Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/782fab68-7389-32eb-b764-ee6f1857caee.roa
File:                     782fab68-7389-32eb-b764-ee6f1857caee.roa (raw, json)
Hash identifier:          DUlEcPdQWeRFXAd+HQEdCvnq2hj+/KeKEO0ZEKfe1o0=
Subject key identifier:   02:99:1B:57:90:3A:75:2F:74:3F:98:5A:E8:23:09:A5:58:81:EE:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858446952981B7ADEC136774FCAC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/782fab68-7389-32eb-b764-ee6f1857caee.roa
Signing time:             Mon 01 Jan 2024 18:25:26 +0000
ROA not before:           Mon 01 Jan 2024 18:25:26 +0000
ROA not after:            Sun 31 Mar 2024 17:25:26 +0000
asID:                     36113
IP address blocks:        104.129.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 05:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:69:52:98:1b:7a:de:c1:36:77:4f:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  1 18:25:26 2024 GMT
            Not After : Mar 31 17:25:26 2024 GMT
        Subject: CN=28332c39-6116-45b6-bcc7-9fceeb7bc631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:da:c8:1a:2f:bc:72:ba:3d:ec:bb:0d:6c:
                    3a:5b:0b:37:56:ac:de:25:00:5a:68:f4:90:2e:c2:
                    38:24:80:ff:54:49:cd:f4:69:0f:3d:e5:7d:bf:7b:
                    3b:dd:ed:5e:40:f8:23:93:09:4a:94:2d:3c:78:72:
                    76:08:f7:af:73:34:fb:3c:2e:9b:e2:b2:7e:25:77:
                    5a:16:8b:65:81:8e:3c:26:6b:78:d5:79:22:96:28:
                    aa:06:65:f6:6a:8c:7b:a4:b5:34:51:ab:35:14:34:
                    1b:2b:7c:73:8f:77:21:1a:76:27:09:28:ae:20:3c:
                    47:b7:2f:e4:cd:08:aa:16:d7:c5:15:1d:91:25:70:
                    63:1b:1d:9b:c8:aa:b9:4f:9a:bd:e3:17:39:4b:c4:
                    4f:43:b1:a4:24:4e:43:45:4f:fb:5d:63:15:11:2e:
                    dc:28:49:7b:eb:eb:82:07:df:12:6f:e6:1c:37:ba:
                    7d:50:84:ba:24:ca:5a:fb:86:bd:dd:5f:61:90:40:
                    12:80:7c:55:f5:bd:af:0d:40:69:a6:ba:7b:f3:83:
                    76:a3:21:31:19:ba:1c:4e:f1:01:56:d4:57:bd:d2:
                    c6:b4:85:1c:e2:18:ea:00:64:8d:c2:2f:61:11:15:
                    3a:85:a1:c0:a9:47:42:1d:04:23:70:ff:6d:03:64:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:99:1B:57:90:3A:75:2F:74:3F:98:5A:E8:23:09:A5:58:81:EE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/782fab68-7389-32eb-b764-ee6f1857caee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:94:9a:da:f6:81:29:d0:28:d1:99:00:1e:ec:ac:ac:9e:8e:
         6a:27:4c:96:2c:48:46:47:8e:dd:58:cb:2f:3a:f8:0a:bd:4c:
         c1:f5:e9:39:6b:35:3c:7a:50:8a:65:c8:5b:38:40:c2:c7:bf:
         cc:3b:5a:43:13:57:30:a9:08:45:4b:a1:1e:89:ca:3e:38:58:
         f1:72:8b:c9:51:94:5d:d2:f3:da:3d:a2:be:aa:2b:62:61:58:
         89:ac:a7:c8:86:94:51:6a:eb:42:56:96:51:11:95:86:b6:43:
         d5:32:a6:30:fa:80:19:86:c7:98:24:5e:87:9c:14:fc:ce:5c:
         72:e2:c6:b2:b8:fd:ee:a3:4c:13:07:a5:7c:39:f3:50:f2:01:
         6c:38:ad:53:4a:72:dd:72:9e:67:18:1b:69:fc:90:bb:f2:32:
         0e:e4:ad:29:12:e4:13:ef:5c:d8:07:95:8a:bd:9b:17:b5:69:
         e3:a2:f9:c8:c7:3e:cb:5d:1b:99:eb:ff:4b:45:b6:e1:30:ef:
         b3:ac:50:cc:8f:f9:c7:87:5a:e9:4b:e6:3b:9d:68:0a:2c:06:
         bf:9e:e6:71:3b:12:89:b6:c4:f3:5f:e1:36:67:70:6d:60:91:
         49:6d:48:ff:bc:0e:18:2f:22:06:57:bc:5e:a7:36:99:5a:dd:
         89:5d:b1:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERpUpgbet7BNndPysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDEwMTE4MjUyNloXDTI0MDMzMTE3MjUyNlowLzEtMCsGA1UEAxMk
MjgzMzJjMzktNjExNi00NWI2LWJjYzctOWZjZWViN2JjNjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuHayBovvHK6Pey7DWw6Wws3VqzeJQBaaPSQ
LsI4JID/VEnN9GkPPeV9v3s73e1eQPgjkwlKlC08eHJ2CPevczT7PC6b4rJ+JXda
FotlgY48Jmt41XkiliiqBmX2aox7pLU0Uas1FDQbK3xzj3chGnYnCSiuIDxHty/k
zQiqFtfFFR2RJXBjGx2byKq5T5q94xc5S8RPQ7GkJE5DRU/7XWMVES7cKEl76+uC
B98Sb+YcN7p9UIS6JMpa+4a93V9hkEASgHxV9b2vDUBpprp784N2oyExGbocTvEB
VtRXvdLGtIUc4hjqAGSNwi9hERU6haHAqUdCHQQjcP9tA2Tp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKZG1eQOnUvdD+YWugjCaVYge5YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzgyZmFiNjgtNzM4OS0z
MmViLWI3NjQtZWU2ZjE4NTdjYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSUmtr2gSnQKNGZAB7srKyejmonTJYsSEZHjt1Yyy86+Aq9TMH16Tlr
NTx6UIplyFs4QMLHv8w7WkMTVzCpCEVLoR6Jyj44WPFyi8lRlF3S89o9or6qK2Jh
WImsp8iGlFFq60JWllERlYa2Q9UypjD6gBmGx5gkXoecFPzOXHLixrK4/e6jTBMH
pXw581DyAWw4rVNKct1ynmcYG2n8kLvyMg7krSkS5BPvXNgHlYq9mxe1aeOi+cjH
PstdG5nr/0tFtuEw77OsUMyP+ceHWulL5judaAosBr+e5nE7Eom2xPNf4TZncG1g
kUltSP+8DhgvIgZXvF6nNpla3Yldsbg=
-----END CERTIFICATE-----
Generated at Thu Feb 1 10:39:40 2024 by rpki-client on console-ams.rpki-client.org