Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3571f73-eb67-3f51-932b-722619adf987.roa
File:                     b3571f73-eb67-3f51-932b-722619adf987.roa (raw, json)
Hash identifier:          BB/0zVT/3vEF0bJ+jploIKSgY1UKx5Zoi7KSQKh8W14=
Subject key identifier:   DF:F8:63:B4:B6:B1:39:58:EB:FB:DA:E6:18:C2:81:5F:14:C1:7A:23
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583A0D87970DEFFF9F40579BCA80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3571f73-eb67-3f51-932b-722619adf987.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Fri 29 Aug 2025 04:00:00 +0000
asID:                     14717
IP address blocks:        207.156.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:0d:87:97:0d:ef:ff:9f:40:57:9b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Aug 29 04:00:00 2025 GMT
        Subject: CN=cbe5d5d0-94de-4798-8bd9-78e7df59572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:79:19:50:7e:53:ed:a8:c2:0b:7f:e7:f3:
                    c1:84:7b:22:87:fa:52:e4:de:3c:94:2d:a1:dd:86:
                    e3:80:6e:a2:fa:98:fe:79:68:2a:35:5f:98:b4:88:
                    9c:65:81:67:38:73:95:7f:74:16:ce:d9:6e:ad:25:
                    ae:d6:c0:a4:c7:0e:63:15:26:ae:5c:a6:3d:d6:98:
                    e1:09:38:8b:0b:ae:ff:81:ee:5f:5b:d2:7a:0b:08:
                    67:e6:ee:f8:ff:2c:07:d2:74:ee:bb:25:96:26:b2:
                    6f:8e:b6:8c:d8:c6:45:3c:42:b1:27:1f:81:1e:04:
                    35:60:10:2b:e9:e3:d9:6a:28:a4:6d:b1:9c:0c:61:
                    9a:61:9a:71:0b:eb:bb:7c:ac:83:a4:81:65:bf:ea:
                    47:5b:03:2b:25:b6:8d:8f:d9:58:75:62:d6:46:cf:
                    ee:e1:c0:25:fa:15:d4:17:bb:96:c6:a2:e8:8f:34:
                    e0:57:2d:ac:08:33:00:35:a7:18:f8:96:59:b8:13:
                    40:21:76:14:76:8b:77:c0:7b:e5:07:cc:89:bf:16:
                    4c:ce:12:3b:3d:ac:56:52:00:27:dd:35:8e:cf:61:
                    4f:0d:80:5b:b3:d8:0b:de:39:28:0e:04:59:a7:05:
                    cc:8e:68:15:5a:83:cd:ec:b6:5c:7a:ba:95:57:10:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:63:B4:B6:B1:39:58:EB:FB:DA:E6:18:C2:81:5F:14:C1:7A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3571f73-eb67-3f51-932b-722619adf987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.156.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:4f:42:5d:00:85:d0:7a:d0:fb:a5:b4:0a:1e:b7:aa:ff:
         a6:ce:ed:08:03:ab:98:ad:cc:e9:ee:aa:d2:0f:c3:de:1d:92:
         a2:51:27:f8:a2:74:1c:ff:29:06:65:44:99:69:33:c7:f1:8e:
         29:06:36:20:86:cf:a5:db:86:c0:1a:10:3a:ae:0a:d7:47:9e:
         37:4d:18:bf:0c:f4:c8:b9:d0:aa:93:bc:e1:c1:e6:ee:90:7f:
         fe:b2:76:42:0e:0c:fe:60:b0:d5:ed:c1:38:e6:07:01:24:28:
         86:fb:e7:3c:e9:9f:8f:fc:59:e3:ae:39:99:4a:ba:f1:94:51:
         ee:c2:0e:28:9d:9e:86:ae:28:c4:ba:9c:a9:fa:6b:e7:66:84:
         ab:7a:5e:13:a6:f0:4d:80:ec:a6:fa:dc:fa:f6:67:09:ab:4a:
         a9:ea:f3:03:91:dc:ee:8a:74:fb:c0:18:ce:3e:84:e8:61:cd:
         63:da:3f:20:96:b2:0d:90:ee:68:f9:a8:8b:e2:86:57:d4:9c:
         c7:fd:89:1c:bb:0f:ce:bf:8f:13:da:0a:2e:58:02:98:84:fa:
         e2:cf:c7:63:18:ef:27:51:23:79:d8:3b:e9:d6:8b:97:d7:84:
         de:9c:88:7b:74:66:10:89:f6:4f:aa:5a:4f:9f:55:ad:1d:0d:
         fe:03:ca:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDoNh5cN7/+fQFebyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDA0MDAwMFoXDTI1MDgyOTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2JlNWQ1ZDAtOTRkZS00Nzk4LThiZDktNzhlN2RmNTk1NzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojV5GVB+U+2owgt/5/PBhHsih/pS5N48lC2h
3YbjgG6i+pj+eWgqNV+YtIicZYFnOHOVf3QWztlurSWu1sCkxw5jFSauXKY91pjh
CTiLC67/ge5fW9J6Cwhn5u74/ywH0nTuuyWWJrJvjraM2MZFPEKxJx+BHgQ1YBAr
6ePZaiikbbGcDGGaYZpxC+u7fKyDpIFlv+pHWwMrJbaNj9lYdWLWRs/u4cAl+hXU
F7uWxqLojzTgVy2sCDMANacY+JZZuBNAIXYUdot3wHvlB8yJvxZMzhI7PaxWUgAn
3TWOz2FPDYBbs9gL3jkoDgRZpwXMjmgVWoPN7LZcerqVVxAm2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/4Y7S2sTlY6/va5hjCgV8UwXojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjM1NzFmNzMtZWI2Ny0z
ZjUxLTkzMmItNzIyNjE5YWRmOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz5zZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvAT0JdAIXQetD7pbQKHreq/6bO7QgDq5itzOnuqtIPw94dkqJRJ/ii
dBz/KQZlRJlpM8fxjikGNiCGz6XbhsAaEDquCtdHnjdNGL8M9Mi50KqTvOHB5u6Q
f/6ydkIODP5gsNXtwTjmBwEkKIb75zzpn4/8WeOuOZlKuvGUUe7CDiidnoauKMS6
nKn6a+dmhKt6XhOm8E2A7Kb63Pr2ZwmrSqnq8wOR3O6KdPvAGM4+hOhhzWPaPyCW
sg2Q7mj5qIvihlfUnMf9iRy7D86/jxPaCi5YApiE+uLPx2MY7ydRI3nYO+nWi5fX
hN6ciHt0ZhCJ9k+qWk+fVa0dDf4Dys8=
-----END CERTIFICATE-----
Generated at Tue Aug 29 18:37:19 2023 by rpki-client on console-fra.rpki-client.org