Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/024f0b79-fd9c-303e-a8c1-d1ead297da8d.roa
File:                     024f0b79-fd9c-303e-a8c1-d1ead297da8d.roa (raw, json)
Hash identifier:          +mkb8/oYFGFmFTSC9/cijMt5ETs4ypt/JCFchdLd+RQ=
Subject key identifier:   F6:B3:16:9A:AD:D4:86:37:3E:5B:23:76:CB:44:7E:AD:BB:A3:79:CF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858451A19040BFA27F9F7076DEF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/024f0b79-fd9c-303e-a8c1-d1ead297da8d.roa
Signing time:             Tue 05 Mar 2024 02:07:30 +0000
ROA not before:           Tue 05 Mar 2024 02:07:30 +0000
ROA not after:            Mon 03 Jun 2024 01:07:30 +0000
asID:                     834
IP address blocks:        67.227.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 19:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:19:04:0b:fa:27:f9:f7:07:6d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 02:07:30 2024 GMT
            Not After : Jun  3 01:07:30 2024 GMT
        Subject: CN=0d8cd925-1993-4efb-9c5d-e6186cadc75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:e5:43:7a:50:6e:e6:06:40:91:3f:0e:0a:
                    a1:71:3c:8b:33:f7:cf:de:a1:7a:87:0b:af:ae:7c:
                    35:dc:fe:ee:91:d8:f4:84:e6:f4:77:62:d9:0b:31:
                    f2:2a:69:2a:66:78:d8:7b:af:f5:1f:5e:ee:12:b4:
                    a3:c8:08:22:9b:d0:0f:b5:55:74:44:74:13:74:5d:
                    6b:28:69:ac:02:47:64:87:fa:e3:25:b9:42:fc:d3:
                    d3:eb:2b:64:fe:bc:12:c5:22:fe:c9:9a:83:5a:96:
                    7b:4d:12:bc:66:2d:59:8d:50:9f:8f:ab:5a:97:38:
                    0c:64:3f:4f:96:9b:4b:41:5c:c7:63:c3:66:d7:59:
                    7e:b0:f5:ca:d9:36:5e:f0:56:87:a6:65:a3:d1:09:
                    59:95:fe:8f:1c:15:14:bd:9e:5c:c3:b8:b4:7d:2d:
                    ab:9a:d3:e4:db:50:bf:c2:22:8c:92:bc:19:47:02:
                    c5:73:8b:a0:cd:66:37:f2:89:0a:19:fc:34:70:9b:
                    56:63:e7:b7:fc:81:8f:9c:6a:3a:26:b3:14:e6:51:
                    e5:95:e1:f5:06:23:a1:e4:78:05:9b:08:a0:b3:6f:
                    45:07:f1:b9:68:c4:a0:00:be:f7:85:b2:95:f4:26:
                    06:95:b3:8c:26:b5:10:8d:ea:b2:33:14:79:16:25:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:16:9A:AD:D4:86:37:3E:5B:23:76:CB:44:7E:AD:BB:A3:79:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/024f0b79-fd9c-303e-a8c1-d1ead297da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:1b:ac:0c:fe:f5:ac:64:17:05:d5:e3:0d:b5:67:00:37:64:
         3b:ea:82:8c:bd:3a:94:23:4b:ed:8b:9c:fe:c5:f0:4d:0f:81:
         9d:d2:10:55:a3:bd:fc:23:0d:ff:42:31:20:2e:ef:24:43:ec:
         6a:3f:f3:b6:c0:5d:65:69:38:24:b1:40:a0:43:82:f8:4a:2a:
         56:60:45:13:73:49:91:ca:c3:17:4c:68:ac:0a:01:b2:c0:1e:
         56:53:2a:95:e3:73:5b:3e:2a:17:cd:ac:41:c8:25:fb:8a:63:
         d8:6c:9f:00:0c:7e:bf:29:fe:ff:f7:3b:ac:c0:03:77:0e:1a:
         c7:e3:1e:4b:a7:f5:c0:5e:e0:ce:71:d2:bd:bb:75:11:36:f3:
         3d:8f:c5:d7:ce:23:71:59:5a:f9:22:fa:d5:b9:df:8f:9a:1d:
         11:11:bf:13:41:5c:7e:5c:42:c0:31:3c:7e:f3:4e:09:2c:c0:
         bd:70:1c:8f:77:05:17:73:2a:d7:1a:f0:26:11:a6:5d:cf:d5:
         01:22:3c:5e:87:21:05:07:12:3f:c5:28:08:b8:02:e8:88:59:
         ec:12:dd:10:48:c0:0b:e6:cc:25:3c:bd:98:b8:47:63:1e:89:
         84:6f:bd:88:2d:5d:0f:35:b4:62:d9:db:43:8e:fa:23:f3:b6:
         54:9e:fd:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaGQQL+if59wdt7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMwNTAyMDczMFoXDTI0MDYwMzAxMDczMFowLzEtMCsGA1UEAxMk
MGQ4Y2Q5MjUtMTk5My00ZWZiLTljNWQtZTYxODZjYWRjNzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFXlQ3pQbuYGQJE/DgqhcTyLM/fP3qF6hwuv
rnw13P7ukdj0hOb0d2LZCzHyKmkqZnjYe6/1H17uErSjyAgim9APtVV0RHQTdF1r
KGmsAkdkh/rjJblC/NPT6ytk/rwSxSL+yZqDWpZ7TRK8Zi1ZjVCfj6talzgMZD9P
lptLQVzHY8Nm11l+sPXK2TZe8FaHpmWj0QlZlf6PHBUUvZ5cw7i0fS2rmtPk21C/
wiKMkrwZRwLFc4ugzWY38okKGfw0cJtWY+e3/IGPnGo6JrMU5lHlleH1BiOh5HgF
mwigs29FB/G5aMSgAL73hbKV9CYGlbOMJrUQjeqyMxR5FiUfMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPazFpqt1IY3PlsjdstEfq27o3nPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDI0ZjBiNzktZmQ5Yy0z
MDNlLWE4YzEtZDFlYWQyOTdkYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+NtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMgbrAz+9axkFwXV4w21ZwA3ZDvqgoy9OpQjS+2LnP7F8E0PgZ3SEFWj
vfwjDf9CMSAu7yRD7Go/87bAXWVpOCSxQKBDgvhKKlZgRRNzSZHKwxdMaKwKAbLA
HlZTKpXjc1s+KhfNrEHIJfuKY9hsnwAMfr8p/v/3O6zAA3cOGsfjHkun9cBe4M5x
0r27dRE28z2PxdfOI3FZWvki+tW534+aHRERvxNBXH5cQsAxPH7zTgkswL1wHI93
BRdzKtca8CYRpl3P1QEiPF6HIQUHEj/FKAi4AuiIWewS3RBIwAvmzCU8vZi4R2Me
iYRvvYgtXQ81tGLZ20OO+iPztlSe/c0=
-----END CERTIFICATE-----
Generated at Sat Mar 9 20:51:45 2024 by rpki-client on console-fra.rpki-client.org