf:79:e4:70:14:b2:bb:ba:77:e3:
         bf:65:6a:70:4c:1b:b8:87:d9:04:53:87:37:c3:4f:8d:38:8c:
         e6:cd:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:45 2024 by rpki-client on console-fra.rpki-client.org