Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067a891c-3f20-3de1-b7ae-eb4b16f5ba71.roa
File:                     067a891c-3f20-3de1-b7ae-eb4b16f5ba71.roa (raw, json)
Hash identifier:          xtkebci4aLHGindEhiGkPLDooKlSI+YDCV2ORmQaDtY=
Subject key identifier:   66:E1:68:60:BA:B2:80:C8:58:9B:5B:11:4E:C4:61:DB:BE:3E:FC:0D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858468A7A1009EFC954A458995300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067a891c-3f20-3de1-b7ae-eb4b16f5ba71.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     203020
IP address blocks:        104.250.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 05:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:10:09:ef:c9:54:a4:58:99:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=6f1b18d2-d329-43c5-96fe-acae68f52ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:c6:5d:a6:ee:4d:62:49:b3:c9:f1:f0:57:
                    a3:e2:43:5e:3a:b3:7d:b4:c0:7f:e7:bc:81:4b:77:
                    01:2d:2a:d5:6b:e2:7b:fd:c5:75:88:60:6e:c6:68:
                    cb:be:9f:89:be:8a:d2:38:fa:ed:85:67:7c:ee:dc:
                    35:ef:55:4b:cd:d8:82:88:a4:c0:73:70:dc:67:83:
                    6a:90:15:c2:08:82:29:68:25:91:d3:f2:cf:03:86:
                    33:97:d6:78:36:ce:70:a6:96:73:76:a3:a5:52:85:
                    c7:d2:de:18:1f:ca:ba:17:68:f4:d9:b1:4d:72:52:
                    1f:fb:68:71:47:75:17:8c:0c:e8:33:bc:01:d0:b4:
                    ec:24:ed:57:18:f6:8c:6e:ab:c3:c2:fe:a2:ad:54:
                    51:cf:fd:47:e2:04:97:49:d2:58:c9:88:ad:6b:08:
                    16:97:53:6d:8e:19:54:ab:78:fc:52:11:58:10:b3:
                    31:0b:29:44:85:75:14:d7:70:50:77:93:62:46:44:
                    9e:fa:4b:a5:eb:9b:fd:53:03:11:87:f7:aa:ed:2c:
                    d0:b5:1f:5f:c4:9f:a2:3f:72:d9:5b:84:6d:cd:9e:
                    a7:88:15:7f:bd:3c:03:93:69:70:8a:d5:16:0c:db:
                    73:92:27:fd:56:03:2d:cb:3b:df:d7:43:97:a1:45:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E1:68:60:BA:B2:80:C8:58:9B:5B:11:4E:C4:61:DB:BE:3E:FC:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067a891c-3f20-3de1-b7ae-eb4b16f5ba71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:c2:2e:ec:9a:21:80:62:88:8b:1c:6c:88:52:82:10:f5:
         30:ec:9a:20:2f:c2:07:1d:46:fc:34:66:1f:84:b2:ad:61:91:
         25:84:69:05:9c:50:38:cb:f7:e7:ee:6b:57:a6:95:58:ce:92:
         96:8f:c2:48:24:0f:fa:f3:64:b6:c2:63:95:62:76:36:fd:43:
         82:45:e2:95:95:eb:dc:94:b1:09:28:e9:68:84:cd:59:a0:1c:
         16:39:00:be:bd:ed:a9:d6:cd:22:e3:1a:a5:d3:46:9e:7f:73:
         64:1c:59:53:80:4e:d2:0c:fe:10:31:80:bf:79:be:4c:a5:3a:
         dd:ae:94:b8:aa:b9:be:23:50:18:c8:96:07:c7:cb:8f:45:0b:
         bf:31:fb:72:52:0e:a8:b3:ae:73:af:cd:45:a7:39:6a:86:56:
         37:e4:ae:0b:b5:1d:af:12:d2:1c:d9:c8:fa:fb:d0:3f:ed:2e:
         86:df:80:b7:e3:ce:08:e2:ce:99:b1:61:53:f4:2d:c1:f2:53:
         ae:fc:2d:d3:6b:57:4c:9a:c3:2f:34:af:3e:a4:3b:3c:68:18:
         d7:36:71:d4:0c:1c:fd:f4:63:28:2c:59:fc:bd:48:40:e7:44:
         87:f5:7d:87:e4:88:21:29:d7:df:05:a6:e3:6b:45:25:e5:ff:
         77:fa:09:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaKehAJ78lUpFiZUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDcxNTAxMDAyNFoXDTI0MTAxMzAxMDAyNFowLzEtMCsGA1UEAxMk
NmYxYjE4ZDItZDMyOS00M2M1LTk2ZmUtYWNhZTY4ZjUyZWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvGXabuTWJJs8nx8Fej4kNeOrN9tMB/57yB
S3cBLSrVa+J7/cV1iGBuxmjLvp+JvorSOPrthWd87tw171VLzdiCiKTAc3DcZ4Nq
kBXCCIIpaCWR0/LPA4Yzl9Z4Ns5wppZzdqOlUoXH0t4YH8q6F2j02bFNclIf+2hx
R3UXjAzoM7wB0LTsJO1XGPaMbqvDwv6irVRRz/1H4gSXSdJYyYitawgWl1NtjhlU
q3j8UhFYELMxCylEhXUU13BQd5NiRkSe+kul65v9UwMRh/eq7SzQtR9fxJ+iP3LZ
W4RtzZ6niBV/vTwDk2lwitUWDNtzkif9VgMtyzvf10OXoUX1owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbhaGC6soDIWJtbEU7EYdu+PvwNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDY3YTg5MWMtM2YyMC0z
ZGUxLWI3YWUtZWI0YjE2ZjViYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACj4wi7smiGAYoiLHGyIUoIQ9TDsmiAvwgcdRvw0Zh+Esq1hkSWEaQWc
UDjL9+fua1emlVjOkpaPwkgkD/rzZLbCY5Vidjb9Q4JF4pWV69yUsQko6WiEzVmg
HBY5AL697anWzSLjGqXTRp5/c2QcWVOATtIM/hAxgL95vkylOt2ulLiqub4jUBjI
lgfHy49FC78x+3JSDqizrnOvzUWnOWqGVjfkrgu1Ha8S0hzZyPr70D/tLobfgLfj
zgjizpmxYVP0LcHyU678LdNrV0yawy80rz6kOzxoGNc2cdQMHP30YygsWfy9SEDn
RIf1fYfkiCEp198FpuNrRSXl/3f6CQk=
-----END CERTIFICATE-----