Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d606cf4b-1e1e-33f1-adf7-76a04b767d04.roa
File:                     d606cf4b-1e1e-33f1-adf7-76a04b767d04.roa (raw, json)
Hash identifier:          fiuI3a/3JuAogwlBptbeAfS6XDjxx+M424uPAWUyTY4=
Subject key identifier:   EC:B1:2C:5F:36:E1:33:EA:5E:9F:62:F4:3E:17:64:29:3F:89:E2:AA
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858474585ECC00451180DA8200040
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d606cf4b-1e1e-33f1-adf7-76a04b767d04.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     14315
IP address blocks:        72.14.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 15:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ec:c0:04:51:18:0d:a8:20:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=0d53392a-de27-44d5-988b-c72ed24be4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:72:13:ea:32:d3:3b:24:32:d4:9e:72:6b:
                    bc:0d:37:3d:87:d9:37:49:06:dd:81:6a:ce:12:69:
                    74:4a:b0:86:aa:5b:a7:13:d8:bd:8f:e0:51:bb:42:
                    62:34:1f:f0:91:61:d2:b8:89:38:a2:cc:ca:53:96:
                    cc:89:d7:ee:02:5f:74:b9:ec:77:89:bc:65:bf:d0:
                    a7:e0:48:87:2a:6b:78:5b:d6:0b:e4:55:aa:0c:ab:
                    f0:2c:30:0c:e2:53:91:38:73:b1:0e:0f:19:32:7a:
                    bb:cc:b2:46:94:45:4b:a3:28:72:30:06:19:a0:27:
                    77:72:04:35:d6:5e:62:c1:f9:82:61:e5:12:6f:53:
                    3a:1a:d0:87:3f:58:1b:c8:a1:b8:42:05:90:bf:e6:
                    96:4a:4c:60:5a:3e:c1:e9:c8:87:9e:1a:ed:b7:a7:
                    16:68:8b:73:55:e0:41:67:bc:8c:d5:67:2f:26:90:
                    7d:93:26:f8:e0:2d:ef:20:ff:b1:87:4c:44:7a:46:
                    e0:b0:f0:92:37:d4:e3:f2:14:c5:74:0c:b9:30:d3:
                    f3:af:8d:2f:b2:bc:26:90:ad:5b:0b:cd:ce:1d:5e:
                    35:cd:12:2c:3d:8d:4c:7b:83:dd:8b:15:80:29:ec:
                    1f:c0:b7:44:15:39:d4:ed:a3:0b:5b:11:ab:e2:bf:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:2C:5F:36:E1:33:EA:5E:9F:62:F4:3E:17:64:29:3F:89:E2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d606cf4b-1e1e-33f1-adf7-76a04b767d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:e0:19:d5:e2:d3:1d:7f:44:5f:1a:55:8c:35:20:d0:e3:
         ab:9f:fc:db:5a:e2:b3:fc:cc:bb:3a:7d:b1:94:34:1a:fd:26:
         fe:f5:bd:45:7d:d9:5e:22:c8:dd:65:6b:92:c2:bf:d5:43:4e:
         f5:6d:fe:c4:79:7f:d2:a7:00:45:2d:a6:32:f5:48:4a:da:e6:
         07:c4:1d:f9:5d:6e:48:64:38:ad:e7:65:ef:d1:3b:1f:b6:cd:
         01:bb:36:66:cf:01:79:90:cd:0f:c0:18:c5:ff:b4:8a:8d:b9:
         2e:96:55:99:fd:77:db:7f:28:d8:d7:5b:fd:41:b4:c1:9f:45:
         fc:70:97:86:88:87:52:42:f2:eb:ec:32:91:a3:90:70:b3:7a:
         95:32:d2:24:38:9a:08:96:e6:b0:3a:28:ff:7f:c1:5a:9b:db:
         0e:fc:98:e1:a2:89:81:ef:1d:19:5f:10:07:36:a2:50:9b:0c:
         f2:71:0f:c0:90:71:67:80:df:78:76:dc:e8:28:55:cf:55:93:
         53:48:38:38:51:5c:f1:5b:48:14:c1:71:7c:81:13:88:6e:b6:
         96:06:b9:54:95:fc:41:67:46:69:99:24:e4:c4:59:0b:e1:04:
         7f:d6:f7:ec:05:5f:b0:cd:a9:4a:68:25:dd:e2:b2:3f:ed:c2:
         e7:3c:3e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhezABFEYDaggAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk
MGQ1MzM5MmEtZGUyNy00NGQ1LTk4OGItYzcyZWQyNGJlNGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4xyE+oy0zskMtSecmu8DTc9h9k3SQbdgWrO
Eml0SrCGqlunE9i9j+BRu0JiNB/wkWHSuIk4oszKU5bMidfuAl90uex3ibxlv9Cn
4EiHKmt4W9YL5FWqDKvwLDAM4lOROHOxDg8ZMnq7zLJGlEVLoyhyMAYZoCd3cgQ1
1l5iwfmCYeUSb1M6GtCHP1gbyKG4QgWQv+aWSkxgWj7B6ciHnhrtt6cWaItzVeBB
Z7yM1WcvJpB9kyb44C3vIP+xh0xEekbgsPCSN9Tj8hTFdAy5MNPzr40vsrwmkK1b
C83OHV41zRIsPY1Me4PdixWAKewfwLdEFTnU7aMLWxGr4r8H2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyxLF824TPqXp9i9D4XZCk/ieKqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZDYwNmNmNGItMWUxZS0z
M2YxLWFkZjctNzZhMDRiNzY3ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrv4BnV4tMdf0RfGlWMNSDQ46uf/Nta4rP8zLs6fbGUNBr9Jv71vUV9
2V4iyN1la5LCv9VDTvVt/sR5f9KnAEUtpjL1SEra5gfEHfldbkhkOK3nZe/ROx+2
zQG7NmbPAXmQzQ/AGMX/tIqNuS6WVZn9d9t/KNjXW/1BtMGfRfxwl4aIh1JC8uvs
MpGjkHCzepUy0iQ4mgiW5rA6KP9/wVqb2w78mOGiiYHvHRlfEAc2olCbDPJxD8CQ
cWeA33h23OgoVc9Vk1NIODhRXPFbSBTBcXyBE4hutpYGuVSV/EFnRmmZJOTEWQvh
BH/W9+wFX7DNqUpoJd3isj/twuc8PgU=
-----END CERTIFICATE-----