Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a6b6d3f-8143-3d88-b97c-09532e52fdee.roa
File:                     4a6b6d3f-8143-3d88-b97c-09532e52fdee.roa (raw, json)
Hash identifier:          mxJtdPfMqg6se0bxBMBcoW36gVoXzsZq6MSH5Qtu+4A=
Subject key identifier:   74:70:3C:66:8B:EE:07:03:9B:2C:3D:3C:94:C7:C2:2A:93:B7:1D:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584550772B526EDC2D2CE32305C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a6b6d3f-8143-3d88-b97c-09532e52fdee.roa
Signing time:             Sun 24 Mar 2024 13:30:51 +0000
ROA not before:           Sun 24 Mar 2024 13:30:51 +0000
ROA not after:            Sat 22 Jun 2024 13:30:51 +0000
asID:                     137329
IP address blocks:        2001:470:2c7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:77:2b:52:6e:dc:2d:2c:e3:23:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 24 13:30:51 2024 GMT
            Not After : Jun 22 13:30:51 2024 GMT
        Subject: CN=2cf5f9ec-34c6-4c18-9aca-d38457b4e46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:47:65:51:aa:ea:b9:55:25:8f:41:2b:fa:
                    7d:b8:c5:5d:c9:bd:01:e5:67:96:35:da:2d:d8:af:
                    44:a7:f5:9a:05:14:15:72:e7:57:a9:f0:01:ab:2d:
                    34:30:1c:4e:1a:35:24:93:40:20:a7:b7:f3:c9:2a:
                    28:03:7e:f7:f4:48:df:8e:ed:0a:44:49:52:0a:09:
                    ba:41:1f:1f:36:16:97:c8:f8:31:c1:37:14:28:b1:
                    56:3a:30:b9:9a:3c:7f:8a:e6:87:46:02:7a:39:bd:
                    e7:7a:49:34:c6:68:87:e4:2b:2e:35:e2:00:17:38:
                    f4:ed:f3:67:66:e1:49:9f:61:6b:66:0a:b7:c4:f8:
                    29:bd:07:b9:10:e9:ad:09:13:94:c8:eb:ef:d5:8f:
                    8f:57:b0:2c:97:8f:9c:f9:22:83:5b:70:29:cb:f4:
                    ea:c5:68:f7:b1:39:56:26:80:d9:48:ef:f7:05:d1:
                    06:4d:e9:e7:52:4d:20:67:45:45:04:e5:f0:d3:06:
                    b0:d3:32:91:b3:e5:82:31:78:b9:a3:a0:53:2b:f7:
                    70:20:4f:67:e0:08:0d:e9:24:66:98:41:08:ba:34:
                    f7:9c:50:2b:35:c2:cf:08:69:aa:98:f9:e2:08:23:
                    5e:2e:04:e5:1b:06:de:8a:85:44:2f:20:be:09:3d:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:3C:66:8B:EE:07:03:9B:2C:3D:3C:94:C7:C2:2A:93:B7:1D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a6b6d3f-8143-3d88-b97c-09532e52fdee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:b0:b5:37:8a:20:55:01:06:f4:e5:2a:dc:9b:3e:3b:62:
         a4:3d:ca:0a:fc:a4:6e:97:a6:94:0c:d9:44:eb:a1:8f:78:e5:
         84:77:4e:a9:ff:ed:43:d5:0e:f2:d9:b2:e7:7b:05:d6:82:e6:
         49:1f:cd:b0:60:bb:02:7b:94:2c:61:84:8e:09:a7:05:6a:cb:
         42:a0:46:37:96:13:b1:47:4a:a4:7c:12:20:61:d3:20:a1:6a:
         ea:e9:59:d0:8a:70:9c:71:1b:cf:ff:11:bc:b8:21:a2:df:ad:
         40:09:2e:90:24:e7:41:4e:7f:5c:96:1f:49:4f:41:f7:26:63:
         29:da:34:ab:a5:42:c8:8d:a1:bc:fa:8a:72:da:22:84:02:72:
         a8:98:27:4f:d1:f0:30:ed:b9:e2:a3:dc:5f:ef:4b:6e:e6:2b:
         ff:45:2f:23:07:dc:43:94:1f:2e:a1:5f:8c:1c:bc:42:e6:7f:
         42:0d:e1:d5:54:6a:bd:46:35:c1:df:40:47:44:c2:b1:a3:91:
         cd:14:5f:6d:89:a6:b1:f3:6f:f1:86:d9:c0:dd:f7:8b:74:bd:
         59:68:ee:90:f2:d4:8a:e8:b4:e6:77:de:8b:cd:5f:b5:bc:50:
         78:71:45:69:37:56:c0:80:65:f3:76:74:3c:19:0c:44:62:97:
         5f:5d:b2:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVQdytSbtwtLOMjBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMyNDEzMzA1MVoXDTI0MDYyMjEzMzA1MVowLzEtMCsGA1UEAxMk
MmNmNWY5ZWMtMzRjNi00YzE4LTlhY2EtZDM4NDU3YjRlNDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU9HZVGq6rlVJY9BK/p9uMVdyb0B5WeWNdot
2K9Ep/WaBRQVcudXqfABqy00MBxOGjUkk0Agp7fzySooA3739Ejfju0KRElSCgm6
QR8fNhaXyPgxwTcUKLFWOjC5mjx/iuaHRgJ6Ob3nekk0xmiH5CsuNeIAFzj07fNn
ZuFJn2FrZgq3xPgpvQe5EOmtCROUyOvv1Y+PV7Asl4+c+SKDW3Apy/TqxWj3sTlW
JoDZSO/3BdEGTennUk0gZ0VFBOXw0waw0zKRs+WCMXi5o6BTK/dwIE9n4AgN6SRm
mEEIujT3nFArNcLPCGmqmPniCCNeLgTlGwbeioVELyC+CT3uwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHRwPGaL7gcDmyw9PJTHwiqTtx2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE2YjZkM2YtODE0My0z
ZDg4LWI5N2MtMDk1MzJlNTJmZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACQOsLU3iiBVAQb05Srcmz47YqQ9ygr8pG6XppQM2UTroY945YR3
Tqn/7UPVDvLZsud7BdaC5kkfzbBguwJ7lCxhhI4JpwVqy0KgRjeWE7FHSqR8EiBh
0yChaurpWdCKcJxxG8//Eby4IaLfrUAJLpAk50FOf1yWH0lPQfcmYynaNKulQsiN
obz6inLaIoQCcqiYJ0/R8DDtueKj3F/vS27mK/9FLyMH3EOUHy6hX4wcvELmf0IN
4dVUar1GNcHfQEdEwrGjkc0UX22JprHzb/GG2cDd94t0vVlo7pDy1IrotOZ33ovN
X7W8UHhxRWk3VsCAZfN2dDwZDERil19dsig=
-----END CERTIFICATE-----
Generated at Thu Mar 28 21:42:03 2024 by rpki-client on console-fra.rpki-client.org