Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70e4fd34-b27f-3f39-a187-05da9764ce25.roa
File:                     70e4fd34-b27f-3f39-a187-05da9764ce25.roa (raw, json)
Hash identifier:          emeInavC+EpdCRd62E7qhlOFdqx2S3f002oOpfwCGA0=
Subject key identifier:   A1:51:14:47:CF:D5:91:99:A5:43:62:7B:73:26:53:BF:8A:AC:72:62
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844AC13F40295F76BE73E163C40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70e4fd34-b27f-3f39-a187-05da9764ce25.roa
Signing time:             Thu 25 Jan 2024 16:18:23 +0000
ROA not before:           Thu 25 Jan 2024 16:18:23 +0000
ROA not after:            Wed 24 Apr 2024 15:18:23 +0000
asID:                     23470
IP address blocks:        104.129.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 18:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ac:13:f4:02:95:f7:6b:e7:3e:16:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 25 16:18:23 2024 GMT
            Not After : Apr 24 15:18:23 2024 GMT
        Subject: CN=b67baec0-2a38-47b2-a189-5023ec1a3a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:e3:b1:fe:a7:d5:9a:5c:5d:6b:62:62:f8:
                    17:b5:52:19:ff:ab:df:f5:a3:97:8a:7c:53:22:76:
                    3a:f5:98:01:b4:21:9a:19:89:5e:d4:18:3d:d3:32:
                    44:3a:34:09:0e:96:bd:5e:58:8b:a1:7a:a8:c5:47:
                    51:61:29:1b:c7:fc:c9:fd:e9:81:0c:9f:01:97:23:
                    09:c4:41:e3:27:c7:7e:9d:11:d9:86:2a:63:bc:d1:
                    58:4e:93:a7:88:08:a8:c4:06:19:9f:3b:8c:16:4f:
                    fb:5a:b8:10:24:b7:2d:31:b4:b4:a1:28:09:a6:01:
                    db:14:cd:9d:92:1d:ab:ad:5f:29:20:84:c8:e0:5f:
                    05:ab:bf:94:42:ef:d7:08:40:b7:c2:8c:ce:b0:09:
                    43:0b:7e:11:2d:27:a3:ce:92:58:b6:53:5e:8f:ad:
                    ca:c9:b5:c4:cd:1b:b1:80:ef:a7:27:19:1c:bb:c4:
                    a0:ec:14:7f:fe:b2:a2:23:7e:78:32:ea:0b:ba:54:
                    5d:dc:8d:32:62:33:9a:cf:54:05:b3:d6:10:2b:5a:
                    9b:44:e5:dd:ee:7e:7a:58:97:9d:b7:5b:cf:6b:c1:
                    5c:11:a1:a8:2f:1e:d7:3a:ea:a8:4b:14:f3:8e:9b:
                    cd:31:bf:0d:2a:c1:82:44:fb:e4:89:be:23:82:91:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:14:47:CF:D5:91:99:A5:43:62:7B:73:26:53:BF:8A:AC:72:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70e4fd34-b27f-3f39-a187-05da9764ce25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:ad:86:f6:de:fc:60:8d:7d:4c:4e:64:c8:f9:57:9f:1d:
         8c:81:a5:49:9c:72:03:c7:a8:55:24:2d:85:25:97:a1:8a:3e:
         b2:68:68:d4:3f:1b:12:8d:1f:fb:b5:c3:83:95:e8:e7:a6:27:
         a2:7f:3d:70:ca:01:2c:50:b0:63:1e:18:79:2a:dd:41:1e:43:
         33:8f:26:68:a0:5f:e7:d2:56:e2:4e:d6:4a:67:b7:16:3a:0a:
         33:b5:3b:c7:32:d7:92:9c:f9:c4:47:e2:46:74:76:c1:18:b9:
         3f:0d:ce:43:2d:2a:bb:a3:9a:9d:c3:3f:5a:76:af:00:fc:36:
         2a:eb:84:28:7f:2f:d8:05:c3:c6:a4:49:53:9d:3f:4c:1f:7d:
         6b:9f:be:ab:eb:10:19:dc:87:7c:2f:34:fe:76:8f:a7:44:2a:
         e4:d0:2b:48:53:63:ae:b7:0a:b8:e4:04:b8:37:69:6d:26:22:
         bb:a8:fb:23:5c:a1:8b:e3:28:79:27:cc:25:7c:1a:51:90:e9:
         88:6a:19:cd:f6:b2:62:7f:f2:50:1a:ea:d9:0c:14:e2:9e:c2:
         96:26:b2:2b:49:07:9f:20:8f:9e:4b:62:2a:01:a7:da:b7:8f:
         7e:71:d4:a0:1d:94:a6:be:b1:38:2e:9d:2c:18:28:fe:14:2f:
         45:6c:c4:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESsE/QClfdr5z4WPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDEyNTE2MTgyM1oXDTI0MDQyNDE1MTgyM1owLzEtMCsGA1UEAxMk
YjY3YmFlYzAtMmEzOC00N2IyLWExODktNTAyM2VjMWEzYTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5/jsf6n1ZpcXWtiYvgXtVIZ/6vf9aOXinxT
InY69ZgBtCGaGYle1Bg90zJEOjQJDpa9XliLoXqoxUdRYSkbx/zJ/emBDJ8BlyMJ
xEHjJ8d+nRHZhipjvNFYTpOniAioxAYZnzuMFk/7WrgQJLctMbS0oSgJpgHbFM2d
kh2rrV8pIITI4F8Fq7+UQu/XCEC3wozOsAlDC34RLSejzpJYtlNej63KybXEzRux
gO+nJxkcu8Sg7BR//rKiI354MuoLulRd3I0yYjOaz1QFs9YQK1qbROXd7n56WJed
t1vPa8FcEaGoLx7XOuqoSxTzjpvNMb8NKsGCRPvkib4jgpFE5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFRFEfP1ZGZpUNie3MmU7+KrHJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzBlNGZkMzQtYjI3Zi0z
ZjM5LWExODctMDVkYTk3NjRjZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIHxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALoArYb23vxgjX1MTmTI+VefHYyBpUmccgPHqFUkLYUll6GKPrJoaNQ/
GxKNH/u1w4OV6OemJ6J/PXDKASxQsGMeGHkq3UEeQzOPJmigX+fSVuJO1kpntxY6
CjO1O8cy15Kc+cRH4kZ0dsEYuT8NzkMtKrujmp3DP1p2rwD8NirrhCh/L9gFw8ak
SVOdP0wffWufvqvrEBnch3wvNP52j6dEKuTQK0hTY663CrjkBLg3aW0mIruo+yNc
oYvjKHknzCV8GlGQ6YhqGc32smJ/8lAa6tkMFOKewpYmsitJB58gj55LYioBp9q3
j35x1KAdlKa+sTgunSwYKP4UL0VsxNs=
-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:34 2024 by rpki-client on console-fra.rpki-client.org