Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfed3419-690d-3841-b3f6-304e8f49e720.roa
File:                     bfed3419-690d-3841-b3f6-304e8f49e720.roa (raw, json)
Hash identifier:          +2NUyFW1wOeL3SBFbNrD6ci5oyQAb3GQHgH2WbDRor8=
Subject key identifier:   7A:B4:F8:42:B5:9E:A1:1E:B5:1A:27:F6:6E:82:1C:E6:3F:D0:2C:37
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBEDD53467D08856F36C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfed3419-690d-3841-b3f6-304e8f49e720.roa
Signing time:             Wed 16 Oct 2024 14:26:35 +0000
ROA not before:           Wed 16 Oct 2024 14:26:35 +0000
ROA not after:            Tue 14 Jan 2025 15:26:35 +0000
asID:                     81
IP address blocks:        152.46.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:be:dd:53:46:7d:08:85:6f:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:35 2024 GMT
            Not After : Jan 14 15:26:35 2025 GMT
        Subject: CN=e7aacdee-0894-4ee8-b2f0-c5c4013d4550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:d4:f8:05:5c:bf:b3:56:b0:db:0f:11:19:
                    8d:6b:18:13:c6:bb:11:d2:42:93:eb:69:8c:94:f6:
                    db:ee:50:a9:ab:45:a6:ab:03:87:9e:81:0f:da:ab:
                    fe:ce:02:28:6a:fe:64:f4:f4:4a:de:ae:ff:85:d8:
                    9f:dd:3c:59:12:31:05:fb:58:a6:53:ef:ce:a3:9c:
                    b3:78:e7:ab:af:b3:28:a5:37:1f:48:7d:13:14:37:
                    5a:b5:68:b5:12:0b:e6:9e:9a:a0:3b:5e:a7:53:16:
                    47:57:3a:8e:f1:12:6d:e7:4e:8f:8a:dc:94:59:35:
                    20:34:c6:1b:ce:50:a1:98:51:79:cb:44:00:ab:4b:
                    24:51:1f:5f:ec:f4:f9:4d:78:3e:e3:88:4f:a2:48:
                    f6:48:63:4e:b0:b6:b3:bd:44:67:a1:ab:8d:31:3c:
                    60:cf:bc:58:27:87:88:a3:58:1c:53:6d:99:e2:69:
                    de:2c:38:0d:12:cf:95:f0:33:3b:ab:8b:8e:15:e4:
                    09:44:08:06:33:ef:3f:d5:85:43:7e:e4:d7:b6:92:
                    dc:b0:09:89:24:a6:b9:fd:99:72:18:9c:d4:78:78:
                    a9:cd:7e:9c:0f:c3:0b:61:cf:10:b5:98:fd:51:55:
                    a9:0b:a1:18:6c:4d:a1:6b:a0:22:3b:21:f9:f2:d3:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:F8:42:B5:9E:A1:1E:B5:1A:27:F6:6E:82:1C:E6:3F:D0:2C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfed3419-690d-3841-b3f6-304e8f49e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:bf:ca:89:7e:ea:3c:cc:1d:d5:57:e1:29:f5:35:ff:7e:
         3d:a3:02:25:e6:02:f9:c3:37:e1:d6:c4:80:45:92:01:67:28:
         cd:48:05:61:be:b8:05:26:02:e2:8a:19:b5:d1:71:29:1c:ad:
         fe:8e:f6:3e:57:2a:87:d2:38:14:32:71:7f:eb:25:7e:f7:64:
         03:f2:97:1b:8f:66:9e:35:e2:41:f5:0c:da:16:71:13:d8:d2:
         7c:6f:f9:e7:e4:b0:87:8e:6b:ff:22:e9:bb:b4:bb:e4:90:f4:
         eb:aa:77:1e:ba:a5:9b:ef:84:c6:c2:4b:5c:b4:aa:6b:92:90:
         c5:28:04:e1:a2:8d:69:9c:dd:bc:3f:e3:f9:b3:07:52:2f:d5:
         a6:2a:99:88:06:c0:0a:78:9a:69:00:f0:7f:41:dd:92:38:a8:
         e5:69:95:3d:79:7a:57:b5:ce:2f:da:b3:9f:f8:d0:21:9d:a6:
         ed:f1:55:7c:30:ca:e7:40:4f:b6:5b:f7:af:6a:af:31:30:aa:
         48:1a:38:92:6b:39:b9:4d:89:14:20:59:5b:98:f1:ec:c5:73:
         ea:eb:91:cc:87:f1:37:3a:a7:97:fb:20:6f:76:51:0b:03:9d:
         e0:fd:3c:4e:de:13:b6:b0:dc:d1:2c:b2:bc:77:44:2a:aa:34:
         88:11:69:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq77dU0Z9CIVvNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNVoXDTI1MDExNDE1MjYzNVowLzEtMCsGA1UEAxMk
ZTdhYWNkZWUtMDg5NC00ZWU4LWIyZjAtYzVjNDAxM2Q0NTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnU+AVcv7NWsNsPERmNaxgTxrsR0kKT62mM
lPbb7lCpq0WmqwOHnoEP2qv+zgIoav5k9PRK3q7/hdif3TxZEjEF+1imU+/Oo5yz
eOerr7MopTcfSH0TFDdatWi1EgvmnpqgO16nUxZHVzqO8RJt506PityUWTUgNMYb
zlChmFF5y0QAq0skUR9f7PT5TXg+44hPokj2SGNOsLazvURnoauNMTxgz7xYJ4eI
o1gcU22Z4mneLDgNEs+V8DM7q4uOFeQJRAgGM+8/1YVDfuTXtpLcsAmJJKa5/Zly
GJzUeHipzX6cD8MLYc8QtZj9UVWpC6EYbE2ha6AiOyH58tPMWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHq0+EK1nqEetRon9m6CHOY/0Cw3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYmZlZDM0MTktNjkwZC0z
ODQxLWIzZjYtMzA0ZThmNDllNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcMv8qJfuo8zB3VV+Ep9TX/fj2jAiXmAvnDN+HWxIBFkgFnKM1IBWG+
uAUmAuKKGbXRcSkcrf6O9j5XKofSOBQycX/rJX73ZAPylxuPZp414kH1DNoWcRPY
0nxv+efksIeOa/8i6bu0u+SQ9Ouqdx66pZvvhMbCS1y0qmuSkMUoBOGijWmc3bw/
4/mzB1Iv1aYqmYgGwAp4mmkA8H9B3ZI4qOVplT15ele1zi/as5/40CGdpu3xVXww
yudAT7Zb969qrzEwqkgaOJJrOblNiRQgWVuY8ezFc+rrkcyH8Tc6p5f7IG92UQsD
neD9PE7eE7aw3NEssrx3RCqqNIgRaSo=
-----END CERTIFICATE-----