Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e165e96a-e2ec-3827-a081-02f10fcc9673.roa
File:                     e165e96a-e2ec-3827-a081-02f10fcc9673.roa (raw, json)
Hash identifier:          ewsI+x5JDWWtFqyiT7cho5T+ZxU0cVFFNlJ2D1Wb4yc=
Subject key identifier:   E8:91:CF:5C:22:DB:74:E7:60:60:AB:C2:69:0D:7F:C1:83:C9:2E:8F
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C1B9DDB7B32B4B713A4D80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e165e96a-e2ec-3827-a081-02f10fcc9673.roa
Signing time:             Mon 11 Nov 2024 18:44:53 +0000
ROA not before:           Mon 11 Nov 2024 18:44:53 +0000
ROA not after:            Sun 09 Feb 2025 18:44:53 +0000
asID:                     376
IP address blocks:        206.167.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 20:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c1:b9:dd:b7:b3:2b:4b:71:3a:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:44:53 2024 GMT
            Not After : Feb  9 18:44:53 2025 GMT
        Subject: CN=f79b4188-f2b1-435b-a19d-5d5a82c7db0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:31:16:15:82:a7:6c:40:11:28:44:a2:c0:
                    92:79:a3:7b:b4:12:4b:40:be:ed:cb:8e:c9:6b:73:
                    17:56:dc:f3:f8:31:21:d7:19:63:dc:c4:c6:c7:80:
                    c6:63:dd:df:16:e6:1d:ff:23:b6:84:41:37:6f:97:
                    17:a9:93:73:c9:f8:4b:c6:34:73:fa:2b:36:fb:07:
                    89:a3:09:f0:c3:6d:87:0d:9d:cc:c3:8e:56:b5:e4:
                    52:db:61:e4:51:55:77:29:9c:64:86:af:bd:20:22:
                    e5:90:01:27:9f:b6:8e:02:b6:3e:cc:8f:ea:9c:77:
                    24:f7:d7:f2:f2:03:ff:7e:3c:2f:18:64:a6:87:ad:
                    35:71:37:cd:c8:23:79:16:68:8c:cd:69:85:ff:84:
                    59:57:2d:59:e5:77:27:61:9a:ba:dd:04:7a:02:a9:
                    1a:02:d0:17:e3:ee:c9:7a:11:be:3c:cb:48:fe:28:
                    e6:5d:68:46:43:ef:cc:d0:8c:8e:5e:3c:e9:90:d0:
                    a5:9f:42:fb:d1:9c:e1:50:e7:7f:66:d4:b3:53:33:
                    91:f7:54:c8:b6:ba:ac:78:dc:00:b5:61:f9:10:36:
                    34:1d:75:32:e5:82:5c:7c:0c:53:cf:37:0c:a4:6b:
                    ff:64:74:2b:95:31:8a:49:fe:19:62:0c:bf:ef:89:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:91:CF:5C:22:DB:74:E7:60:60:AB:C2:69:0D:7F:C1:83:C9:2E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e165e96a-e2ec-3827-a081-02f10fcc9673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:38:98:9a:12:46:e6:15:fd:2e:0c:25:c8:8f:79:3f:58:6a:
         a9:93:db:bf:cd:8c:23:35:57:cf:da:8d:66:e8:e1:b1:e4:0f:
         e0:a0:f7:da:c1:eb:db:f2:31:e6:2b:e5:9f:3c:c4:59:e3:77:
         ad:38:8d:de:c2:7a:4e:48:9d:10:25:39:52:94:43:bb:1b:5e:
         1d:2e:d9:b5:ca:f6:a5:4c:92:e7:6b:73:8a:e9:a3:2d:90:8f:
         2d:b4:8b:13:4d:e2:47:bf:c2:96:58:8c:ad:b2:5a:ef:9b:c3:
         6d:98:55:3e:da:d5:16:bd:f7:2b:7a:81:ba:41:a5:11:cb:53:
         f2:67:24:a4:0d:23:3a:d4:a4:bb:34:ed:44:33:a8:a2:2b:37:
         b2:8e:16:1e:6f:d8:51:b3:82:96:b3:8e:05:e4:aa:ac:d4:55:
         aa:24:25:89:66:a0:70:fa:be:a0:93:7d:b7:2e:f0:4c:f9:08:
         ad:d8:46:92:87:4c:fd:cb:94:7a:66:4b:3c:28:17:2f:fd:80:
         27:4f:98:97:da:09:76:dc:0d:fe:55:8f:66:22:bd:a4:9c:c5:
         aa:cc:fb:73:ec:3e:e5:51:37:6e:77:82:54:23:bc:ee:a2:28:
         a0:43:a6:2b:71:7a:7f:ce:bc:3e:fe:f1:1a:97:cd:da:6f:14:
         85:5b:00:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYwbndt7MrS3E6TYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI0MTExMTE4NDQ1M1oXDTI1MDIwOTE4NDQ1M1owLzEtMCsGA1UEAxMk
Zjc5YjQxODgtZjJiMS00MzViLWExOWQtNWQ1YTgyYzdkYjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CsxFhWCp2xAEShEosCSeaN7tBJLQL7ty47J
a3MXVtzz+DEh1xlj3MTGx4DGY93fFuYd/yO2hEE3b5cXqZNzyfhLxjRz+is2+weJ
ownww22HDZ3Mw45WteRS22HkUVV3KZxkhq+9ICLlkAEnn7aOArY+zI/qnHck99fy
8gP/fjwvGGSmh601cTfNyCN5FmiMzWmF/4RZVy1Z5XcnYZq63QR6AqkaAtAX4+7J
ehG+PMtI/ijmXWhGQ+/M0IyOXjzpkNCln0L70ZzhUOd/ZtSzUzOR91TItrqseNwA
tWH5EDY0HXUy5YJcfAxTzzcMpGv/ZHQrlTGKSf4ZYgy/74kI0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiRz1wi23TnYGCrwmkNf8GDyS6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvZTE2NWU5NmEtZTJlYy0z
ODI3LWEwODEtMDJmMTBmY2M5NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzqeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADg4mJoSRuYV/S4MJciPeT9YaqmT27/NjCM1V8/ajWbo4bHkD+Cg99rB
69vyMeYr5Z88xFnjd604jd7Cek5InRAlOVKUQ7sbXh0u2bXK9qVMkudrc4rpoy2Q
jy20ixNN4ke/wpZYjK2yWu+bw22YVT7a1Ra99yt6gbpBpRHLU/JnJKQNIzrUpLs0
7UQzqKIrN7KOFh5v2FGzgpazjgXkqqzUVaokJYlmoHD6vqCTfbcu8Ez5CK3YRpKH
TP3LlHpmSzwoFy/9gCdPmJfaCXbcDf5Vj2YivaScxarM+3PsPuVRN253glQjvO6i
KKBDpitxen/OvD7+8RqXzdpvFIVbAK4=
-----END CERTIFICATE-----
Generated at Tue Nov 12 00:01:00 2024 by rpki-client on console-fra.rpki-client.org