Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa
File:                     bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa (raw, json)
Hash identifier:          zCxWkSGCBhC5wElth+dmqah6yLET+0Tntf6VabfAz1U=
Subject key identifier:   26:81:87:2F:CB:CA:C5:0B:78:58:C8:DD:1B:80:CB:F9:28:DD:51:AC
Certificate issuer:       /CN=eec25392-c529-41f4-b3b9-7577f6660804
Certificate serial:       010D0C9F43285844DEB98993AC412FB911521D80
Authority key identifier: 22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa
Signing time:             Mon 12 Feb 2024 19:42:26 +0000
ROA not before:           Mon 12 Feb 2024 19:42:26 +0000
ROA not after:            Sun 12 May 2024 18:42:26 +0000
asID:                     20326
IP address blocks:        207.90.226.0/24 maxlen: 32
                          207.90.225.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 23:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:b9:89:93:ac:41:2f:b9:11:52:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec25392-c529-41f4-b3b9-7577f6660804
        Validity
            Not Before: Feb 12 19:42:26 2024 GMT
            Not After : May 12 18:42:26 2024 GMT
        Subject: CN=5879d47a-de77-4b55-982c-e31be70594bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:8e:77:47:f4:e3:bb:10:8a:76:2b:eb:20:
                    74:19:2a:36:32:e4:58:e7:d5:24:dc:e1:5b:3b:72:
                    72:de:58:35:7f:5d:ee:12:b6:a4:34:1a:ff:6b:70:
                    d2:89:3e:2b:9a:0d:51:79:e9:5e:79:71:fc:85:b1:
                    a5:a2:82:88:3d:c3:65:85:39:21:12:aa:56:6b:e0:
                    bb:2c:6e:40:02:8f:9c:8d:41:8f:ee:41:f9:95:a9:
                    ef:1a:6a:f8:f8:2f:0f:98:31:e3:12:1a:57:8e:50:
                    6b:d7:7d:31:12:f2:a0:c0:46:11:ad:8e:52:f8:8f:
                    1c:a2:bc:f3:05:8b:c6:38:61:22:f8:be:8d:fc:ad:
                    cc:59:c3:af:6f:0e:79:b5:c8:9a:f0:e6:7d:47:5e:
                    62:8e:c1:99:3b:a2:38:35:1d:3e:29:fa:d6:17:5d:
                    d1:1b:74:03:b4:aa:ac:f2:74:47:f2:0d:53:5f:93:
                    24:8f:14:71:2c:c0:b9:1a:f6:18:0c:24:67:6b:3c:
                    76:46:96:a5:89:2f:5f:45:7e:a7:8c:fe:0b:17:cc:
                    1e:1f:5b:db:d0:c9:2a:bf:c9:c4:17:2c:da:58:a3:
                    e8:2f:40:e0:e5:f2:fc:01:21:72:06:81:d1:ab:62:
                    a6:15:66:07:1a:23:88:3c:bf:4a:67:89:cc:f2:ff:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:81:87:2F:CB:CA:C5:0B:78:58:C8:DD:1B:80:CB:F9:28:DD:51:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/eec25392-c529-41f4-b3b9-7577f6660804.crl

            X509v3 Authority Key Identifier:
                keyid:22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.225.0-207.90.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:cc:9b:09:70:4d:43:42:24:fb:77:fe:9d:f5:4a:c5:39:
         7c:ca:c2:cf:83:5d:a5:4a:4b:c4:1d:e8:cb:49:d3:2b:c5:56:
         1f:60:eb:c9:4b:50:64:f8:19:e0:a1:d8:33:d9:4b:0d:0d:54:
         b6:f9:70:82:77:ab:3f:99:e0:d8:0c:fe:1c:5e:42:43:7f:35:
         d4:d5:35:ab:d0:42:48:d9:80:57:f8:42:c3:92:fc:89:e5:fd:
         41:80:8d:e3:9a:66:07:5b:77:16:d1:8d:78:21:ec:e2:94:f2:
         16:a0:96:ea:5a:7e:cb:d8:df:0a:d8:f0:db:54:cc:46:34:35:
         ff:16:09:5c:d2:e4:77:8f:56:77:05:95:21:90:d5:01:48:26:
         a0:d7:d1:c1:0c:2b:77:95:bf:73:73:f9:3a:a0:19:4a:ae:e1:
         89:b4:f1:a3:95:58:ec:b5:62:18:6a:f2:6f:b7:73:6e:8a:0d:
         24:97:7b:47:70:6a:3a:df:bd:2c:b6:46:a9:f6:c3:25:d0:70:
         84:5e:5c:5a:19:85:f6:34:b4:77:e3:e8:03:cd:df:4c:27:4b:
         ee:da:bb:23:1d:9c:f4:e3:f0:0c:47:0f:aa:95:f1:06:c5:1e:
         a7:d2:96:93:a5:df:6a:8a:92:0d:d6:4b:1d:5d:2c:b4:1c:4f:
         2c:10:8f:e8
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWETeuYmTrEEvuRFSHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVjMjUzOTItYzUyOS00MWY0LWIzYjktNzU3N2Y2NjYw
ODA0MB4XDTI0MDIxMjE5NDIyNloXDTI0MDUxMjE4NDIyNlowLzEtMCsGA1UEAxMk
NTg3OWQ0N2EtZGU3Ny00YjU1LTk4MmMtZTMxYmU3MDU5NGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhiOd0f047sQinYr6yB0GSo2MuRY59Uk3OFb
O3Jy3lg1f13uErakNBr/a3DSiT4rmg1ReeleeXH8hbGlooKIPcNlhTkhEqpWa+C7
LG5AAo+cjUGP7kH5lanvGmr4+C8PmDHjEhpXjlBr130xEvKgwEYRrY5S+I8corzz
BYvGOGEi+L6N/K3MWcOvbw55tcia8OZ9R15ijsGZO6I4NR0+KfrWF13RG3QDtKqs
8nRH8g1TX5MkjxRxLMC5GvYYDCRnazx2RpaliS9fRX6njP4LF8weH1vb0Mkqv8nE
FyzaWKPoL0Dg5fL8ASFyBoHRq2KmFWYHGiOIPL9KZ4nM8v+yNQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFCaBhy/LysULeFjI3RuAy/ko3VGsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZWMy
NTM5Mi1jNTI5LTQxZjQtYjNiOS03NTc3ZjY2NjA4MDQvYmM5OWRmZjQtNzc3ZS0z
ODI0LWE3YjAtYTFiZTBhNzEwMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWVjMjUzOTItYzUyOS00MWY0LWIz
YjktNzU3N2Y2NjYwODA0L2VlYzI1MzkyLWM1MjktNDFmNC1iM2I5LTc1NzdmNjY2
MDgwNC5jcmwwHwYDVR0jBBgwFoAUIpQUuI9/prvVWXypCZzdg91Z3dwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZWMyNTM5Mi1jNTI5LTQxZjQtYjNiOS03NTc3
ZjY2NjA4MDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADPWuED
BADPWuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAV1vMmwlwTUNCJPt3/p31SsU5fMrCz4NdpUpLxB3oy0nT
K8VWH2DryUtQZPgZ4KHYM9lLDQ1UtvlwgnerP5ng2Az+HF5CQ3811NU1q9BCSNmA
V/hCw5L8ieX9QYCN45pmB1t3FtGNeCHs4pTyFqCW6lp+y9jfCtjw21TMRjQ1/xYJ
XNLkd49WdwWVIZDVAUgmoNfRwQwrd5W/c3P5OqAZSq7hibTxo5VY7LViGGryb7dz
booNJJd7R3BqOt+9LLZGqfbDJdBwhF5cWhmF9jS0d+PoA83fTCdL7tq7Ix2c9OPw
DEcPqpXxBsUep9KWk6XfaoqSDdZLHV0stBxPLBCP6A==
-----END CERTIFICATE-----
Generated at Sat Mar 23 00:20:45 2024 by rpki-client on console-fra.rpki-client.org