Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/f8a7eab3-13bf-3f34-a81e-0cc996de0c1d.roa
File:                     f8a7eab3-13bf-3f34-a81e-0cc996de0c1d.roa (raw, json)
Hash identifier:          ogEuomfD5OyEjPJUGzNINvBnYml+L24eyXqcFXcf7pU=
Subject key identifier:   40:39:99:A4:12:7D:19:CB:08:05:CB:63:0D:FF:8E:0E:DE:A8:D4:40
Certificate issuer:       /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial:       010D0C9F4328584684A4DCE3F4A9548EB7109280
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/f8a7eab3-13bf-3f34-a81e-0cc996de0c1d.roa
Signing time:             Fri 12 Jul 2024 22:51:54 +0000
ROA not before:           Fri 12 Jul 2024 22:51:54 +0000
ROA not after:            Thu 10 Oct 2024 22:51:54 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24
                          149.112.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 13:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:a4:dc:e3:f4:a9:54:8e:b7:10:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
        Validity
            Not Before: Jul 12 22:51:54 2024 GMT
            Not After : Oct 10 22:51:54 2024 GMT
        Subject: CN=9a2f76c4-b251-48be-bf09-6bf7f919ca07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:95:e5:94:25:0c:c9:cb:f1:52:00:71:66:
                    c8:1c:c1:46:7c:cd:bf:1c:56:d4:87:a9:d9:15:c3:
                    17:81:c4:80:be:a0:b9:ce:74:97:6c:ef:f2:1b:44:
                    ad:86:ef:19:8f:68:28:de:fd:56:de:56:79:29:5a:
                    ee:b1:aa:db:06:99:02:d4:a4:a7:98:94:16:57:ba:
                    9b:ae:94:eb:3e:f6:73:8d:36:3d:58:cf:e8:07:fa:
                    80:12:d8:10:44:1d:2e:5e:18:4e:fa:e6:82:14:a8:
                    9d:e6:55:4d:cb:f8:74:e3:12:b0:a8:35:3b:d4:26:
                    87:c6:27:5f:4d:e3:3e:81:69:81:fe:4d:72:a4:e9:
                    28:52:f2:c3:43:43:c1:fc:e7:8c:85:a5:52:6b:ab:
                    ab:67:33:9d:a3:34:d9:d7:b8:a7:70:c9:0a:79:6b:
                    bf:d5:fc:f3:71:1b:a7:14:9e:7a:0f:45:67:44:96:
                    a4:dc:0e:d3:59:bd:e2:d9:46:8a:22:aa:fe:af:a8:
                    46:a6:14:a0:05:5e:fb:54:fe:72:2d:96:72:e8:c4:
                    54:7b:49:6e:53:ac:27:93:cd:0a:ec:6a:74:63:16:
                    fa:6f:f7:1a:d7:2c:ef:fd:78:6f:c8:dd:20:6a:82:
                    9b:94:34:4a:f6:5f:66:79:be:35:f1:08:21:85:a5:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:99:A4:12:7D:19:CB:08:05:CB:63:0D:FF:8E:0E:DE:A8:D4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/f8a7eab3-13bf-3f34-a81e-0cc996de0c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:f3:b6:a2:e2:90:b2:bc:37:a8:e2:18:73:7d:d9:b1:ca:
         94:95:11:4a:41:5b:af:51:fc:66:69:2d:c3:49:9e:94:e3:85:
         2e:2e:c8:4b:bd:1d:ad:21:87:0b:36:4c:f7:a1:b9:9b:7f:bc:
         d6:7e:55:f8:1c:ac:49:ca:31:af:2f:ef:8d:7a:c8:a3:d4:d3:
         0d:dc:14:69:45:60:31:a7:3c:d8:a2:83:af:9a:7e:cb:ca:9e:
         8d:8c:39:a1:17:e6:89:9b:de:d2:c5:c2:ca:b1:29:c4:77:4d:
         e7:4b:47:7a:98:db:58:48:b1:37:d6:fd:43:cd:d8:44:f0:48:
         fb:c3:04:38:5b:c7:5b:f4:b7:15:9b:a9:d3:da:b0:21:6c:59:
         73:da:06:fd:47:38:51:44:14:98:f6:37:d8:e5:69:b8:90:3f:
         4c:4e:55:1b:30:14:fc:25:d2:1b:90:6a:a7:2b:6c:df:61:fe:
         4d:52:a4:0c:85:db:b7:59:88:28:8e:59:71:97:32:70:1f:29:
         e2:5d:64:f2:8d:b3:0b:f4:92:21:a4:80:63:e5:d9:62:67:26:
         b7:f4:a5:3a:1f:07:63:b3:d1:9a:a3:7b:ef:c1:8d:ee:45:73:
         51:9a:ce:83:fc:c5:70:4e:5c:a8:c4:74:54:ad:88:95:c6:ab:
         59:1a:44:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaEpNzj9KlUjrcQkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZlYTNlODgtMWM4YS00N2RlLWJkZDQtMjczMTdjMjgz
NTkyMB4XDTI0MDcxMjIyNTE1NFoXDTI0MTAxMDIyNTE1NFowLzEtMCsGA1UEAxMk
OWEyZjc2YzQtYjI1MS00OGJlLWJmMDktNmJmN2Y5MTljYTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEGV5ZQlDMnL8VIAcWbIHMFGfM2/HFbUh6nZ
FcMXgcSAvqC5znSXbO/yG0Sthu8Zj2go3v1W3lZ5KVrusarbBpkC1KSnmJQWV7qb
rpTrPvZzjTY9WM/oB/qAEtgQRB0uXhhO+uaCFKid5lVNy/h04xKwqDU71CaHxidf
TeM+gWmB/k1ypOkoUvLDQ0PB/OeMhaVSa6urZzOdozTZ17incMkKeWu/1fzzcRun
FJ56D0VnRJak3A7TWb3i2UaKIqr+r6hGphSgBV77VP5yLZZy6MRUe0luU6wnk80K
7Gp0Yxb6b/ca1yzv/XhvyN0gaoKblDRK9l9meb418QghhaXg8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEA5maQSfRnLCAXLYw3/jg7eqNRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NmVh
M2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMxN2MyODM1OTIvZjhhN2VhYjMtMTNiZi0z
ZjM0LWE4MWUtMGNjOTk2ZGUwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTZlYTNlODgtMWM4YS00N2RlLWJk
ZDQtMjczMTdjMjgzNTkyLzU2ZWEzZTg4LTFjOGEtNDdkZS1iZGQ0LTI3MzE3YzI4
MzU5Mi5jcmwwHwYDVR0jBBgwFoAUxz6VS75lz0iA4fHJfS1MTLXeq/kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NmVhM2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMx
N2MyODM1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAX587ai4pCyvDeo4hhzfdmxypSVEUpBW69R/GZpLcNJnpTjhS4uyEu9
Ha0hhws2TPehuZt/vNZ+VfgcrEnKMa8v7416yKPU0w3cFGlFYDGnPNiig6+afsvK
no2MOaEX5omb3tLFwsqxKcR3TedLR3qY21hIsTfW/UPN2ETwSPvDBDhbx1v0txWb
qdPasCFsWXPaBv1HOFFEFJj2N9jlabiQP0xOVRswFPwl0huQaqcrbN9h/k1SpAyF
27dZiCiOWXGXMnAfKeJdZPKNswv0kiGkgGPl2WJnJrf0pTofB2Oz0Zqje+/Bje5F
c1GazoP8xXBOXKjEdFStiJXGq1kaRBE=
-----END CERTIFICATE-----
Generated at Mon Jul 15 14:57:41 2024 by rpki-client on console-fra.rpki-client.org