Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/922babf0-d2e7-306b-b525-6422432cd248.roa
File:                     922babf0-d2e7-306b-b525-6422432cd248.roa (raw, json)
Hash identifier:          K4TnHaA03oJBLVAbORf5BI5qNbXiD2Fn2AdCL+rnOBc=
Subject key identifier:   8C:8F:EF:F7:28:72:39:BB:7E:04:13:5E:C4:F2:BF:2F:D0:07:B7:7A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843FAA6025779E87989EBE9C980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/922babf0-d2e7-306b-b525-6422432cd248.roa
Signing time:             Thu 23 Nov 2023 02:58:46 +0000
ROA not before:           Thu 23 Nov 2023 02:58:46 +0000
ROA not after:            Wed 21 Feb 2024 02:58:46 +0000
asID:                     834
IP address blocks:        108.165.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 17:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fa:a6:02:57:79:e8:79:89:eb:e9:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 23 02:58:46 2023 GMT
            Not After : Feb 21 02:58:46 2024 GMT
        Subject: CN=2da7eb4b-7707-4ea0-9135-eab2dca0279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:aa:4e:b1:1f:37:2b:4e:12:e8:8c:da:70:6f:
                    a9:7b:75:39:36:97:95:f5:f1:48:99:b3:3e:23:b8:
                    c8:32:0b:23:53:b0:d6:71:22:3a:e7:aa:b1:12:2a:
                    1e:4e:d2:5a:27:fa:91:1f:fd:57:f9:a2:fe:ad:d6:
                    13:22:93:93:b9:dd:42:f3:5e:1d:88:64:5b:fd:e5:
                    19:d5:03:8b:89:c4:d4:dc:35:77:d3:49:24:0f:b0:
                    d7:66:56:0a:71:b1:d5:6e:40:24:af:5d:6c:f1:12:
                    ab:12:a2:2f:9e:1a:04:e8:d4:3c:92:23:b4:90:8d:
                    8d:e7:45:51:55:9d:65:71:d7:87:a1:c3:02:a5:c2:
                    8a:7e:7f:fe:1e:25:86:31:c6:0c:66:3f:05:fb:5c:
                    57:8c:82:91:04:41:a0:d9:79:5d:7e:e8:6f:fe:9f:
                    89:01:cd:51:e7:3f:f3:ba:69:71:fb:a9:9e:cd:88:
                    73:9e:2a:68:89:27:a8:c9:d6:20:43:be:e4:6b:d6:
                    c7:7c:51:9c:8e:e3:1f:6c:4e:99:f8:e2:b5:1a:71:
                    fd:a7:69:3e:20:00:75:53:9c:07:8f:1c:4c:eb:75:
                    36:8e:ef:56:87:90:f9:4d:ab:02:e5:30:67:93:ab:
                    9c:fe:4a:af:28:66:ec:35:81:18:84:11:02:b4:b0:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:EF:F7:28:72:39:BB:7E:04:13:5E:C4:F2:BF:2F:D0:07:B7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/922babf0-d2e7-306b-b525-6422432cd248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:f7:e8:99:c1:41:b0:8b:5b:d2:b1:b7:e5:25:f2:15:d3:
         6e:ef:fa:db:3d:75:a7:98:c1:aa:93:42:f7:d0:7d:45:be:b3:
         e0:f7:cf:d3:41:f5:ee:b6:3b:e8:cb:8f:a6:66:3b:df:1e:b4:
         65:8b:61:78:0f:39:5f:fc:a8:88:43:e1:96:39:56:2f:a9:84:
         4c:a9:a6:fa:5f:b3:7b:7f:29:5d:ad:f9:8e:e8:1b:23:ce:58:
         79:26:d7:53:e2:6c:2c:8c:4b:99:24:1f:08:f3:83:85:c4:7a:
         8a:28:ba:94:3e:ed:fc:91:aa:c2:cf:cb:ff:36:ef:5d:6b:10:
         6b:ba:67:b4:e0:7a:2a:97:22:3b:d2:36:a2:50:99:92:15:9d:
         c2:73:df:b9:fd:67:87:08:a3:9f:0c:98:90:8b:dd:7b:e2:ff:
         ed:da:88:31:23:d9:0c:04:67:fe:62:d0:e6:a5:53:b8:41:4a:
         4b:32:f5:a4:4b:96:7c:c0:2d:02:68:67:01:bc:61:79:24:5d:
         03:24:e4:6f:6b:4c:38:9e:4e:08:59:3b:2c:55:c5:e7:6e:da:
         5b:e9:67:26:3d:9f:a0:e0:59:75:75:9b:e5:32:32:0d:a3:5d:
         27:d7:9d:f1:3d:8d:d1:0a:eb:6c:56:79:4d:3f:44:c3:ca:63:
         70:22:19:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP6pgJXeeh5ievpyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEyMzAyNTg0NloXDTI0MDIyMTAyNTg0NlowLzEtMCsGA1UEAxMk
MmRhN2ViNGItNzcwNy00ZWEwLTkxMzUtZWFiMmRjYTAyNzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKpOsR83K04S6IzacG+pe3U5NpeV9fFImbM+
I7jIMgsjU7DWcSI656qxEioeTtJaJ/qRH/1X+aL+rdYTIpOTud1C814diGRb/eUZ
1QOLicTU3DV300kkD7DXZlYKcbHVbkAkr11s8RKrEqIvnhoE6NQ8kiO0kI2N50VR
VZ1lcdeHocMCpcKKfn/+HiWGMcYMZj8F+1xXjIKRBEGg2Xldfuhv/p+JAc1R5z/z
umlx+6mezYhznipoiSeoydYgQ77ka9bHfFGcjuMfbE6Z+OK1GnH9p2k+IAB1U5wH
jxxM63U2ju9Wh5D5TasC5TBnk6uc/kqvKGbsNYEYhBECtLCkTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyP7/cocjm7fgQTXsTyvy/QB7d6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTIyYmFiZjAtZDJlNy0z
MDZiLWI1MjUtNjQyMjQzMmNkMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKk9+iZwUGwi1vSsbflJfIV027v+ts9daeYwaqTQvfQfUW+s+D3z9NB
9e62O+jLj6ZmO98etGWLYXgPOV/8qIhD4ZY5Vi+phEyppvpfs3t/KV2t+Y7oGyPO
WHkm11PibCyMS5kkHwjzg4XEeoooupQ+7fyRqsLPy/82711rEGu6Z7TgeiqXIjvS
NqJQmZIVncJz37n9Z4cIo58MmJCL3Xvi/+3aiDEj2QwEZ/5i0OalU7hBSksy9aRL
lnzALQJoZwG8YXkkXQMk5G9rTDieTghZOyxVxedu2lvpZyY9n6DgWXV1m+UyMg2j
XSfXnfE9jdEK62xWeU0/RMPKY3AiGdY=
-----END CERTIFICATE-----