Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0478ad1-7e21-3b63-8366-186d8a478529.roa
File:                     a0478ad1-7e21-3b63-8366-186d8a478529.roa (raw, json)
Hash identifier:          u3IY18mYTyPntoCL1YsPRLwC6OFq77NH+8b+P11DoyE=
Subject key identifier:   3B:0F:0F:FA:01:0C:5D:53:1A:2B:4D:1A:85:0F:9F:59:E2:6B:60:0B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A24265533BC25E632A787C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0478ad1-7e21-3b63-8366-186d8a478529.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:26:55:33:bc:25:e6:32:a7:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=26bf7dd5-3553-4a17-814f-4118d97ceff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:42:78:10:a2:42:7a:92:cc:73:84:8c:09:
                    70:23:65:c5:4c:ea:86:d3:a3:67:18:39:3c:b6:09:
                    be:40:92:b1:60:10:87:83:80:de:01:6d:77:7a:3f:
                    ae:32:80:bd:a1:8f:1d:f3:48:0c:b6:11:d5:17:26:
                    c0:7a:c0:21:97:63:9c:a5:81:ac:be:c8:20:bd:62:
                    8b:1c:be:61:48:9f:7a:d7:89:3b:fc:29:9f:c7:4d:
                    52:13:a4:d5:41:92:60:db:e4:71:d4:5d:bd:22:21:
                    9c:e8:a4:3f:18:a2:fa:ed:60:e6:b8:85:fa:8f:3f:
                    68:13:32:8e:77:ab:e7:be:30:7e:cf:73:51:08:68:
                    1a:67:42:fa:84:7e:54:f0:3d:db:83:b4:25:f4:6e:
                    95:2e:27:99:50:5a:7e:5a:51:8f:44:a2:bd:7a:3d:
                    07:7f:e4:f1:57:18:2c:e3:95:e1:32:d6:74:1f:01:
                    33:d9:57:aa:d4:f3:2f:60:74:bd:36:32:1e:11:04:
                    ef:0a:ae:3d:8a:17:32:b0:70:31:a0:d6:9c:dc:60:
                    8b:07:d2:75:6e:73:91:4a:67:f3:5c:d4:b2:f0:8a:
                    1c:3a:8b:f9:c2:32:6c:04:e1:e8:c1:07:d7:3a:84:
                    5d:2c:fa:d9:06:54:06:2b:85:62:78:a4:ef:09:2a:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:0F:FA:01:0C:5D:53:1A:2B:4D:1A:85:0F:9F:59:E2:6B:60:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0478ad1-7e21-3b63-8366-186d8a478529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:1c:8e:e0:ab:a0:92:92:75:e0:6a:bf:dc:54:ee:58:32:
         a9:4b:8e:8f:fc:f9:10:d8:17:8d:50:38:6d:3f:7d:ac:b8:ad:
         c6:cc:b4:45:8d:7b:b0:b6:64:f3:47:f3:cd:ab:1c:fc:09:84:
         5f:8f:16:a1:95:f6:f5:8b:39:49:f3:c6:6e:86:71:3a:3f:00:
         7d:a3:0c:64:61:a6:a3:41:29:39:20:e1:80:23:0b:fd:07:8d:
         39:6f:9a:e1:24:dd:ea:b9:ec:77:e2:90:0a:22:87:b4:17:92:
         a1:55:2c:73:9f:ed:b3:51:1d:13:95:d4:a3:6b:d7:32:a0:a8:
         60:79:35:e8:c9:f7:37:eb:9d:b2:8c:76:b5:dc:16:9f:6c:e0:
         8c:b4:5c:05:67:c4:88:6f:38:6e:13:53:b4:dd:03:05:61:90:
         a4:e3:d3:a9:ee:2a:32:cf:bd:80:4b:ce:56:e7:11:68:31:2d:
         c8:5f:a3:45:44:d5:5c:f7:9e:82:ea:58:41:42:27:b3:e0:a8:
         0e:eb:97:87:83:a5:d5:94:e6:9b:21:61:8e:1c:5a:7f:62:fb:
         09:c1:d3:9b:3b:f6:94:40:de:83:64:70:c5:a1:21:ad:79:9c:
         de:fd:42:ad:2d:b8:cb:c3:4e:74:1c:25:5c:18:e0:97:96:ec:
         c6:7f:30:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJCZVM7wl5jKnh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjZiZjdkZDUtMzU1My00YTE3LTgxNGYtNDExOGQ5N2NlZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNVCeBCiQnqSzHOEjAlwI2XFTOqG06NnGDk8
tgm+QJKxYBCHg4DeAW13ej+uMoC9oY8d80gMthHVFybAesAhl2OcpYGsvsggvWKL
HL5hSJ9614k7/Cmfx01SE6TVQZJg2+Rx1F29IiGc6KQ/GKL67WDmuIX6jz9oEzKO
d6vnvjB+z3NRCGgaZ0L6hH5U8D3bg7Ql9G6VLieZUFp+WlGPRKK9ej0Hf+TxVxgs
45XhMtZ0HwEz2Veq1PMvYHS9NjIeEQTvCq49ihcysHAxoNac3GCLB9J1bnORSmfz
XNSy8IocOov5wjJsBOHowQfXOoRdLPrZBlQGK4VieKTvCSqxMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsPD/oBDF1TGitNGoUPn1nia2ALMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTA0NzhhZDEtN2UyMS0z
YjYzLTgzNjYtMTg2ZDhhNDc4NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbOHI7gq6CSknXgar/cVO5YMqlLjo/8+RDYF41QOG0/fay4rcbMtEWN
e7C2ZPNH882rHPwJhF+PFqGV9vWLOUnzxm6GcTo/AH2jDGRhpqNBKTkg4YAjC/0H
jTlvmuEk3eq57HfikAoih7QXkqFVLHOf7bNRHROV1KNr1zKgqGB5NejJ9zfrnbKM
drXcFp9s4Iy0XAVnxIhvOG4TU7TdAwVhkKTj06nuKjLPvYBLzlbnEWgxLchfo0VE
1Vz3noLqWEFCJ7PgqA7rl4eDpdWU5pshYY4cWn9i+wnB05s79pRA3oNkcMWhIa15
nN79Qq0tuMvDTnQcJVwY4JeW7MZ/MCQ=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org