Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e392f6b0-c647-3f4d-bb90-5129420cbf30.roa
File:                     e392f6b0-c647-3f4d-bb90-5129420cbf30.roa (raw, json)
Hash identifier:          SH/qAIyeMr3Dwui5DbqlLDJrLX2IWd9Z4OjqlBbopWA=
Subject key identifier:   78:A6:30:6E:9A:DF:BF:05:99:40:65:BC:1E:91:A5:AE:42:18:40:1C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584097DCF82EC04F36E234991100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e392f6b0-c647-3f4d-bb90-5129420cbf30.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 20 Apr 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        166.0.216.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 18 Feb 2023 04:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:97:dc:f8:2e:c0:4f:36:e2:34:99:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 20 04:00:00 2025 GMT
        Subject: CN=95e05982-c487-40bc-a0e1-e1e368ac6b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:55:28:e0:6c:52:8e:7d:5f:28:56:df:c7:
                    74:a3:56:7e:05:d5:d3:bc:e9:6c:0f:43:9d:97:c2:
                    66:96:61:6b:be:f2:d8:6b:d5:51:02:29:96:f1:11:
                    64:48:5c:ea:10:e9:25:7a:71:ec:7d:12:7e:43:6a:
                    95:f8:24:22:b6:66:71:10:3a:98:ff:f8:0b:5f:0e:
                    44:22:07:25:72:9e:e9:9c:23:6c:cf:e1:b2:fe:f0:
                    80:f1:82:d0:a5:4b:f2:5b:5c:55:fb:99:dd:43:b2:
                    ca:44:bc:09:0e:99:e5:6e:08:66:79:09:10:d9:da:
                    db:d2:1f:a3:29:31:ab:e0:4a:fc:8e:55:b9:8e:c6:
                    ad:04:24:76:89:75:2e:ba:48:e3:f2:58:d2:f4:6e:
                    2d:d5:a0:18:fd:57:63:e8:bb:df:92:ed:f3:ef:39:
                    7f:2f:21:ba:06:78:32:6d:be:34:17:4e:f6:75:00:
                    17:3d:e1:b4:3f:73:01:2d:bf:68:a3:0f:19:2d:cf:
                    e1:03:2a:43:f4:1d:ec:a0:68:ef:e0:4a:fa:62:81:
                    07:95:0d:01:01:57:2e:67:58:fd:4d:b7:7f:09:17:
                    57:b4:26:7d:01:9b:cb:d3:42:99:1f:e1:c7:46:97:
                    a5:42:8c:05:da:19:f6:61:3d:7b:0e:ce:20:fc:b4:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:30:6E:9A:DF:BF:05:99:40:65:BC:1E:91:A5:AE:42:18:40:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e392f6b0-c647-3f4d-bb90-5129420cbf30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:31:a0:e2:26:93:51:5b:3d:9e:ed:f1:0a:0a:89:1c:f0:
         49:26:56:e1:44:f5:f3:3a:09:cf:9c:1e:76:47:cb:fd:ad:4c:
         9a:5b:8d:3d:55:47:3f:24:e7:b0:b4:e6:b0:a5:a8:5c:ed:28:
         30:2e:c9:57:c8:4a:40:d7:14:6a:8c:eb:de:ad:94:b0:5a:65:
         fc:c3:05:2d:ae:5e:13:04:fa:64:29:85:50:1e:a8:a0:3d:ab:
         c6:6f:70:bf:72:74:1f:d8:f0:22:f0:65:19:53:b1:1d:27:4f:
         0d:f8:46:6b:dc:b1:51:fa:26:1e:6d:fc:cc:9d:78:a5:54:b9:
         7a:0e:21:65:86:b5:ef:13:4f:29:83:99:25:58:76:d2:31:e1:
         67:1e:39:17:94:7f:70:ca:48:17:fb:1a:86:2d:6d:17:5f:0d:
         be:87:46:33:6b:84:88:42:80:37:f8:c5:c3:b1:88:8a:9c:a1:
         4b:b1:3c:06:43:6f:fa:67:84:e9:cb:3f:6b:f4:a7:a2:2d:b8:
         86:2b:85:ff:97:e5:09:71:59:53:31:48:c2:d5:e2:6a:a2:04:
         ff:39:69:af:0f:11:4b:e9:e2:36:ac:7d:cf:79:68:8b:44:38:
         df:60:7c:39:a9:96:0a:59:fe:86:b8:9a:a0:5c:cc:c1:48:26:
         f2:13:57:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECX3PguwE824jSZEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDQyMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTVlMDU5ODItYzQ4Ny00MGJjLWEwZTEtZTFlMzY4YWM2YjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHJVKOBsUo59XyhW38d0o1Z+BdXTvOlsD0Od
l8JmlmFrvvLYa9VRAimW8RFkSFzqEOklenHsfRJ+Q2qV+CQitmZxEDqY//gLXw5E
Igclcp7pnCNsz+Gy/vCA8YLQpUvyW1xV+5ndQ7LKRLwJDpnlbghmeQkQ2drb0h+j
KTGr4Er8jlW5jsatBCR2iXUuukjj8ljS9G4t1aAY/Vdj6Lvfku3z7zl/LyG6Bngy
bb40F072dQAXPeG0P3MBLb9oow8ZLc/hAypD9B3soGjv4Er6YoEHlQ0BAVcuZ1j9
Tbd/CRdXtCZ9AZvL00KZH+HHRpelQowF2hn2YT17Ds4g/LRAfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHimMG6a378FmUBlvB6Rpa5CGEAcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTM5MmY2YjAtYzY0Ny0z
ZjRkLWJiOTAtNTEyOTQyMGNiZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3fMaDiJpNRWz2e7fEKCokc8EkmVuFE9fM6Cc+cHnZHy/2tTJpbjT1V
Rz8k57C05rClqFztKDAuyVfISkDXFGqM696tlLBaZfzDBS2uXhME+mQphVAeqKA9
q8ZvcL9ydB/Y8CLwZRlTsR0nTw34RmvcsVH6Jh5t/MydeKVUuXoOIWWGte8TTymD
mSVYdtIx4WceOReUf3DKSBf7GoYtbRdfDb6HRjNrhIhCgDf4xcOxiIqcoUuxPAZD
b/pnhOnLP2v0p6ItuIYrhf+X5QlxWVMxSMLV4mqiBP85aa8PEUvp4jasfc95aItE
ON9gfDmplgpZ/oa4mqBczMFIJvITV2w=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:32:18 2025 by rpki-client