Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8feada0b-2e37-35d5-8120-125b298b699c.roa
File:                     8feada0b-2e37-35d5-8120-125b298b699c.roa (raw, json)
Hash identifier:          kYfl8mNtmXU+oCFCtRMQQ92hbXq7dm1RcNR/csWgemc=
Subject key identifier:   B0:95:0D:E6:75:F4:42:DD:DF:9D:11:35:82:86:41:06:E4:B1:57:16
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720B0EFAE4F8D43DB05FBC00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8feada0b-2e37-35d5-8120-125b298b699c.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0b:0e:fa:e4:f8:d4:3d:b0:5f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=f7d01a52-6c22-4ba3-907d-c4191294e37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:49:2d:4c:9c:0b:31:c5:97:15:8e:d7:1b:
                    77:90:5f:ea:10:2e:d2:a3:85:b6:ca:15:5f:10:52:
                    96:76:f5:11:63:15:9f:07:c3:57:8d:ae:07:c2:59:
                    50:67:9a:40:c7:bd:4b:aa:37:d2:e8:04:4e:01:a5:
                    63:b2:f7:7f:ad:4e:e0:50:f9:88:8c:a4:6e:bf:7e:
                    fe:da:56:fc:39:b6:f7:c5:3a:98:f6:2d:01:fb:ef:
                    c7:17:d7:8e:d9:ff:9c:37:ee:c5:77:e1:2f:98:1b:
                    8c:1a:08:0c:2e:82:75:51:04:93:e2:04:7a:28:65:
                    ac:04:1d:1c:07:23:57:0b:25:60:c4:1b:ab:16:51:
                    27:9a:36:ff:ec:bf:e8:dd:39:e8:c6:5f:c1:9a:34:
                    27:34:65:49:99:ec:f7:11:ff:56:cd:e9:fc:e8:b7:
                    ac:94:28:ed:4f:1f:1e:83:b4:ac:e4:49:04:c2:d3:
                    78:7e:37:cc:05:d7:01:99:b7:5d:38:0d:3c:d0:da:
                    ac:40:f7:e5:a6:19:69:5f:f8:fb:ce:ea:13:b1:b9:
                    25:59:4c:ca:c3:3d:44:43:f9:3d:18:e7:43:c0:3a:
                    15:21:df:4b:73:44:06:e8:e0:74:f5:87:79:bd:ee:
                    f3:44:8c:15:1e:7c:eb:85:1f:fd:4a:a4:e4:ca:5e:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:95:0D:E6:75:F4:42:DD:DF:9D:11:35:82:86:41:06:E4:B1:57:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8feada0b-2e37-35d5-8120-125b298b699c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:01:92:52:f5:85:af:6b:a8:59:e4:b1:fe:55:7e:ea:86:
         16:48:97:dc:ef:1f:ab:a7:f3:93:bf:4c:2b:dd:a4:83:35:6f:
         e7:b9:59:38:d9:54:20:7e:68:7e:5e:4d:d5:41:a2:a0:dd:23:
         b1:48:19:dd:e0:c3:bd:55:14:55:91:2f:49:3e:c5:f7:07:35:
         17:93:0b:c3:e1:49:e6:1c:51:02:c6:d1:2a:fb:cd:37:26:42:
         34:2d:4d:fc:2e:c0:59:6b:c2:c0:30:d0:68:75:f7:a0:b7:67:
         6e:03:e1:43:08:d1:8f:11:1d:56:b6:3e:21:1a:a9:88:8b:42:
         ea:33:0d:00:e6:fa:78:bd:37:09:3d:98:c2:ae:47:f4:7f:40:
         ea:e4:01:68:cc:65:30:ba:a4:77:de:ef:33:d3:0b:64:77:75:
         18:2c:69:ef:0a:b7:32:df:b5:ed:48:a5:7b:9b:20:6e:7c:0f:
         e3:b9:ad:bb:5b:cf:8c:9d:9d:16:18:aa:48:7c:23:43:76:ce:
         a1:9c:91:17:5d:49:c4:2a:80:3e:14:8d:c8:a0:f0:b8:0d:50:
         4a:50:99:38:d4:61:fd:b5:42:60:2b:60:48:6b:cb:cc:36:9a:
         14:74:92:23:43:b6:3a:ea:4f:cc:27:6a:d4:6e:31:8a:4d:9e:
         f2:1a:73:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCw765PjUPbBfvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjdkMDFhNTItNmMyMi00YmEzLTkwN2QtYzQxOTEyOTRlMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz5JLUycCzHFlxWO1xt3kF/qEC7So4W2yhVf
EFKWdvURYxWfB8NXja4HwllQZ5pAx71LqjfS6AROAaVjsvd/rU7gUPmIjKRuv37+
2lb8Obb3xTqY9i0B++/HF9eO2f+cN+7Fd+EvmBuMGggMLoJ1UQST4gR6KGWsBB0c
ByNXCyVgxBurFlEnmjb/7L/o3Tnoxl/BmjQnNGVJmez3Ef9Wzen86LeslCjtTx8e
g7Ss5EkEwtN4fjfMBdcBmbddOA080NqsQPflphlpX/j7zuoTsbklWUzKwz1EQ/k9
GOdDwDoVId9Lc0QG6OB09Yd5ve7zRIwVHnzrhR/9SqTkyl5MpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCVDeZ19ELd350RNYKGQQbksVcWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvOGZlYWRhMGItMmUzNy0z
NWQ1LTgxMjAtMTI1YjI5OGI2OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHS0AZJS9YWva6hZ5LH+VX7qhhZIl9zvH6un85O/TCvdpIM1b+e5WTjZ
VCB+aH5eTdVBoqDdI7FIGd3gw71VFFWRL0k+xfcHNReTC8PhSeYcUQLG0Sr7zTcm
QjQtTfwuwFlrwsAw0Gh196C3Z24D4UMI0Y8RHVa2PiEaqYiLQuozDQDm+ni9Nwk9
mMKuR/R/QOrkAWjMZTC6pHfe7zPTC2R3dRgsae8KtzLfte1IpXubIG58D+O5rbtb
z4ydnRYYqkh8I0N2zqGckRddScQqgD4Ujcig8LgNUEpQmTjUYf21QmArYEhry8w2
mhR0kiNDtjrqT8wnatRuMYpNnvIacx0=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:42 2024 by rpki-client on console-fra.rpki-client.org