Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa
File:                     0c77060b-9c3f-309e-8fd2-ec9327952200.roa (raw, json)
Hash identifier:          SqYojCnX9sZxhuR88KIJz8Jbb3qL59cv1C0DggTT0a8=
Subject key identifier:   15:A1:E9:B0:3A:22:82:15:3B:5A:A8:DE:F4:1F:B1:D8:7F:8B:D7:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584875F05D7D5DE7534FF78BC100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa
Signing time:             Tue 07 Jan 2025 02:00:39 +0000
ROA not before:           Tue 07 Jan 2025 02:00:39 +0000
ROA not after:            Mon 07 Apr 2025 01:00:39 +0000
asID:                     152672
IP address blocks:        23.26.98.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 28 Jan 2025 00:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:f0:5d:7d:5d:e7:53:4f:f7:8b:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  7 02:00:39 2025 GMT
            Not After : Apr  7 01:00:39 2025 GMT
        Subject: CN=230b0a64-616d-4a61-ae9d-b17790252c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:ae:be:82:18:b7:bd:d1:5c:17:f6:f1:c8:
                    f2:e8:0f:4e:ce:a8:ff:38:5b:df:be:69:37:8a:b4:
                    f5:fd:79:7c:5d:b0:fe:3d:79:d8:52:d3:16:b4:e2:
                    bb:b8:32:5f:48:ca:9f:b7:86:ea:19:1f:04:8d:69:
                    c1:0d:54:6f:46:36:91:f8:17:f7:4b:4a:b1:3b:17:
                    ba:75:3a:aa:51:9c:78:1e:57:d4:1a:e4:7a:1a:7b:
                    00:22:7f:65:9d:8d:40:fe:1c:60:0a:7d:6b:eb:5b:
                    b7:2e:39:47:20:81:2f:b4:eb:dc:bb:42:2b:ee:df:
                    9d:95:ad:90:6e:75:ca:44:df:2c:36:fd:25:30:26:
                    ec:28:be:54:e6:a6:ae:75:13:a7:d6:a7:83:9c:37:
                    0f:7f:62:74:3f:3b:66:86:be:0b:a2:15:bc:99:47:
                    f6:6d:9b:25:90:c4:99:59:5c:38:e2:f5:93:62:7f:
                    1a:30:8f:46:dd:48:6a:49:94:7a:22:d0:77:34:4e:
                    ee:32:fd:21:39:8e:6f:5e:f8:a3:e4:72:62:6e:c6:
                    d9:93:11:9c:34:ba:38:56:ea:38:07:36:de:04:e2:
                    2d:95:2b:10:0c:63:af:91:04:de:0f:89:52:13:27:
                    c3:d5:44:3b:fc:cc:38:5f:de:6c:bf:50:3f:ad:f2:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A1:E9:B0:3A:22:82:15:3B:5A:A8:DE:F4:1F:B1:D8:7F:8B:D7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:28:61:3c:7f:69:55:f4:fc:e5:a5:b6:b7:21:33:4d:f3:
         4f:f2:c8:05:1a:12:6c:50:dc:17:fb:02:7c:62:d1:da:ea:ba:
         9b:aa:86:a8:fe:8c:d0:7c:6b:79:4a:04:69:0a:be:c5:07:00:
         3e:76:50:3c:26:30:e0:56:22:e9:05:be:8f:af:40:ce:71:47:
         8f:16:e5:9d:c9:e1:80:e2:92:51:02:07:03:d8:bd:2c:a1:b2:
         31:c4:5a:9d:51:14:8a:ee:1d:79:39:ef:42:27:7f:89:c1:66:
         3e:ef:82:a3:13:0d:65:29:44:96:2c:ba:0c:f6:04:7e:e4:b8:
         e5:54:a3:a8:13:0e:43:6d:9c:e1:b8:d3:67:09:7f:fe:8b:d3:
         a9:04:63:35:55:a4:d4:92:3d:51:7b:9e:b3:05:1f:50:f9:a4:
         41:06:a7:de:70:00:f1:08:de:b9:c7:81:74:3b:1c:3a:f9:b1:
         8c:3c:9f:ec:60:32:85:e2:ff:5c:7a:3b:08:b1:4b:71:ef:7f:
         83:75:ae:63:73:67:d5:cd:cc:19:b7:35:19:1d:24:71:98:cc:
         ab:a3:c4:3c:8c:55:c5:22:16:7b:9d:86:22:93:6c:5e:97:3c:
         5e:37:76:69:33:5a:c7:01:09:3d:5f:bb:38:6e:2a:d3:90:d8:
         8f:46:2e:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18F19XedTT/eLwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MjMwYjBhNjQtNjE2ZC00YTYxLWFlOWQtYjE3NzkwMjUyYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCuvoIYt73RXBf28cjy6A9Ozqj/OFvfvmk3
irT1/Xl8XbD+PXnYUtMWtOK7uDJfSMqft4bqGR8EjWnBDVRvRjaR+Bf3S0qxOxe6
dTqqUZx4HlfUGuR6GnsAIn9lnY1A/hxgCn1r61u3LjlHIIEvtOvcu0Ir7t+dla2Q
bnXKRN8sNv0lMCbsKL5U5qaudROn1qeDnDcPf2J0Pztmhr4LohW8mUf2bZslkMSZ
WVw44vWTYn8aMI9G3UhqSZR6ItB3NE7uMv0hOY5vXvij5HJibsbZkxGcNLo4Vuo4
BzbeBOItlSsQDGOvkQTeD4lSEyfD1UQ7/Mw4X95sv1A/rfKVJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWh6bA6IoIVO1qo3vQfsdh/i9dGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGM3NzA2MGItOWMzZi0z
MDllLThmZDItZWM5MzI3OTUyMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZxKGE8f2lV9Pzlpba3ITNN80/yyAUaEmxQ3Bf7Anxi0drqupuqhqj+
jNB8a3lKBGkKvsUHAD52UDwmMOBWIukFvo+vQM5xR48W5Z3J4YDiklECBwPYvSyh
sjHEWp1RFIruHXk570Inf4nBZj7vgqMTDWUpRJYsugz2BH7kuOVUo6gTDkNtnOG4
02cJf/6L06kEYzVVpNSSPVF7nrMFH1D5pEEGp95wAPEI3rnHgXQ7HDr5sYw8n+xg
MoXi/1x6OwixS3Hvf4N1rmNzZ9XNzBm3NRkdJHGYzKujxDyMVcUiFnudhiKTbF6X
PF43dmkzWscBCT1fuzhuKtOQ2I9GLq4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:05 2025 by rpki-client