Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/efb3cb72-041b-3dbd-8a13-7cad2d3d8f3e.roa
File:                     efb3cb72-041b-3dbd-8a13-7cad2d3d8f3e.roa (raw, json)
Hash identifier:          SKiiRVRtZOte4Vu597mxDtP9qti/yfIU9x5WoR7TBH8=
Subject key identifier:   05:89:24:2F:74:05:9B:88:CF:F2:3F:B7:13:9E:7A:29:16:F9:B9:44
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328583E53D9AC8638F7BE5212361580
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/efb3cb72-041b-3dbd-8a13-7cad2d3d8f3e.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Wed 04 Apr 2029 04:00:00 +0000
asID:                     5645
IP address blocks:        24.246.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:d9:ac:86:38:f7:be:52:12:36:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2029 GMT
        Subject: CN=5030b46e-2327-4c9e-8390-fa3b7eeef366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:7f:0f:f9:9c:8b:1f:c3:77:9c:c8:e9:bc:
                    bf:8d:f3:48:d6:32:d3:32:db:9c:c1:b3:08:e7:c0:
                    06:de:7d:d4:d1:e6:a1:60:a4:d9:a9:c5:1c:65:60:
                    fe:45:3b:55:16:15:1f:71:c6:d2:b7:ca:c7:25:1f:
                    30:96:27:09:92:d6:48:d9:13:3f:23:7c:ec:11:8d:
                    19:fe:42:cd:4f:d3:8e:e5:ee:38:e4:c2:ba:c5:02:
                    bc:8d:aa:39:ea:c9:43:99:f0:76:5b:18:28:87:eb:
                    5c:cf:5e:6e:cc:fd:87:3d:77:be:8f:af:c5:82:e6:
                    44:69:93:54:0e:2a:d1:64:06:d7:fb:51:af:60:a2:
                    61:3b:fa:11:ca:d8:38:c0:3a:18:ad:d4:9f:6a:13:
                    bd:1c:2d:1e:93:62:2f:9d:a2:d8:50:ef:48:9f:4c:
                    ac:4e:6d:38:fe:8e:f2:08:5b:42:87:27:16:55:f3:
                    62:8b:ed:61:9d:82:ae:88:cb:e6:25:1b:a5:b1:e8:
                    2a:f6:cc:62:75:41:9c:50:d6:28:17:cb:9f:52:bc:
                    b3:7f:17:04:f7:16:be:6c:7a:d4:db:4b:91:66:23:
                    8b:b7:b6:95:b8:21:34:c6:0f:bc:ca:9e:79:3c:44:
                    cb:57:52:a9:03:f7:31:ef:6e:a9:43:7c:8b:88:5f:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:89:24:2F:74:05:9B:88:CF:F2:3F:B7:13:9E:7A:29:16:F9:B9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/efb3cb72-041b-3dbd-8a13-7cad2d3d8f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:37:bb:58:92:ae:68:13:c7:8a:10:2b:a7:a9:bc:2f:40:
         d1:fc:e1:41:12:a2:b5:48:f0:86:d7:86:ef:f3:a3:77:4c:27:
         14:8b:d3:df:ee:56:1c:ae:d3:30:57:7a:21:08:ee:e7:b4:70:
         02:a8:8f:76:44:0a:d3:3b:73:18:b3:f6:93:d5:aa:dc:b8:59:
         b9:10:e0:07:d8:d1:a3:e7:38:5b:0d:20:a4:c0:1e:c1:86:75:
         57:3a:a9:2f:26:73:29:af:f5:d1:63:1a:ed:c6:03:2b:80:a2:
         1e:12:14:48:07:d9:76:45:90:5f:7f:24:23:b0:64:a1:53:db:
         7b:ce:0b:28:24:6c:04:76:23:94:11:37:48:1c:b8:6d:3b:0d:
         17:f0:5d:92:80:35:5f:06:49:35:0c:d7:46:f2:84:a9:e9:fd:
         b7:ba:35:e6:c1:16:c9:9c:82:2e:ec:6e:da:92:53:90:e9:dd:
         8a:46:c1:ea:b6:56:25:f7:95:19:c5:fe:46:6b:d9:1c:94:be:
         cd:eb:09:c1:61:0c:d0:70:06:3d:fe:68:9a:c3:5f:08:6e:b8:
         c9:3f:85:03:68:6e:68:21:b9:52:7b:fd:43:87:fa:61:44:32:
         91:78:d0:1c:0b:81:11:94:90:7c:50:76:79:a5:7a:43:47:58:
         ae:3d:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 20:59:19 2024 by rpki-client on console-fra.rpki-client.org