Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6eb9941b-cdba-3fc9-a123-ccb9b0c2b6cd.roa
File:                     6eb9941b-cdba-3fc9-a123-ccb9b0c2b6cd.roa (raw, json)
Hash identifier:          fLBuRmg1ueb7Woe0n/fhn94J/hW9e/07KVYiLI51vok=
Subject key identifier:   7D:98:E5:A1:23:8C:FA:72:92:AD:8B:06:C3:28:0B:DB:FE:B6:45:2D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A04DD1111577362A75204C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6eb9941b-cdba-3fc9-a123-ccb9b0c2b6cd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:dd:11:11:57:73:62:a7:52:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1f0529c8-5b5e-4c2b-b78e-0fc06656630b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:28:2b:71:7f:2a:d5:95:b1:0d:90:53:70:
                    89:33:84:9d:a8:eb:29:35:cc:63:3d:20:16:a6:59:
                    45:9b:85:da:9d:58:76:e7:1d:82:59:25:fd:1e:f9:
                    8f:37:4c:ec:73:f7:b1:1e:5f:95:1a:fe:48:5b:9d:
                    ce:a0:2b:49:eb:be:00:6c:2d:4a:f7:95:5d:ad:d2:
                    da:72:70:48:b8:c2:58:af:4c:17:ed:28:fe:0a:a5:
                    36:7d:fd:c7:ca:3a:2f:37:91:fc:78:f0:1b:dd:5f:
                    64:ec:dd:0e:98:29:22:1e:2d:85:55:3e:d0:a3:10:
                    b3:36:1d:b9:12:78:dd:18:e5:78:f9:a9:31:74:ee:
                    dd:09:a6:b8:5e:6d:0c:3f:f7:1f:d8:7d:a3:0b:40:
                    d1:0d:31:f9:11:d2:55:57:82:05:84:c8:18:62:9d:
                    34:bb:35:31:17:6a:38:ef:d5:76:46:6b:76:37:e7:
                    35:32:1f:f0:f0:a2:6a:dc:91:9e:b3:a0:05:a0:d5:
                    48:cb:f7:03:3c:c9:d1:68:be:66:86:ea:61:15:eb:
                    03:26:f4:cd:94:93:73:ed:d2:aa:a6:05:c5:60:3c:
                    c9:b2:d5:bc:52:22:2e:13:fa:2b:1b:cb:ea:87:6e:
                    dd:1c:e0:a1:d6:0e:ec:be:fa:f8:cf:ca:be:f6:c2:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:E5:A1:23:8C:FA:72:92:AD:8B:06:C3:28:0B:DB:FE:B6:45:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6eb9941b-cdba-3fc9-a123-ccb9b0c2b6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:6b:0b:59:da:89:c1:e2:e0:01:50:77:98:d6:b7:0e:bb:
         ab:3c:14:5f:60:bc:b9:4e:dd:8d:93:76:21:0d:dc:bd:bd:23:
         85:57:49:af:e7:98:a9:a9:46:59:9e:3b:c8:99:41:9e:a6:3d:
         b4:30:ca:24:06:57:8f:26:d8:e6:aa:cc:d4:1b:0f:ab:96:c5:
         34:0d:e7:54:1c:95:10:0d:21:38:1c:6e:2f:8e:fb:dc:e5:54:
         5c:e6:16:45:de:49:a9:c7:05:c2:c4:c2:50:a0:19:e8:5a:59:
         bd:2f:82:4c:e5:f9:7c:4a:63:70:1e:6c:32:ae:91:b5:e3:51:
         09:90:d1:f2:65:7c:9e:1c:31:36:40:8f:8f:dc:20:62:eb:9a:
         e4:73:be:81:8c:fa:70:41:84:72:4c:47:ef:02:8d:0b:cd:39:
         08:6c:ae:69:7a:7b:9d:64:1d:7e:15:59:98:0c:84:0e:4f:e3:
         12:7b:00:ba:54:93:4f:71:84:d2:1c:cb:1d:0d:04:a3:85:26:
         32:11:9b:a1:a5:e0:7a:3e:14:8a:f8:a7:2b:3e:e3:37:1c:34:
         27:4a:c3:0c:47:28:13:49:5b:ef:e5:8f:64:58:7f:46:06:ee:
         fd:e5:ef:4d:a5:00:cd:d8:25:fd:6f:47:85:59:48:ef:69:c3:
         1f:55:c1:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKBN0REVdzYqdSBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MWYwNTI5YzgtNWI1ZS00YzJiLWI3OGUtMGZjMDY2NTY2MzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxooK3F/KtWVsQ2QU3CJM4SdqOspNcxjPSAW
pllFm4XanVh25x2CWSX9HvmPN0zsc/exHl+VGv5IW53OoCtJ674AbC1K95VdrdLa
cnBIuMJYr0wX7Sj+CqU2ff3HyjovN5H8ePAb3V9k7N0OmCkiHi2FVT7QoxCzNh25
EnjdGOV4+akxdO7dCaa4Xm0MP/cf2H2jC0DRDTH5EdJVV4IFhMgYYp00uzUxF2o4
79V2Rmt2N+c1Mh/w8KJq3JGes6AFoNVIy/cDPMnRaL5mhuphFesDJvTNlJNz7dKq
pgXFYDzJstW8UiIuE/orG8vqh27dHOCh1g7svvr4z8q+9sKiJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2Y5aEjjPpykq2LBsMoC9v+tkUtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmViOTk0MWItY2RiYS0z
ZmM5LWExMjMtY2NiOWIwYzJiNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfqawtZ2onB4uABUHeY1rcOu6s8FF9gvLlO3Y2TdiEN3L29I4VXSa/n
mKmpRlmeO8iZQZ6mPbQwyiQGV48m2OaqzNQbD6uWxTQN51QclRANITgcbi+O+9zl
VFzmFkXeSanHBcLEwlCgGehaWb0vgkzl+XxKY3AebDKukbXjUQmQ0fJlfJ4cMTZA
j4/cIGLrmuRzvoGM+nBBhHJMR+8CjQvNOQhsrml6e51kHX4VWZgMhA5P4xJ7ALpU
k09xhNIcyx0NBKOFJjIRm6Gl4Ho+FIr4pys+4zccNCdKwwxHKBNJW+/lj2RYf0YG
7v3l702lAM3YJf1vR4VZSO9pwx9VwQw=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org