Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5036db49-b68a-3300-afe6-b3ad2b7cc700.roa
File:                     5036db49-b68a-3300-afe6-b3ad2b7cc700.roa (raw, json)
Hash identifier:          pRa0LakrL7aROfhhAskEbIGIL6V6bhSpc6MXNZ+yxT4=
Subject key identifier:   81:EF:CC:A3:3A:F9:8E:54:FB:A1:AC:40:60:C8:4F:B1:C9:27:0D:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848DC488CA874F8344D45B8F600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5036db49-b68a-3300-afe6-b3ad2b7cc700.roa
Signing time:             Wed 12 Feb 2025 17:50:54 +0000
ROA not before:           Wed 12 Feb 2025 17:50:54 +0000
ROA not after:            Tue 13 May 2025 16:50:54 +0000
asID:                     834
IP address blocks:        166.0.241.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 20:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dc:48:8c:a8:74:f8:34:4d:45:b8:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 12 17:50:54 2025 GMT
            Not After : May 13 16:50:54 2025 GMT
        Subject: CN=302a4a3b-ca67-4c80-8d59-8a24499d98b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:4e:ef:58:9f:cc:12:18:4e:88:01:c2:b9:
                    ae:fa:56:82:fc:b0:be:18:0e:a3:e0:26:59:5a:6e:
                    41:7f:49:52:21:c9:8b:8f:cf:54:de:63:92:79:05:
                    5d:55:1a:1d:1f:f0:fc:78:2f:3f:7d:47:da:d9:db:
                    86:07:11:f2:bc:46:d8:17:aa:57:0b:84:70:68:bb:
                    39:71:f2:b1:9d:6b:e4:28:ce:4a:4c:8e:df:2b:01:
                    72:0f:bc:c0:67:d6:a7:bf:44:d4:d6:37:d1:fb:8e:
                    71:46:cc:ba:97:23:6b:36:24:07:c6:69:8c:a8:62:
                    b8:fc:48:b7:f1:31:ed:2c:f0:cc:ac:09:d2:48:c2:
                    01:82:75:2c:25:4d:44:1f:61:bf:34:9e:e7:f0:81:
                    48:1e:b6:e4:2f:3d:e7:6d:7e:19:55:b0:96:72:96:
                    4d:85:4e:77:4c:96:95:66:e4:c5:8f:99:c9:47:b5:
                    99:ad:72:a5:b2:a9:c1:6d:99:df:57:26:b9:8d:6b:
                    0e:15:57:69:5b:54:bb:59:66:60:a6:c8:23:62:26:
                    31:56:7d:a0:b9:a6:fa:c1:32:21:36:76:30:da:ba:
                    0a:47:e0:88:fb:56:50:4b:d4:1a:ba:58:ab:6c:49:
                    32:0a:4f:1e:fb:28:7b:df:e0:3b:91:4d:4f:81:fa:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:CC:A3:3A:F9:8E:54:FB:A1:AC:40:60:C8:4F:B1:C9:27:0D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5036db49-b68a-3300-afe6-b3ad2b7cc700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:07:94:93:4c:dd:13:97:2f:75:ff:a0:8d:41:06:2c:5f:
         89:1f:87:7e:0e:6a:7f:d8:c7:fd:87:27:1e:f0:29:81:a6:64:
         90:49:f0:f5:58:8d:68:7d:6a:d1:13:56:7b:e1:1b:b3:75:50:
         89:10:79:5e:71:e5:51:9f:94:2b:59:4f:66:86:83:f4:55:6d:
         48:ed:69:e5:71:4a:0b:c3:ea:82:63:3c:d5:04:e7:4c:a0:55:
         75:8f:14:21:4a:f1:76:b1:11:2d:94:02:49:ed:72:8b:a2:87:
         e6:83:f1:99:41:1d:d7:b9:63:f1:2a:d9:7f:7f:5a:59:94:23:
         81:43:51:9b:8e:94:98:28:82:fd:d2:49:f4:f9:53:87:82:12:
         1a:74:47:47:f4:fc:83:f1:bd:a9:d9:9a:73:a9:cf:59:0e:2f:
         13:16:47:fb:2b:d7:f7:90:ea:00:fd:b9:5e:ab:08:2e:17:e6:
         e3:18:f2:c3:7c:e5:85:8c:1a:79:fd:2d:bb:e3:63:ea:24:1e:
         cf:96:7a:12:49:96:c5:da:59:36:9c:af:2a:6c:e3:81:8d:9c:
         19:1f:3f:d6:96:96:cb:70:5a:94:65:47:e4:ae:73:35:ec:f7:
         e0:ce:5f:73:6c:51:6d:f6:e6:dd:94:14:89:05:28:ea:89:d4:
         5c:8a:c4:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcSIyodPg0TUW49gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxMjE3NTA1NFoXDTI1MDUxMzE2NTA1NFowLzEtMCsGA1UEAxMk
MzAyYTRhM2ItY2E2Ny00YzgwLThkNTktOGEyNDQ5OWQ5OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bZO71ifzBIYTogBwrmu+laC/LC+GA6j4CZZ
Wm5Bf0lSIcmLj89U3mOSeQVdVRodH/D8eC8/fUfa2duGBxHyvEbYF6pXC4RwaLs5
cfKxnWvkKM5KTI7fKwFyD7zAZ9anv0TU1jfR+45xRsy6lyNrNiQHxmmMqGK4/Ei3
8THtLPDMrAnSSMIBgnUsJU1EH2G/NJ7n8IFIHrbkLz3nbX4ZVbCWcpZNhU53TJaV
ZuTFj5nJR7WZrXKlsqnBbZnfVya5jWsOFVdpW1S7WWZgpsgjYiYxVn2guab6wTIh
NnYw2roKR+CI+1ZQS9QaulirbEkyCk8e+yh73+A7kU1PgfqcqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHvzKM6+Y5U+6GsQGDIT7HJJw2ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTAzNmRiNDktYjY4YS0z
MzAwLWFmZTYtYjNhZDJiN2NjNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+gB5STTN0Tly91/6CNQQYsX4kfh34Oan/Yx/2HJx7wKYGmZJBJ8PVY
jWh9atETVnvhG7N1UIkQeV5x5VGflCtZT2aGg/RVbUjtaeVxSgvD6oJjPNUE50yg
VXWPFCFK8XaxES2UAkntcouih+aD8ZlBHde5Y/Eq2X9/WlmUI4FDUZuOlJgogv3S
SfT5U4eCEhp0R0f0/IPxvanZmnOpz1kOLxMWR/sr1/eQ6gD9uV6rCC4X5uMY8sN8
5YWMGnn9LbvjY+okHs+WehJJlsXaWTacryps44GNnBkfP9aWlstwWpRlR+SuczXs
9+DOX3NsUW325t2UFIkFKOqJ1FyKxKY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:38:05 2025 by rpki-client