Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/3e3e698b-4f25-33cc-b2e0-91cdac257408.roa
File:                     3e3e698b-4f25-33cc-b2e0-91cdac257408.roa (raw, json)
Hash identifier:          WU8nlRqQG1al/t53R87RYoC/RXTydTvyfmhdDD+mQ30=
Subject key identifier:   66:CC:7B:5C:D2:58:D2:5C:DF:CF:8E:A2:EE:95:C7:F7:BD:BA:B7:E1
Certificate issuer:       /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial:       010D0C9F432858468C38EDED2E9F96A9455E2500
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/3e3e698b-4f25-33cc-b2e0-91cdac257408.roa
Signing time:             Mon 15 Jul 2024 16:00:53 +0000
ROA not before:           Mon 15 Jul 2024 16:00:53 +0000
ROA not after:            Sun 13 Oct 2024 16:00:53 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24
                          149.112.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 00:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8c:38:ed:ed:2e:9f:96:a9:45:5e:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
        Validity
            Not Before: Jul 15 16:00:53 2024 GMT
            Not After : Oct 13 16:00:53 2024 GMT
        Subject: CN=c79836d8-653c-4ca4-b175-f8919d4246ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:af:f1:37:71:9b:10:48:56:32:ec:cf:6c:
                    c6:eb:42:60:b3:44:46:8b:ba:0f:34:b4:8e:06:dc:
                    de:a5:ce:fe:a7:c4:4b:f7:62:2f:b6:a6:f8:2e:f6:
                    18:a3:ad:c8:34:a8:37:7a:22:08:05:c3:b7:4e:5d:
                    25:f1:49:0d:29:7c:ac:da:45:a8:da:6d:8e:61:98:
                    d1:36:3a:1e:49:12:5b:c0:b6:15:ac:4f:07:dd:6f:
                    5b:a2:0c:12:70:0f:01:d5:14:11:64:bc:2c:de:40:
                    37:31:83:0d:a1:ab:07:a9:a1:6d:2c:25:e1:d4:16:
                    ac:4c:6e:3c:b4:fc:4e:ca:a6:c5:8d:f3:86:91:90:
                    6f:c1:62:ed:fa:07:df:9f:3f:d8:11:44:ca:38:0a:
                    d4:69:59:fa:15:70:02:dd:1a:96:6c:11:c2:62:51:
                    07:de:f2:ca:ad:64:10:16:fd:17:40:b7:6f:4f:cf:
                    e8:7d:b4:fa:62:6b:75:fe:4b:43:5c:a5:f4:53:f4:
                    ed:7f:30:ff:47:b0:20:f4:2e:44:f7:86:26:9a:7f:
                    1d:bc:33:b5:55:00:d6:ff:12:74:c9:bd:ed:35:c1:
                    a9:af:70:99:eb:30:a0:74:25:a9:75:ed:11:c9:65:
                    d8:4d:f5:ff:15:25:dd:0e:23:fb:24:60:18:95:c0:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:7B:5C:D2:58:D2:5C:DF:CF:8E:A2:EE:95:C7:F7:BD:BA:B7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/3e3e698b-4f25-33cc-b2e0-91cdac257408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:f1:ad:d2:22:a2:22:65:a3:13:01:2c:75:8c:4f:80:6f:
         ee:f1:d4:35:b8:bf:ec:a4:0c:17:3b:23:d1:5f:6a:38:25:23:
         4f:8a:1b:c3:ae:da:05:2a:cd:2f:ef:e2:2e:aa:12:9d:d2:89:
         0b:ef:12:5f:63:7f:f3:f3:0c:60:4d:7a:9c:ef:3a:6f:1f:1c:
         15:83:27:51:ab:f0:34:16:52:4b:86:e6:27:21:2b:9c:eb:ac:
         ff:00:4b:ad:a7:7f:19:80:55:c4:0b:05:bb:22:90:9c:fe:ca:
         57:26:22:f4:a7:3c:76:f9:31:4a:4a:bc:25:07:c2:b4:0c:4d:
         39:0f:9d:89:4a:5b:41:c5:a9:3f:0b:c2:4a:4a:72:6e:2a:28:
         c7:2b:a7:2d:1f:7a:94:0b:98:fe:13:90:86:29:8b:f5:7c:26:
         fd:c3:8d:30:51:1e:8b:6e:1b:44:e4:85:fd:c1:96:cd:4a:fe:
         cc:34:95:83:2a:7a:14:34:21:9f:54:4d:fc:87:6a:93:d7:26:
         6a:78:d5:fc:64:3b:dc:93:ba:66:27:e8:a3:cf:49:58:59:85:
         69:d1:af:bf:11:04:b5:e0:c7:16:ef:0b:11:4a:bb:ca:00:4b:
         d7:fa:c2:ff:b7:d8:a8:c9:29:c8:f4:8a:66:cb:55:0d:97:b6:
         be:e3:50:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaMOO3tLp+WqUVeJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZlYTNlODgtMWM4YS00N2RlLWJkZDQtMjczMTdjMjgz
NTkyMB4XDTI0MDcxNTE2MDA1M1oXDTI0MTAxMzE2MDA1M1owLzEtMCsGA1UEAxMk
Yzc5ODM2ZDgtNjUzYy00Y2E0LWIxNzUtZjg5MTlkNDI0NmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7uv8TdxmxBIVjLsz2zG60Jgs0RGi7oPNLSO
Btzepc7+p8RL92Ivtqb4LvYYo63INKg3eiIIBcO3Tl0l8UkNKXys2kWo2m2OYZjR
NjoeSRJbwLYVrE8H3W9bogwScA8B1RQRZLws3kA3MYMNoasHqaFtLCXh1BasTG48
tPxOyqbFjfOGkZBvwWLt+gffnz/YEUTKOArUaVn6FXAC3RqWbBHCYlEH3vLKrWQQ
Fv0XQLdvT8/ofbT6Ymt1/ktDXKX0U/TtfzD/R7Ag9C5E94Ymmn8dvDO1VQDW/xJ0
yb3tNcGpr3CZ6zCgdCWpde0RyWXYTfX/FSXdDiP7JGAYlcCw8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbMe1zSWNJc38+Oou6Vx/e9urfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NmVh
M2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMxN2MyODM1OTIvM2UzZTY5OGItNGYyNS0z
M2NjLWIyZTAtOTFjZGFjMjU3NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTZlYTNlODgtMWM4YS00N2RlLWJk
ZDQtMjczMTdjMjgzNTkyLzU2ZWEzZTg4LTFjOGEtNDdkZS1iZGQ0LTI3MzE3YzI4
MzU5Mi5jcmwwHwYDVR0jBBgwFoAUxz6VS75lz0iA4fHJfS1MTLXeq/kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NmVhM2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMx
N2MyODM1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFac8a3SIqIiZaMTASx1jE+Ab+7x1DW4v+ykDBc7I9FfajglI0+KG8Ou
2gUqzS/v4i6qEp3SiQvvEl9jf/PzDGBNepzvOm8fHBWDJ1Gr8DQWUkuG5ichK5zr
rP8AS62nfxmAVcQLBbsikJz+ylcmIvSnPHb5MUpKvCUHwrQMTTkPnYlKW0HFqT8L
wkpKcm4qKMcrpy0fepQLmP4TkIYpi/V8Jv3DjTBRHotuG0Tkhf3Bls1K/sw0lYMq
ehQ0IZ9UTfyHapPXJmp41fxkO9yTumYn6KPPSVhZhWnRr78RBLXgxxbvCxFKu8oA
S9f6wv+32KjJKcj0imbLVQ2Xtr7jUNs=
-----END CERTIFICATE-----
Generated at Fri Jul 19 02:37:24 2024 by rpki-client on console-fra.rpki-client.org