Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d486227-598c-3a72-926e-92fd97426f6b.roa
File:                     4d486227-598c-3a72-926e-92fd97426f6b.roa (raw, json)
Hash identifier:          7UJELFZ3X/SO27bK+txBGU0s5HCi3vh1FY/xnrN5Ptk=
Subject key identifier:   C3:3C:38:66:EC:40:7A:A7:83:9D:A3:01:28:1D:2C:39:64:95:D9:49
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328583E7A35170228E54EABE8D2A980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d486227-598c-3a72-926e-92fd97426f6b.roa
Signing time:             Tue 18 May 2021 13:36:10 +0000
ROA not before:           Tue 18 May 2021 13:36:10 +0000
ROA not after:            Tue 08 Oct 2030 04:00:00 +0000
asID:                     20454
IP address blocks:        207.230.114.0/24 maxlen: 24
                          104.251.93.0/24 maxlen: 24
                          104.251.94.0/24 maxlen: 24
                          104.218.198.0/24 maxlen: 24
                          104.218.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7a:35:17:02:28:e5:4e:ab:e8:d2:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 18 13:36:10 2021 GMT
            Not After : Oct  8 04:00:00 2030 GMT
        Subject: CN=ff129b3b-4981-4f31-b3a4-a9a18250df93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:7a:86:4e:17:f4:b8:e3:dc:d7:73:19:54:
                    30:ef:22:58:59:13:d1:d2:b9:1c:05:78:2d:64:4d:
                    79:0d:ea:19:11:27:cd:41:ca:e1:20:63:e3:3d:13:
                    87:72:4d:98:ea:62:95:8e:12:8d:f5:df:09:25:b0:
                    24:0c:88:57:eb:e6:c9:4b:c8:49:6e:03:d6:fc:c5:
                    bf:55:67:c8:2f:c5:d9:cd:eb:1f:76:a3:d1:a1:26:
                    7a:f2:7c:b6:7a:1c:b4:eb:2b:9a:2c:54:09:54:4a:
                    56:66:60:55:85:62:2a:5f:30:4c:a7:94:b5:c1:e8:
                    e7:63:d5:8e:63:36:5f:81:00:9c:3a:ef:77:89:6c:
                    cc:bf:d0:98:4f:d3:20:be:70:ee:87:e2:85:5d:a0:
                    b2:4e:1d:fe:53:92:fa:62:d8:07:5b:4f:ac:20:18:
                    64:e1:a0:a2:5c:71:c9:13:55:ca:5a:53:46:c0:34:
                    15:4e:cf:6e:5f:1b:b1:40:59:fe:0e:ac:7f:f5:8e:
                    8b:cb:92:20:2d:55:49:ac:96:7c:75:3f:df:5f:83:
                    ca:5b:09:10:04:fb:f0:cf:39:53:34:0e:b8:b1:3c:
                    10:08:ab:30:02:ae:09:a6:72:fe:6e:44:e0:22:76:
                    5f:63:78:6b:ad:f9:fe:d9:13:c9:08:11:2b:15:fa:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3C:38:66:EC:40:7A:A7:83:9D:A3:01:28:1D:2C:39:64:95:D9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d486227-598c-3a72-926e-92fd97426f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.198.0/23
                  104.251.93.0-104.251.94.255
                  207.230.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:40:84:b7:04:85:0a:a1:6e:66:5a:bf:c9:ff:77:70:53:d2:
         40:f9:bb:14:38:46:48:23:cf:e6:73:79:73:03:7b:b6:5b:05:
         7d:c0:eb:c3:d8:f3:0b:6c:b9:b1:19:fe:fe:e5:eb:01:ff:89:
         93:64:fb:4b:76:56:35:76:19:59:60:db:04:78:2e:e6:9d:06:
         48:8e:b2:6d:54:be:17:8b:38:91:cf:f6:88:db:3f:00:10:ca:
         d0:06:4f:97:69:bd:07:ae:23:b7:33:1d:b9:5d:ca:27:79:c2:
         aa:c9:02:6b:51:94:60:fa:25:7b:56:34:86:36:86:b6:9c:4f:
         f1:93:9f:68:03:3b:44:e3:5d:1b:f5:96:75:16:33:bf:8c:1c:
         7c:5a:83:99:80:55:ab:d4:6d:a0:ae:c8:03:8f:47:6b:5e:67:
         38:63:8c:3c:53:4d:43:01:d7:90:39:db:c7:87:49:a5:ad:69:
         7b:c4:2d:00:58:92:dd:b9:82:7f:00:64:32:ef:1c:22:51:c1:
         72:1b:ac:2f:72:2e:ff:f7:d1:18:01:8a:c0:99:3f:d7:ce:90:
         21:25:f2:17:48:7e:66:3d:dc:be:86:62:c3:57:88:0f:43:a3:
         2f:5f:13:e8:e1:77:a0:c7:ba:9f:7a:5a:49:0b:57:2c:d4:83:
         43:89:ca:3c
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWD56NRcCKOVOq+jSqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTIxMDUxODEzMzYxMFoXDTMwMTAwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmYxMjliM2ItNDk4MS00ZjMxLWIzYTQtYTlhMTgyNTBkZjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8d6hk4X9Ljj3NdzGVQw7yJYWRPR0rkcBXgt
ZE15DeoZESfNQcrhIGPjPROHck2Y6mKVjhKN9d8JJbAkDIhX6+bJS8hJbgPW/MW/
VWfIL8XZzesfdqPRoSZ68ny2ehy06yuaLFQJVEpWZmBVhWIqXzBMp5S1wejnY9WO
YzZfgQCcOu93iWzMv9CYT9MgvnDuh+KFXaCyTh3+U5L6YtgHW0+sIBhk4aCiXHHJ
E1XKWlNGwDQVTs9uXxuxQFn+Dqx/9Y6Ly5IgLVVJrJZ8dT/fX4PKWwkQBPvwzzlT
NA64sTwQCKswAq4JpnL+bkTgInZfY3hrrfn+2RPJCBErFfq81wIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFMM8OGbsQHqng52jASgdLDlkldlJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNGQ0ODYyMjctNTk4Yy0z
YTcyLTkyNmUtOTJmZDk3NDI2ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBaNrGMAwD
BABo+10DBABo+14DBADP5nIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIECEtwSFCqFuZlq/yf93cFPSQPm7
FDhGSCPP5nN5cwN7tlsFfcDrw9jzC2y5sRn+/uXrAf+Jk2T7S3ZWNXYZWWDbBHgu
5p0GSI6ybVS+F4s4kc/2iNs/ABDK0AZPl2m9B64jtzMduV3KJ3nCqskCa1GUYPol
e1Y0hjaGtpxP8ZOfaAM7RONdG/WWdRYzv4wcfFqDmYBVq9RtoK7IA49Ha15nOGOM
PFNNQwHXkDnbx4dJpa1pe8QtAFiS3bmCfwBkMu8cIlHBchusL3Iu//fRGAGKwJk/
186QISXyF0h+Zj3cvoZiw1eID0OjL18T6OF3oMe6n3paSQtXLNSDQ4nKPA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org