Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ac0527e-a432-375c-8bd6-242f84ec0c64.roa
File:                     0ac0527e-a432-375c-8bd6-242f84ec0c64.roa (raw, json)
Hash identifier:          2GHfuRtLrqkrJ8lObcBqM/ZUEtGa3mDmAF5gXSQAh6M=
Subject key identifier:   2D:9A:3A:45:50:8B:B4:10:D9:FB:20:9F:24:08:5B:D9:1B:EA:8B:A9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F06029BC5055B77DEADE0CC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ac0527e-a432-375c-8bd6-242f84ec0c64.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        23.27.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 16:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:29:bc:50:55:b7:7d:ea:de:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=e7796a52-58f6-4467-b468-16835cfdc873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:0e:fb:b6:81:4d:b0:41:5c:58:cb:cd:e2:
                    12:cc:e0:b3:cc:e3:83:aa:fb:d7:db:4f:c0:d2:ea:
                    da:74:ae:83:49:db:cb:40:81:8e:d5:a1:db:a9:7a:
                    7f:62:b4:ba:81:80:39:04:25:0e:44:14:c7:23:17:
                    f9:c8:7e:cb:98:f0:f9:14:03:4b:e7:8c:f2:5d:59:
                    36:4a:a0:6b:12:2e:ce:22:3e:c4:06:a3:11:81:b7:
                    61:6c:93:c3:59:ff:82:b0:0e:d9:9d:e6:ea:a0:f7:
                    12:09:98:84:dd:c8:d8:e0:49:90:4f:cd:b1:3e:1b:
                    a3:14:59:e7:13:85:74:70:70:0d:e9:3e:6a:88:31:
                    1c:33:2c:cf:df:81:8c:3a:12:ba:68:43:4d:f2:92:
                    50:5b:b2:cd:e5:67:53:23:46:51:25:52:a0:9c:df:
                    81:9b:b8:b6:b0:40:6a:91:8f:93:71:fb:08:6c:4d:
                    b6:e9:a7:04:c1:17:57:9e:02:87:ec:11:41:11:83:
                    93:04:18:e6:0b:d9:e8:f6:84:58:e5:40:2d:4f:c1:
                    2f:0f:38:34:8d:bf:8f:5c:f0:93:69:9f:08:aa:24:
                    3b:54:70:6f:b4:d0:cb:c5:d7:1b:c1:f4:ba:7e:38:
                    d6:43:20:c5:b2:5e:02:74:9e:1a:69:09:ff:8a:fc:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:3A:45:50:8B:B4:10:D9:FB:20:9F:24:08:5B:D9:1B:EA:8B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ac0527e-a432-375c-8bd6-242f84ec0c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:2e:f0:08:8c:0c:ee:21:e4:ef:d8:e3:fe:e6:63:bf:13:
         3c:87:ff:27:9d:02:b1:70:1e:06:80:f0:e6:f0:38:eb:b0:dd:
         31:27:ce:a0:10:53:b1:75:e0:f8:83:33:fc:ff:0a:bd:c9:8c:
         d5:8d:16:e3:0e:0b:81:d9:3f:72:c3:5a:1d:7b:3a:5d:6f:42:
         df:71:a4:67:88:73:3b:ae:74:c2:5f:ee:7d:ae:02:da:a8:61:
         db:9e:90:1a:ca:de:24:f6:de:5a:f4:d0:7b:ae:7b:fe:80:c7:
         83:6c:54:2a:7d:fc:ec:ef:d2:9b:5e:50:a4:25:f7:ed:3a:40:
         8b:5f:33:c7:0f:e5:03:84:f4:a7:f5:21:31:c4:f8:7c:a2:83:
         5a:77:79:cd:26:3d:cc:fe:b5:76:0f:3c:26:71:6a:dc:b9:cc:
         f8:f1:d4:db:55:1b:ae:b0:2b:a7:f5:6d:2a:5b:2c:95:44:40:
         81:7d:70:92:60:2d:8f:b2:76:63:91:5c:3a:a8:da:87:6a:f0:
         f6:ac:92:6b:4b:65:31:ff:af:6e:a8:fa:29:55:0e:00:52:0e:
         bb:75:2f:d9:b2:12:14:e3:3f:28:4c:20:1e:ed:4c:3f:6d:84:
         e7:20:1f:63:ac:65:1b:66:7a:12:71:6b:29:3a:29:d4:31:3e:
         0e:a6:c0:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbwYCm8UFW3fereDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDgyMDEzMDAzOVoXDTI0MTExODE0MDAzOVowLzEtMCsGA1UEAxMk
ZTc3OTZhNTItNThmNi00NDY3LWI0NjgtMTY4MzVjZmRjODczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJgO+7aBTbBBXFjLzeISzOCzzOODqvvX20/A
0uradK6DSdvLQIGO1aHbqXp/YrS6gYA5BCUORBTHIxf5yH7LmPD5FANL54zyXVk2
SqBrEi7OIj7EBqMRgbdhbJPDWf+CsA7ZnebqoPcSCZiE3cjY4EmQT82xPhujFFnn
E4V0cHAN6T5qiDEcMyzP34GMOhK6aENN8pJQW7LN5WdTI0ZRJVKgnN+Bm7i2sEBq
kY+TcfsIbE226acEwRdXngKH7BFBEYOTBBjmC9no9oRY5UAtT8EvDzg0jb+PXPCT
aZ8IqiQ7VHBvtNDLxdcbwfS6fjjWQyDFsl4CdJ4aaQn/ivxCVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2aOkVQi7QQ2fsgnyQIW9kb6oupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGFjMDUyN2UtYTQzMi0z
NzVjLThiZDYtMjQyZjg0ZWMwYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpULvAIjAzuIeTv2OP+5mO/EzyH/yedArFwHgaA8ObwOOuw3TEnzqAQ
U7F14PiDM/z/Cr3JjNWNFuMOC4HZP3LDWh17Ol1vQt9xpGeIczuudMJf7n2uAtqo
YduekBrK3iT23lr00Huue/6Ax4NsVCp9/Ozv0pteUKQl9+06QItfM8cP5QOE9Kf1
ITHE+Hyig1p3ec0mPcz+tXYPPCZxaty5zPjx1NtVG66wK6f1bSpbLJVEQIF9cJJg
LY+ydmORXDqo2odq8PaskmtLZTH/r26o+ilVDgBSDrt1L9myEhTjPyhMIB7tTD9t
hOcgH2OsZRtmehJxayk6KdQxPg6mwMk=
-----END CERTIFICATE-----