Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/706627ae-7e39-3928-bfbe-a36d4b2517cb.roa
File:                     706627ae-7e39-3928-bfbe-a36d4b2517cb.roa (raw, json)
Hash identifier:          JfLB6c4hG5Sl6OWMUWtZ5hWii82Jxbevnto4Zr+wqC0=
Subject key identifier:   15:84:FD:B1:2A:AF:52:31:ED:E9:B6:9B:3D:83:5A:AE:CE:B8:C2:8C
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F43285845A9A87966D667FC8E573A3900
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/706627ae-7e39-3928-bfbe-a36d4b2517cb.roa
Signing time:             Thu 25 Apr 2024 12:17:08 +0000
ROA not before:           Thu 25 Apr 2024 12:17:08 +0000
ROA not after:            Wed 24 Jul 2024 12:17:08 +0000
asID:                     400384
IP address blocks:        66.245.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 19:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:a8:79:66:d6:67:fc:8e:57:3a:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Apr 25 12:17:08 2024 GMT
            Not After : Jul 24 12:17:08 2024 GMT
        Subject: CN=6091b258-0e5f-4ea4-880b-53b95ee92d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:79:5a:ed:5d:9b:ed:e8:98:f3:a2:de:e8:
                    21:65:fe:bd:b7:c2:e9:de:a8:6d:31:76:e5:45:30:
                    97:9e:ce:a8:67:9a:d4:fe:7b:57:64:2e:5c:9f:21:
                    59:40:cd:10:42:ab:c0:97:88:81:31:e3:a7:6e:1a:
                    6d:7d:d5:87:3e:b7:b6:ac:b6:66:be:ae:65:bf:d1:
                    14:9f:26:f8:ff:df:3d:1d:0f:1b:3f:49:d4:af:5d:
                    25:27:19:ab:58:d7:9e:d5:20:e0:d9:fb:0f:17:78:
                    ac:e5:01:6e:df:9d:02:67:ec:62:43:3e:db:da:4a:
                    43:da:fa:f4:d9:24:f3:24:72:2f:87:be:50:ab:ae:
                    56:f2:fe:28:d3:b2:eb:03:1b:c9:a7:60:2c:fb:3a:
                    01:b5:22:2d:c2:03:40:7a:02:70:1a:e6:9f:02:6a:
                    08:27:7b:24:15:d1:f7:6d:30:04:6d:2a:b5:ef:a2:
                    0b:2e:df:b2:3c:29:02:c3:36:db:36:31:28:e8:b5:
                    3c:76:5f:8f:b1:e4:e8:32:3e:f8:02:a5:8b:c2:35:
                    dd:36:15:26:47:de:14:33:fe:a1:b6:1d:be:7c:d3:
                    18:1a:61:be:ce:1c:be:4e:f2:01:66:04:96:16:47:
                    82:fa:65:62:14:45:d0:ea:55:65:29:f9:fc:0d:a4:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:FD:B1:2A:AF:52:31:ED:E9:B6:9B:3D:83:5A:AE:CE:B8:C2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/706627ae-7e39-3928-bfbe-a36d4b2517cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:d7:9c:8c:65:14:52:48:36:82:e1:9e:10:d4:a6:86:c8:
         4b:5b:4d:b4:9b:f2:42:19:ee:14:1d:60:fe:5b:d9:80:22:51:
         4f:f1:8f:04:93:29:0f:ea:ee:bf:bc:50:a1:89:fc:74:3c:79:
         bf:12:2c:77:6c:c7:fc:bc:e1:d5:e7:a6:1e:89:64:b9:d7:67:
         70:b0:52:0f:9e:4e:be:94:06:fd:f5:87:0f:c6:73:5c:1e:d2:
         33:4f:15:73:7b:20:bc:1e:a5:e7:6e:70:0d:12:f6:3b:f5:60:
         7f:12:f5:7e:d5:6c:d7:54:00:7a:8b:61:56:9a:d7:c6:e7:07:
         e7:84:4a:b7:77:1d:bd:e2:f9:2b:1f:c5:b1:c1:b2:33:16:f1:
         c6:c0:a4:a7:a6:97:92:69:2a:61:1b:d5:8d:cc:a5:6c:62:59:
         56:8d:8d:58:fb:13:16:e5:a1:56:71:f9:a5:0a:8b:c3:10:74:
         cc:8f:6f:05:48:2c:b7:cd:a9:47:6e:79:af:fd:e7:47:88:3c:
         92:3b:6f:90:d3:ff:a8:bc:b0:13:56:c3:3e:d1:cc:88:ba:9c:
         63:b1:be:cd:aa:11:cc:48:e4:a1:14:3e:92:17:27:cc:50:4f:
         c2:bd:15:ec:89:8d:bc:df:5e:2b:95:63:c5:e6:9d:0c:75:68:
         4e:3c:10:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpqHlm1mf8jlc6OQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTI0MDQyNTEyMTcwOFoXDTI0MDcyNDEyMTcwOFowLzEtMCsGA1UEAxMk
NjA5MWIyNTgtMGU1Zi00ZWE0LTg4MGItNTNiOTVlZTkyZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwh5Wu1dm+3omPOi3ughZf69t8Lp3qhtMXbl
RTCXns6oZ5rU/ntXZC5cnyFZQM0QQqvAl4iBMeOnbhptfdWHPre2rLZmvq5lv9EU
nyb4/989HQ8bP0nUr10lJxmrWNee1SDg2fsPF3is5QFu350CZ+xiQz7b2kpD2vr0
2STzJHIvh75Qq65W8v4o07LrAxvJp2As+zoBtSItwgNAegJwGuafAmoIJ3skFdH3
bTAEbSq176ILLt+yPCkCwzbbNjEo6LU8dl+PseToMj74AqWLwjXdNhUmR94UM/6h
th2+fNMYGmG+zhy+TvIBZgSWFkeC+mViFEXQ6lVlKfn8DaTaswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWE/bEqr1Ix7em2mz2DWq7OuMKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvNzA2NjI3YWUtN2UzOS0z
OTI4LWJmYmUtYTM2ZDRiMjUxN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACe915yMZRRSSDaC4Z4Q1KaGyEtbTbSb8kIZ7hQdYP5b2YAiUU/xjwST
KQ/q7r+8UKGJ/HQ8eb8SLHdsx/y84dXnph6JZLnXZ3CwUg+eTr6UBv31hw/Gc1we
0jNPFXN7ILwepeducA0S9jv1YH8S9X7VbNdUAHqLYVaa18bnB+eESrd3Hb3i+Ssf
xbHBsjMW8cbApKeml5JpKmEb1Y3MpWxiWVaNjVj7ExbloVZx+aUKi8MQdMyPbwVI
LLfNqUduea/950eIPJI7b5DT/6i8sBNWwz7RzIi6nGOxvs2qEcxI5KEUPpIXJ8xQ
T8K9FeyJjbzfXiuVY8XmnQx1aE48EAk=
-----END CERTIFICATE-----