Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/0b1af9af-1dc1-31b4-bd9c-b9274aec618e.roa
File:                     0b1af9af-1dc1-31b4-bd9c-b9274aec618e.roa (raw, json)
Hash identifier:          2IXAuPe6sAGMTBiIrfG6aK1kkS+aInH9qQ7U0y+nMiU=
Subject key identifier:   BA:77:2A:A7:B0:78:E6:B5:E9:9E:22:2F:F4:BA:B7:D8:CF:A0:A6:5F
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858466099C82BE42579992F74A010
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/0b1af9af-1dc1-31b4-bd9c-b9274aec618e.roa
Signing time:             Sun 30 Jun 2024 01:00:24 +0000
ROA not before:           Sun 30 Jun 2024 01:00:24 +0000
ROA not after:            Sat 28 Sep 2024 01:00:24 +0000
asID:                     13213
IP address blocks:        98.158.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 14:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:60:99:c8:2b:e4:25:79:99:2f:74:a0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jun 30 01:00:24 2024 GMT
            Not After : Sep 28 01:00:24 2024 GMT
        Subject: CN=39e1d5a9-2cc0-47b7-bd5d-5ccf023047ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:f2:e8:c7:d2:61:47:c6:fc:60:1a:07:cd:
                    7e:e5:b3:2e:7d:40:59:48:b4:bb:f0:47:7d:d9:84:
                    86:85:f2:c0:b1:7e:81:0e:b7:55:5c:16:c8:90:3a:
                    a9:e2:2c:e4:63:93:4c:5e:b1:5a:a7:bd:db:7e:e8:
                    50:27:d5:8f:8f:14:95:4b:56:47:00:e0:65:d0:30:
                    11:fb:b0:ee:37:c9:d2:f6:33:f8:ac:23:4d:a5:4a:
                    ca:4f:42:f5:4d:46:ad:e2:30:e9:a5:0f:80:42:99:
                    ab:5e:16:74:1d:b1:0e:2c:5b:bd:82:47:3d:dd:f0:
                    83:1a:74:ec:47:98:6e:dd:8e:7d:b4:a8:d7:fe:c5:
                    22:02:f8:5f:a1:e5:1e:d1:06:6e:93:c4:09:94:99:
                    0b:1e:22:f4:d0:0a:b2:02:1b:34:38:23:8f:7b:6b:
                    c6:a5:0e:92:35:4c:4e:df:7a:46:ec:7f:0d:22:a0:
                    5d:76:c1:0c:d4:ac:f2:75:c8:23:55:81:ad:6c:36:
                    7c:2c:3f:94:e3:34:43:46:d3:49:0a:77:a0:7e:a0:
                    ea:94:a1:9e:95:ce:78:be:66:6e:b3:56:99:d8:34:
                    da:8a:cc:33:49:43:33:33:3f:d2:f3:fc:24:68:3e:
                    7c:7f:f4:b3:e3:6d:be:e5:c0:bb:d9:17:9c:15:87:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:2A:A7:B0:78:E6:B5:E9:9E:22:2F:F4:BA:B7:D8:CF:A0:A6:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/0b1af9af-1dc1-31b4-bd9c-b9274aec618e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4d:a5:ed:bb:fa:71:0b:bd:f3:72:21:c3:56:39:0a:1b:ec:
         e1:95:a1:72:10:5f:48:b2:77:ac:c6:58:06:cb:f8:ed:3e:a6:
         22:d5:10:98:05:d5:6e:57:a3:5f:0f:c6:8d:94:b5:6f:3d:03:
         93:2f:e1:a0:8a:24:7d:a1:69:79:09:90:f7:1b:f2:f0:4c:55:
         bf:56:95:5f:3d:df:95:80:bf:37:95:bd:dc:a2:d1:f1:a1:71:
         68:fb:12:9a:09:78:cb:35:66:57:5d:7c:b5:92:8e:c5:2f:e0:
         0a:df:42:5a:ef:0e:5b:cf:f7:8e:a3:c2:bb:9d:2a:1d:bc:0a:
         d5:25:a6:82:83:9d:7e:ae:f0:20:68:6b:cf:38:3a:fc:ee:ef:
         6c:10:d8:fb:37:ae:d7:9a:14:be:21:17:e7:e3:e5:01:77:86:
         2b:7a:02:6c:f0:b2:ba:2c:5a:77:ba:ea:33:59:aa:89:c1:64:
         3b:c4:5a:3b:61:16:10:31:9f:0a:28:20:f0:83:b6:e2:5c:e6:
         1f:56:36:6b:c8:99:b2:64:38:71:3f:f9:49:70:ff:69:68:1a:
         fa:e3:a0:79:3c:7a:83:a1:e6:78:cc:be:cb:24:08:a1:8b:3e:
         80:e9:11:aa:5d:cb:37:43:ff:b8:d5:3a:f3:61:ab:88:7b:60:
         b6:c0:10:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZgmcgr5CV5mS90oBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MDYzMDAxMDAyNFoXDTI0MDkyODAxMDAyNFowLzEtMCsGA1UEAxMk
MzllMWQ1YTktMmNjMC00N2I3LWJkNWQtNWNjZjAyMzA0N2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGjy6MfSYUfG/GAaB81+5bMufUBZSLS78Ed9
2YSGhfLAsX6BDrdVXBbIkDqp4izkY5NMXrFap73bfuhQJ9WPjxSVS1ZHAOBl0DAR
+7DuN8nS9jP4rCNNpUrKT0L1TUat4jDppQ+AQpmrXhZ0HbEOLFu9gkc93fCDGnTs
R5hu3Y59tKjX/sUiAvhfoeUe0QZuk8QJlJkLHiL00AqyAhs0OCOPe2vGpQ6SNUxO
33pG7H8NIqBddsEM1KzydcgjVYGtbDZ8LD+U4zRDRtNJCnegfqDqlKGelc54vmZu
s1aZ2DTaiswzSUMzMz/S8/wkaD58f/Sz422+5cC72RecFYfJ3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLp3KqeweOa16Z4iL/S6t9jPoKZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvMGIxYWY5YWYtMWRjMS0z
MWI0LWJkOWMtYjkyNzRhZWM2MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp62MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENNpe27+nELvfNyIcNWOQob7OGVoXIQX0iyd6zGWAbL+O0+piLVEJgF
1W5Xo18Pxo2UtW89A5Mv4aCKJH2haXkJkPcb8vBMVb9WlV8935WAvzeVvdyi0fGh
cWj7EpoJeMs1ZlddfLWSjsUv4ArfQlrvDlvP946jwrudKh28CtUlpoKDnX6u8CBo
a884Ovzu72wQ2Ps3rteaFL4hF+fj5QF3hit6AmzwsrosWne66jNZqonBZDvEWjth
FhAxnwooIPCDtuJc5h9WNmvImbJkOHE/+Ulw/2loGvrjoHk8eoOh5njMvsskCKGL
PoDpEapdyzdD/7jVOvNhq4h7YLbAEEs=
-----END CERTIFICATE-----