Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/f5dd58cc-7425-3a83-a58b-b944a6d08a5c.roa
File:                     f5dd58cc-7425-3a83-a58b-b944a6d08a5c.roa (raw, json)
Hash identifier:          WfsJuxs35q0i2aoS8D87Cr4hF3aH+sjAK0erLJU9/nE=
Subject key identifier:   E2:BD:57:90:40:78:52:09:FB:2C:CF:CE:1B:1F:CD:3C:7C:AE:5F:1E
Certificate issuer:       /CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
Certificate serial:       010D0C9F43285845883DE086F6090E425C47B02E
Authority key identifier: BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/f5dd58cc-7425-3a83-a58b-b944a6d08a5c.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     36083
IP address blocks:        23.138.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 18:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e0:86:f6:09:0e:42:5c:47:b0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=cbbcc13e-fbcc-4e34-b687-0545aed6c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:04:32:c5:79:4d:c6:4b:d2:c4:bb:8d:c1:
                    8c:6e:75:90:ae:e7:92:ef:2b:2c:f1:63:10:e6:3d:
                    c5:e2:b9:0b:3d:24:78:9e:6d:e0:b7:d9:67:78:51:
                    c8:05:f9:88:d2:66:a0:96:03:25:b0:4a:49:f9:f9:
                    16:49:96:4d:b4:eb:3b:14:28:1c:aa:05:cb:11:5f:
                    8e:59:ec:da:48:b6:43:a9:85:4e:b0:00:f9:dc:62:
                    17:a4:be:f9:73:fd:ca:1f:b7:66:99:41:34:7c:47:
                    45:e0:42:fa:4f:ef:7d:07:15:6a:9c:36:0e:71:7e:
                    07:61:9d:e7:b0:53:12:a9:7c:91:a3:67:3c:d7:e0:
                    ca:b6:2a:85:e9:be:3f:78:11:2c:71:d9:46:ea:55:
                    1c:56:0b:b6:7b:c4:a0:04:59:85:c0:52:af:07:04:
                    65:ec:35:76:e1:5e:93:d8:d5:16:7f:a3:a5:36:55:
                    14:c0:c7:2c:9f:69:39:46:a4:af:9d:a1:58:8c:8b:
                    80:fa:80:8d:d5:c9:f8:fb:db:d6:f2:7b:02:b9:81:
                    91:50:ff:2f:ec:c8:c0:d7:9d:e2:df:ff:72:b2:7c:
                    72:c0:79:f6:9f:87:67:4a:88:b6:67:33:d7:bf:74:
                    2c:47:1c:2f:4f:30:02:80:8f:8b:67:e0:ed:77:a3:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:57:90:40:78:52:09:FB:2C:CF:CE:1B:1F:CD:3C:7C:AE:5F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/f5dd58cc-7425-3a83-a58b-b944a6d08a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.crl

            X509v3 Authority Key Identifier:
                keyid:BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c9:6b:39:65:b3:9f:d3:6f:9e:08:2b:e8:65:69:f9:ca:50:
         00:ca:ab:b4:24:2c:97:bf:5f:b3:5d:c4:a4:55:55:c8:65:e4:
         94:ae:db:6d:fe:0f:9f:72:56:da:5e:dd:3a:44:e2:ca:d2:33:
         0b:45:1c:a4:4c:1d:2e:40:e1:d4:8b:25:44:4d:65:4c:2f:2f:
         ab:fb:90:20:bd:44:73:3b:e1:1d:23:f9:48:e0:24:cd:d2:dc:
         48:0c:ab:f7:9c:ab:63:91:df:50:91:93:90:8d:33:78:76:70:
         b3:99:44:a1:be:32:cb:18:04:f6:0b:14:0b:7b:56:f9:a2:d2:
         31:12:17:19:74:ae:d1:1e:6a:fe:42:9a:da:33:9e:d0:94:a8:
         e3:e0:c1:5d:5b:52:2a:27:08:19:54:fe:19:76:c1:36:7d:de:
         fd:dd:6f:90:76:d0:6b:82:8a:2f:ca:c1:52:bd:cc:f7:cf:d8:
         33:7c:50:84:09:9c:70:aa:0d:f1:e9:30:aa:db:5c:12:70:cc:
         d6:0e:d2:b2:98:2c:54:54:dd:1b:22:04:06:e4:e5:ad:c0:e4:
         c2:f9:59:b6:d0:2e:72:f7:a2:98:c6:cb:5a:17:8a:cb:38:7f:
         4f:d3:ac:6b:d2:99:5a:a4:69:7d:24:29:19:c3:13:6c:aa:d5:
         5d:f2:61:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPeCG9gkOQlxHsC4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQwMTE2OWYtYzFjZC00OTYwLWEzZTgtOGQ5YWY1NDNj
YzBhMB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk
Y2JiY2MxM2UtZmJjYy00ZTM0LWI2ODctMDU0NWFlZDZjNjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0EMsV5TcZL0sS7jcGMbnWQrueS7yss8WMQ
5j3F4rkLPSR4nm3gt9lneFHIBfmI0maglgMlsEpJ+fkWSZZNtOs7FCgcqgXLEV+O
WezaSLZDqYVOsAD53GIXpL75c/3KH7dmmUE0fEdF4EL6T+99BxVqnDYOcX4HYZ3n
sFMSqXyRo2c81+DKtiqF6b4/eBEscdlG6lUcVgu2e8SgBFmFwFKvBwRl7DV24V6T
2NUWf6OlNlUUwMcsn2k5RqSvnaFYjIuA+oCN1cn4+9vW8nsCuYGRUP8v7MjA153i
3/9ysnxywHn2n4dnSoi2ZzPXv3QsRxwvTzACgI+LZ+Dtd6O+KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOK9V5BAeFIJ+yzPzhsfzTx8rl8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NDAx
MTY5Zi1jMWNkLTQ5NjAtYTNlOC04ZDlhZjU0M2NjMGEvZjVkZDU4Y2MtNzQyNS0z
YTgzLWE1OGItYjk0NGE2ZDA4YTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzQwMTE2OWYtYzFjZC00OTYwLWEz
ZTgtOGQ5YWY1NDNjYzBhLzc0MDExNjlmLWMxY2QtNDk2MC1hM2U4LThkOWFmNTQz
Y2MwYS5jcmwwHwYDVR0jBBgwFoAUvgx10MhN+Tg87zXGYNKT1HRRHhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NDAxMTY5Zi1jMWNkLTQ5NjAtYTNlOC04ZDlh
ZjU0M2NjMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPJazlls5/Tb54IK+hlafnKUADKq7QkLJe/X7NdxKRVVchl5JSu223+
D59yVtpe3TpE4srSMwtFHKRMHS5A4dSLJURNZUwvL6v7kCC9RHM74R0j+UjgJM3S
3EgMq/ecq2OR31CRk5CNM3h2cLOZRKG+MssYBPYLFAt7Vvmi0jESFxl0rtEeav5C
mtozntCUqOPgwV1bUionCBlU/hl2wTZ93v3db5B20GuCii/KwVK9zPfP2DN8UIQJ
nHCqDfHpMKrbXBJwzNYO0rKYLFRU3RsiBAbk5a3A5ML5WbbQLnL3opjGy1oXiss4
f0/TrGvSmVqkaX0kKRnDE2yq1V3yYdw=
-----END CERTIFICATE-----
Generated at Sat Apr 27 20:43:04 2024 by rpki-client on console-ams.rpki-client.org