Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c521c4-a5f3-381d-99a5-f970a1082355.roa
File:                     f0c521c4-a5f3-381d-99a5-f970a1082355.roa (raw, json)
Hash identifier:          PG9C7M3Qcfc9fv24FHDl8WdZPeFcV6W9fFqkasUsemc=
Subject key identifier:   A9:B8:8B:14:47:FB:91:51:32:A6:FB:C3:5C:57:E0:50:11:BA:D6:66
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0101B1F48EAA4310A29F40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c521c4-a5f3-381d-99a5-f970a1082355.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:01:01:b1:f4:8e:aa:43:10:a2:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2950b746-2efb-46e3-85f1-04b4283889b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:a1:f0:17:40:26:b2:39:be:0f:f4:74:73:
                    5a:71:a3:c2:15:f9:1c:e1:97:95:14:77:03:1c:7f:
                    03:f7:ff:84:d7:9f:d4:17:68:c0:65:27:29:29:66:
                    04:9a:4e:22:39:ff:0d:b6:01:24:36:de:0f:1d:4d:
                    91:70:41:47:3c:eb:b0:be:51:da:04:96:e7:41:15:
                    27:c5:cc:1a:4f:95:53:55:d3:8a:18:47:1e:de:37:
                    10:32:2e:15:75:7e:07:a1:25:99:d0:21:44:8b:3e:
                    d6:0f:8e:3a:1e:06:9b:9f:07:5b:a7:48:a1:66:de:
                    ea:6a:ea:1e:ce:3c:3d:88:0b:57:ca:0f:b5:d3:42:
                    e2:29:75:a5:b7:f6:b1:fb:bc:fe:40:81:af:27:bc:
                    79:53:6a:d3:07:e2:cf:64:41:80:d1:c2:03:ed:b6:
                    d1:17:2a:41:1a:ad:26:ce:b4:6b:9b:78:0f:db:98:
                    b4:2b:cc:c3:7b:59:ab:5f:8a:cb:aa:61:61:91:a0:
                    a3:49:f2:e7:f2:96:d6:dd:26:dc:25:d4:9c:c8:c8:
                    c1:d6:ee:39:72:94:82:88:37:06:d2:85:ad:2e:c1:
                    28:e0:48:ac:a2:23:fb:4f:a3:34:59:d6:3a:0e:3a:
                    40:f3:a1:86:6b:0d:07:53:1e:65:6e:db:36:e9:92:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:8B:14:47:FB:91:51:32:A6:FB:C3:5C:57:E0:50:11:BA:D6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c521c4-a5f3-381d-99a5-f970a1082355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:51:df:fd:65:53:f7:9e:98:19:35:24:f5:b1:eb:b0:ca:
         0a:d1:e9:b4:48:1c:6c:62:4c:e1:0e:ab:46:f7:c0:3e:5b:87:
         9d:11:b5:ae:6c:b0:7b:de:36:97:75:2d:e1:24:39:5f:06:c2:
         0c:23:a2:c7:70:c9:17:f9:50:b1:7a:38:e2:dd:28:42:cf:c2:
         d9:6b:ba:69:32:67:3e:59:ef:86:8d:5a:08:cc:a9:19:c1:de:
         4d:85:4b:a7:e6:52:45:bd:85:7d:09:4f:c3:f5:49:71:c7:5c:
         7f:c2:c4:63:f3:0d:ad:30:25:49:cf:74:6b:23:c1:99:dd:fc:
         7a:0f:11:a1:3c:3d:e3:8e:b7:a4:76:30:4f:8e:79:99:8b:6a:
         f4:76:1f:d4:fc:3f:90:3d:48:be:f2:07:c4:ed:e2:94:6f:12:
         08:89:fd:79:17:17:ca:a9:ba:59:05:2d:78:fe:7d:25:4c:cc:
         70:cd:ed:d9:d8:a2:01:6d:fa:c5:f9:43:ca:d5:24:8b:f4:b8:
         69:02:f2:3a:09:b4:08:b4:84:f3:c5:66:e1:67:e5:f8:a7:e7:
         0a:45:a6:f2:1e:1a:9f:2b:73:10:96:59:57:4e:fe:8d:35:e5:
         79:5e:c3:d6:96:1b:78:e4:b1:53:eb:59:09:ff:fd:c4:6d:82:
         5e:be:d8:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKAQGx9I6qQxCin0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjk1MGI3NDYtMmVmYi00NmUzLTg1ZjEtMDRiNDI4Mzg4OWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRyh8BdAJrI5vg/0dHNacaPCFfkc4ZeVFHcD
HH8D9/+E15/UF2jAZScpKWYEmk4iOf8NtgEkNt4PHU2RcEFHPOuwvlHaBJbnQRUn
xcwaT5VTVdOKGEce3jcQMi4VdX4HoSWZ0CFEiz7WD446Hgabnwdbp0ihZt7qauoe
zjw9iAtXyg+100LiKXWlt/ax+7z+QIGvJ7x5U2rTB+LPZEGA0cID7bbRFypBGq0m
zrRrm3gP25i0K8zDe1mrX4rLqmFhkaCjSfLn8pbW3SbcJdScyMjB1u45cpSCiDcG
0oWtLsEo4EisoiP7T6M0WdY6DjpA86GGaw0HUx5lbts26ZIE0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKm4ixRH+5FRMqb7w1xX4FARutZmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjBjNTIxYzQtYTVmMy0z
ODFkLTk5YTUtZjk3MGExMDgyMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPsUd/9ZVP3npgZNST1seuwygrR6bRIHGxiTOEOq0b3wD5bh50Rta5s
sHveNpd1LeEkOV8GwgwjosdwyRf5ULF6OOLdKELPwtlrumkyZz5Z74aNWgjMqRnB
3k2FS6fmUkW9hX0JT8P1SXHHXH/CxGPzDa0wJUnPdGsjwZnd/HoPEaE8PeOOt6R2
ME+OeZmLavR2H9T8P5A9SL7yB8Tt4pRvEgiJ/XkXF8qpulkFLXj+fSVMzHDN7dnY
ogFt+sX5Q8rVJIv0uGkC8joJtAi0hPPFZuFn5fin5wpFpvIeGp8rcxCWWVdO/o01
5Xlew9aWG3jksVPrWQn//cRtgl6+2CY=
-----END CERTIFICATE-----