Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/994bddc0-8a64-3ffb-b0d3-fff5acb803cb.roa
File:                     994bddc0-8a64-3ffb-b0d3-fff5acb803cb.roa (raw, json)
Hash identifier:          xn7sTHoUlI8PW8W6NcBvDF69HYMXx6JMWg+viR9A5W4=
Subject key identifier:   2B:F0:26:7E:0A:3A:F6:96:57:B4:22:6A:85:B4:FE:FA:A3:CA:B8:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F0602054D55FF8AB52221000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/994bddc0-8a64-3ffb-b0d3-fff5acb803cb.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:20:54:d5:5f:f8:ab:52:22:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=d7b6e62f-3ded-4b8e-b844-189c414a8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:bb:b4:02:77:15:c9:b7:d7:b9:79:44:cf:
                    7f:88:06:56:ce:b1:2c:42:d5:4e:f4:cf:eb:c9:93:
                    5d:1f:f1:47:9c:ad:b7:89:2e:de:2e:d9:fe:2e:a7:
                    ef:47:66:52:b7:56:91:19:8f:b7:90:71:b9:b0:8f:
                    a2:e1:0f:f3:71:3c:4a:14:99:39:88:fd:40:4d:20:
                    c0:48:e1:c6:de:92:d5:15:2b:e8:e3:2e:cb:3d:1d:
                    e3:c9:73:eb:b8:b2:df:53:51:9c:e0:a8:fb:cd:62:
                    5d:8d:40:76:c3:cb:f1:b4:82:18:a6:17:96:0a:e3:
                    3d:c2:94:34:40:d9:17:53:47:68:9c:7c:cd:10:41:
                    3f:ca:58:35:4e:ce:49:65:83:2d:0f:b6:06:cd:f7:
                    82:5e:f8:49:90:09:13:23:45:e6:43:da:b8:3b:f5:
                    74:f5:e3:48:a9:67:7d:40:e7:d8:fd:3e:b2:d1:19:
                    62:2f:0d:1d:ed:e8:1d:c1:c0:7f:7f:23:35:3f:93:
                    04:8e:53:cd:d3:a3:3d:52:a9:54:2a:59:c9:dc:a7:
                    69:da:d0:67:c6:ff:72:b1:a4:d3:7e:2f:15:ee:1f:
                    3b:fb:c1:52:61:13:4e:eb:2e:d7:11:11:db:c2:6f:
                    01:9f:5b:b4:d4:b2:b8:80:07:e5:d8:ea:55:2e:a7:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:26:7E:0A:3A:F6:96:57:B4:22:6A:85:B4:FE:FA:A3:CA:B8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/994bddc0-8a64-3ffb-b0d3-fff5acb803cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:21:ac:2a:9d:d4:2c:42:85:7f:26:3e:31:ae:1d:6e:29:2c:
         69:73:30:29:49:9d:59:aa:35:5b:60:81:e8:43:5c:94:31:39:
         66:7b:db:b0:63:29:53:95:0f:cf:e7:bf:54:60:a5:3d:a1:1d:
         99:23:1f:c5:74:3f:9a:38:c0:7a:7f:78:6e:a5:fc:fe:1d:b9:
         fb:4b:56:18:48:0c:1c:42:35:fe:6e:02:fb:ce:e6:68:b6:6b:
         59:eb:ee:95:5a:8a:a5:93:05:7f:34:bd:e5:c4:91:b9:85:81:
         82:0c:90:86:40:22:70:64:1a:fc:8e:9d:9e:a5:ef:4e:f8:e1:
         4c:60:49:0a:a2:8d:df:18:46:e3:98:ce:98:1a:26:4f:35:13:
         4d:dd:cc:eb:4a:b3:94:79:39:29:50:9b:cc:6e:e8:ec:c1:52:
         02:9f:cd:44:4c:a4:ac:4d:db:35:25:27:05:08:73:6e:2e:cb:
         67:35:6f:af:53:f7:fe:a8:ce:47:98:e3:4c:bb:e0:b5:e9:e4:
         8a:08:f7:24:02:97:4b:d1:f6:0e:6f:b7:d4:34:d8:04:f7:39:
         15:69:00:10:db:eb:bd:88:b3:3f:06:88:82:dd:e8:74:eb:9b:
         8e:af:9c:b0:b6:40:02:67:f0:d7:9a:9f:71:46:5c:a8:04:41:
         32:4e:c5:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbwYCBU1V/4q1IiEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDgyMDEzMDAzOVoXDTI0MTExODE0MDAzOVowLzEtMCsGA1UEAxMk
ZDdiNmU2MmYtM2RlZC00YjhlLWI4NDQtMTg5YzQxNGE4ZmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaq7tAJ3Fcm317l5RM9/iAZWzrEsQtVO9M/r
yZNdH/FHnK23iS7eLtn+LqfvR2ZSt1aRGY+3kHG5sI+i4Q/zcTxKFJk5iP1ATSDA
SOHG3pLVFSvo4y7LPR3jyXPruLLfU1Gc4Kj7zWJdjUB2w8vxtIIYpheWCuM9wpQ0
QNkXU0donHzNEEE/ylg1Ts5JZYMtD7YGzfeCXvhJkAkTI0XmQ9q4O/V09eNIqWd9
QOfY/T6y0RliLw0d7egdwcB/fyM1P5MEjlPN06M9UqlUKlnJ3Kdp2tBnxv9ysaTT
fi8V7h87+8FSYRNO6y7XERHbwm8Bn1u01LK4gAfl2OpVLqcpswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvwJn4KOvaWV7QiaoW0/vqjyrh5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTk0YmRkYzAtOGE2NC0z
ZmZiLWIwZDMtZmZmNWFjYjgwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYhrCqd1CxChX8mPjGuHW4pLGlzMClJnVmqNVtggehDXJQxOWZ727Bj
KVOVD8/nv1RgpT2hHZkjH8V0P5o4wHp/eG6l/P4duftLVhhIDBxCNf5uAvvO5mi2
a1nr7pVaiqWTBX80veXEkbmFgYIMkIZAInBkGvyOnZ6l70744UxgSQqijd8YRuOY
zpgaJk81E03dzOtKs5R5OSlQm8xu6OzBUgKfzURMpKxN2zUlJwUIc24uy2c1b69T
9/6ozkeY40y74LXp5IoI9yQCl0vR9g5vt9Q02AT3ORVpABDb672Isz8GiILd6HTr
m46vnLC2QAJn8Nean3FGXKgEQTJOxRU=
-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:47 2024 by rpki-client on console-ams.rpki-client.org