Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c24d8fc-cde3-304c-91f9-3cd1f0d71343.roa
File:                     6c24d8fc-cde3-304c-91f9-3cd1f0d71343.roa (raw, json)
Hash identifier:          ioihMvMx7/F0ID/wP1poDfeoL+2L6LM1dZQHm2PlhVE=
Subject key identifier:   F0:91:2B:F8:A9:03:72:BC:4D:66:CC:29:DB:16:08:3F:E2:D6:26:29
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858450C202815CA4A31237EC79D80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c24d8fc-cde3-304c-91f9-3cd1f0d71343.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     32489
IP address blocks:        45.74.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 10:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:28:15:ca:4a:31:23:7e:c7:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=57e14035-e6f2-4f58-9ca4-0e1cae94ca0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:df:fd:8b:98:0f:9d:97:44:52:bd:8b:70:
                    6b:60:54:b5:0d:e2:d7:88:4d:37:36:56:bf:9c:50:
                    17:fb:47:88:4d:ff:3b:69:04:ae:99:ae:53:34:1f:
                    bf:5d:ae:12:be:f6:81:e4:25:6c:51:c5:b8:79:93:
                    67:2d:e3:4f:18:80:ab:32:eb:5f:ba:5b:91:b6:ff:
                    77:19:6f:94:1e:01:43:9f:dc:4f:10:62:85:1c:b7:
                    8e:cd:73:7f:eb:2b:3f:bc:0f:37:6b:91:dd:42:33:
                    49:ea:49:22:7f:3e:e8:63:59:0e:a9:4c:78:28:bc:
                    53:9c:13:ce:fa:71:f0:9b:73:89:d8:69:99:01:a1:
                    ec:25:9e:59:e4:b8:f0:e0:e4:7f:11:66:e2:82:be:
                    1e:19:67:9d:62:63:af:09:a2:69:c3:19:6a:52:f7:
                    86:8d:20:40:e3:43:77:c4:cd:f2:e1:16:0f:69:cf:
                    25:9f:b8:25:c7:76:26:93:ce:53:02:2c:9b:95:7c:
                    15:8c:61:08:85:a5:b1:2c:c1:a7:d2:c5:5f:5d:14:
                    1a:73:79:a7:69:10:57:c1:97:10:de:c2:ea:fb:dd:
                    d4:07:e4:70:30:55:12:86:0e:da:81:d5:8a:91:44:
                    5a:bf:33:d0:87:bd:0e:6d:d5:48:62:5a:0f:bb:bc:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:2B:F8:A9:03:72:BC:4D:66:CC:29:DB:16:08:3F:E2:D6:26:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c24d8fc-cde3-304c-91f9-3cd1f0d71343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:bc:c5:89:19:4b:9f:20:02:ff:c2:dc:6d:b6:9c:ce:3f:
         23:a9:45:c2:40:3f:fd:03:0d:0d:9b:69:ac:30:7d:48:98:f6:
         4d:53:8b:c0:6b:98:68:a6:e1:2a:0f:a1:35:5c:b2:14:fc:fe:
         35:bd:47:c6:77:fb:e4:68:02:d4:f7:a9:85:cf:1a:36:f8:a3:
         02:4d:10:4a:38:d2:f7:83:e2:64:0f:39:5e:4b:aa:5d:cb:02:
         6e:d7:0f:fc:6f:52:6c:c5:ec:4a:8c:81:e3:9b:f5:b6:71:8e:
         9d:82:d9:9f:c6:55:bd:d3:59:5a:4b:6a:dd:37:e9:b4:07:12:
         40:0e:88:ae:c1:b6:11:cb:23:4b:fd:20:f3:85:e5:39:2b:6f:
         ac:92:67:f9:f3:c6:db:78:6b:6c:71:8d:28:4c:41:b0:f5:fe:
         35:03:20:ae:de:d9:ff:b5:05:bf:7a:d3:1a:33:59:2f:3a:26:
         ac:bd:74:bb:6d:38:e6:8b:c6:fc:e2:56:9d:f5:f6:8c:0d:33:
         d5:d1:59:3c:06:70:71:ad:7f:1d:f2:ea:71:e4:fa:82:80:7d:
         cc:52:cb:db:37:c9:a3:cd:bc:75:de:42:2a:d5:11:c6:83:98:
         77:43:c1:a9:27:eb:6d:0a:1a:4f:1d:10:d2:69:46:81:f4:28:
         e5:e0:49:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUMICgVykoxI37HnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk
NTdlMTQwMzUtZTZmMi00ZjU4LTljYTQtMGUxY2FlOTRjYTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCvf/YuYD52XRFK9i3BrYFS1DeLXiE03Nla/
nFAX+0eITf87aQSuma5TNB+/Xa4SvvaB5CVsUcW4eZNnLeNPGICrMutfuluRtv93
GW+UHgFDn9xPEGKFHLeOzXN/6ys/vA83a5HdQjNJ6kkifz7oY1kOqUx4KLxTnBPO
+nHwm3OJ2GmZAaHsJZ5Z5Ljw4OR/EWbigr4eGWedYmOvCaJpwxlqUveGjSBA40N3
xM3y4RYPac8ln7glx3Ymk85TAiyblXwVjGEIhaWxLMGn0sVfXRQac3mnaRBXwZcQ
3sLq+93UB+RwMFUShg7agdWKkURavzPQh70ObdVIYloPu7z+QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCRK/ipA3K8TWbMKdsWCD/i1iYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNmMyNGQ4ZmMtY2RlMy0z
MDRjLTkxZjktM2NkMWYwZDcxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlKvMWJGUufIAL/wtxttpzOPyOpRcJAP/0DDQ2baawwfUiY9k1Ti8Br
mGim4SoPoTVcshT8/jW9R8Z3++RoAtT3qYXPGjb4owJNEEo40veD4mQPOV5Lql3L
Am7XD/xvUmzF7EqMgeOb9bZxjp2C2Z/GVb3TWVpLat036bQHEkAOiK7BthHLI0v9
IPOF5Tkrb6ySZ/nzxtt4a2xxjShMQbD1/jUDIK7e2f+1Bb960xozWS86Jqy9dLtt
OOaLxvziVp319owNM9XRWTwGcHGtfx3y6nHk+oKAfcxSy9s3yaPNvHXeQirVEcaD
mHdDwakn620KGk8dENJpRoH0KOXgSRw=
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:19 2024 by rpki-client on console-ams.rpki-client.org