Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c717aae-6f53-378a-8230-569c794ceb77.roa
File:                     4c717aae-6f53-378a-8230-569c794ceb77.roa (raw, json)
Hash identifier:          1Ev5ewZ3+JTtt8s9o4j+Qz+inxBxbPgoTHyVgbwW5tI=
Subject key identifier:   05:34:74:8C:CC:DE:87:F1:35:9B:B7:53:8A:3F:25:77:F5:28:64:67
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F0A1742C6741E402528140
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c717aae-6f53-378a-8230-569c794ceb77.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:a1:74:2c:67:41:e4:02:52:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c26dccfa-c67d-4989-a331-bf07b22910b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:cb:91:82:09:00:28:51:df:6d:ad:dd:72:
                    1c:10:c4:eb:08:2f:7d:d6:7c:3c:4e:91:a7:7a:36:
                    66:5e:e8:27:1d:a4:54:59:04:1b:68:8f:9b:a9:64:
                    2c:f9:1f:b3:53:7d:5e:ec:e0:4d:14:91:22:40:fa:
                    ee:1e:ee:a7:b6:7d:fc:42:d5:eb:c9:3e:6a:8d:42:
                    68:c6:f9:cf:13:47:e0:7a:0a:e4:e9:7f:c0:d6:6c:
                    5d:6c:9c:43:b4:8f:cf:30:39:03:59:b3:7d:2b:d4:
                    c6:90:97:22:80:19:02:58:8a:4e:3b:02:80:c4:32:
                    3f:ce:7a:8e:7a:3c:39:fa:24:b2:6a:fa:bb:c7:73:
                    03:78:2a:8a:e3:b5:48:ce:c3:fd:8f:e5:6b:3f:9c:
                    dd:74:83:dc:d9:cd:94:33:17:6a:b6:8f:81:be:4b:
                    05:1e:8a:b0:6a:6a:53:30:e7:1e:2a:bc:00:9e:b9:
                    99:42:ab:a7:53:d1:c0:7e:18:43:09:8d:91:a3:c7:
                    41:3a:bb:d9:8a:ce:ca:d5:a1:ee:b7:d4:74:b6:cd:
                    c8:62:65:59:3e:3f:16:92:e2:b2:02:13:8f:ac:66:
                    71:40:ba:64:7e:a0:6f:b4:20:f9:35:72:6e:9a:3f:
                    b7:04:62:33:b4:1b:52:10:21:de:c8:03:1b:6b:22:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:74:8C:CC:DE:87:F1:35:9B:B7:53:8A:3F:25:77:F5:28:64:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c717aae-6f53-378a-8230-569c794ceb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d2:c4:87:0c:fe:ba:65:fd:fe:95:82:8d:de:d1:ec:23:16:
         ea:8c:67:d5:05:03:e9:7e:65:4a:3f:44:89:eb:94:b3:d1:01:
         22:eb:e2:24:40:ff:57:51:3e:52:0d:f8:e2:79:8a:98:18:99:
         c8:6f:32:d0:7e:5a:78:be:a6:82:5e:06:61:bf:99:4d:59:93:
         4e:0d:8c:13:56:bf:24:94:b0:f7:3b:c6:78:bf:84:87:b2:1c:
         30:38:9c:99:47:2a:53:d4:0c:55:18:f1:1e:94:33:17:94:13:
         fe:69:7f:b2:bc:e4:ea:05:6e:9e:e8:1d:9f:c3:b8:02:05:f6:
         2d:19:6e:32:6f:09:dd:fd:88:95:e2:3b:91:5c:0a:44:fb:28:
         c9:a0:fa:40:d4:de:c4:c8:ec:41:8e:ae:a9:77:71:2f:f4:2d:
         2b:c4:24:49:9e:2f:3b:58:a9:79:4d:eb:1f:67:87:64:fc:a9:
         09:6b:ec:30:f5:c0:c8:a2:ec:d6:aa:c4:e9:21:6d:67:19:dc:
         29:75:01:ef:7a:54:c3:dc:4c:b3:ec:26:f6:d7:03:9a:fe:d7:
         1e:7e:29:ec:8d:3e:16:df:96:4d:2c:9e:39:61:64:df:c2:08:
         1a:f6:6e:5e:a0:f0:b6:48:41:39:92:13:14:89:06:26:a9:ff:
         86:71:05:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8KF0LGdB5AJSgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzI2ZGNjZmEtYzY3ZC00OTg5LWEzMzEtYmYwN2IyMjkxMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7nLkYIJAChR322t3XIcEMTrCC991nw8TpGn
ejZmXugnHaRUWQQbaI+bqWQs+R+zU31e7OBNFJEiQPruHu6ntn38QtXryT5qjUJo
xvnPE0fgegrk6X/A1mxdbJxDtI/PMDkDWbN9K9TGkJcigBkCWIpOOwKAxDI/znqO
ejw5+iSyavq7x3MDeCqK47VIzsP9j+VrP5zddIPc2c2UMxdqto+BvksFHoqwampT
MOceKrwAnrmZQqunU9HAfhhDCY2Ro8dBOrvZis7K1aHut9R0ts3IYmVZPj8WkuKy
AhOPrGZxQLpkfqBvtCD5NXJumj+3BGIztBtSECHeyAMbayJqOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAU0dIzM3ofxNZu3U4o/JXf1KGRnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGM3MTdhYWUtNmY1My0z
NzhhLTgyMzAtNTY5Yzc5NGNlYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7SxIcM/rpl/f6Vgo3e0ewjFuqMZ9UFA+l+ZUo/RInrlLPRASLr4iRA
/1dRPlIN+OJ5ipgYmchvMtB+Wni+poJeBmG/mU1Zk04NjBNWvySUsPc7xni/hIey
HDA4nJlHKlPUDFUY8R6UMxeUE/5pf7K85OoFbp7oHZ/DuAIF9i0ZbjJvCd39iJXi
O5FcCkT7KMmg+kDU3sTI7EGOrql3cS/0LSvEJEmeLztYqXlN6x9nh2T8qQlr7DD1
wMii7NaqxOkhbWcZ3Cl1Ae96VMPcTLPsJvbXA5r+1x5+KeyNPhbflk0snjlhZN/C
CBr2bl6g8LZIQTmSExSJBiap/4ZxBQg=
-----END CERTIFICATE-----