Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fbbfb4b7-3c4a-3ee6-9606-b758dd6f7662.roa
File:                     fbbfb4b7-3c4a-3ee6-9606-b758dd6f7662.roa (raw, json)
Hash identifier:          Z8bJwKSL7ea2HY0E7QumXExGjg6RmfH9IzzKNKDwYEo=
Subject key identifier:   89:AE:0E:2B:8C:76:33:2F:21:B1:D7:E1:24:41:66:A9:0A:44:EC:84
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858477230EA49AFCDC5597F5E76A0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fbbfb4b7-3c4a-3ee6-9606-b758dd6f7662.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     32780
IP address blocks:        107.182.230.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ea:49:af:cd:c5:59:7f:5e:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=af713dfb-7ae8-49eb-b9c9-d628c1382258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:ee:08:7a:09:2b:d7:cb:18:98:47:40:18:
                    94:21:b2:6b:01:3c:a7:c8:c1:66:92:83:57:f7:19:
                    00:94:d6:7c:80:ec:13:82:84:cc:ad:11:db:43:41:
                    ea:80:ee:4e:e0:3d:e5:0c:e2:c0:29:51:91:32:c4:
                    14:b2:45:88:2c:29:c4:ec:93:0c:46:ba:bf:2b:f0:
                    56:57:a3:bd:de:d1:44:42:64:0d:13:dd:08:52:d0:
                    32:f2:a2:50:b5:26:16:5f:b1:cb:25:67:44:5b:29:
                    2b:c9:6c:fa:49:25:73:1f:70:ba:8d:60:13:96:a4:
                    f0:09:84:94:dc:23:8a:49:14:ed:82:17:9a:66:55:
                    1c:04:c4:4a:e8:16:13:dd:9a:ea:cf:ab:43:14:c1:
                    0d:a6:b1:9b:51:f9:bf:d0:5b:2f:ce:b2:23:40:de:
                    79:e7:3b:aa:48:0a:3e:7e:fb:a4:e2:fb:68:31:76:
                    85:8c:f2:57:32:bf:65:51:a0:6c:e0:cc:8b:44:4c:
                    92:17:1e:48:65:46:15:04:ac:1e:7e:cb:70:b9:63:
                    5c:c6:36:1f:88:b8:23:22:4d:16:eb:f0:3d:06:fc:
                    6b:ba:6e:5d:0f:2d:ab:8c:59:ee:ac:c8:e0:a2:b5:
                    26:8d:83:07:f5:59:f4:96:a4:7a:1f:19:d3:e3:5c:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AE:0E:2B:8C:76:33:2F:21:B1:D7:E1:24:41:66:A9:0A:44:EC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fbbfb4b7-3c4a-3ee6-9606-b758dd6f7662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:db:de:24:92:d7:95:c7:86:c5:2d:25:1e:5b:1c:95:1f:
         ef:5d:37:6c:4d:46:85:03:21:6a:c0:e2:12:fc:b2:b2:7e:d2:
         c3:56:03:55:08:c1:9e:d1:b0:df:f0:ef:96:14:e4:58:be:08:
         1d:52:2b:f5:50:b8:a0:b9:23:67:aa:3a:c4:41:35:9e:8c:25:
         fe:87:e5:3f:ca:a8:29:29:36:a1:5b:5c:34:56:79:4b:c9:77:
         ad:cd:ed:20:e9:32:be:4f:37:6f:87:97:d7:17:14:e9:8f:64:
         cf:c5:55:6d:37:bf:76:ce:c6:a1:27:71:8b:ed:1f:8d:7c:55:
         8b:b6:fd:52:7d:d0:d2:2f:b3:e6:81:58:d4:79:b2:b7:bd:4d:
         71:94:5c:a4:3c:7d:ca:dc:1b:b5:25:ee:ac:1a:54:25:fd:2f:
         29:a9:e4:d8:7f:71:26:98:59:a8:c2:9f:6c:a6:30:fd:be:48:
         6a:e3:de:0d:4d:e6:e9:62:3e:46:14:1f:0c:15:58:09:c6:4f:
         b9:fb:21:73:64:6a:0d:88:69:c9:bf:aa:10:67:74:73:25:14:
         16:10:45:ec:f0:a3:18:73:d6:e8:ad:22:21:a3:91:da:dd:1e:
         e5:cf:65:6a:77:a6:d0:e1:44:09:b4:7b:0b:0a:ee:29:09:2d:
         f6:91:b8:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOpJr83FWX9edqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
YWY3MTNkZmItN2FlOC00OWViLWI5YzktZDYyOGMxMzgyMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/uCHoJK9fLGJhHQBiUIbJrATynyMFmkoNX
9xkAlNZ8gOwTgoTMrRHbQ0HqgO5O4D3lDOLAKVGRMsQUskWILCnE7JMMRrq/K/BW
V6O93tFEQmQNE90IUtAy8qJQtSYWX7HLJWdEWykryWz6SSVzH3C6jWATlqTwCYSU
3COKSRTtgheaZlUcBMRK6BYT3Zrqz6tDFMENprGbUfm/0FsvzrIjQN555zuqSAo+
fvuk4vtoMXaFjPJXMr9lUaBs4MyLREySFx5IZUYVBKwefstwuWNcxjYfiLgjIk0W
6/A9Bvxrum5dDy2rjFnurMjgorUmjYMH9Vn0lqR6HxnT41xXUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImuDiuMdjMvIbHX4SRBZqkKROyEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvZmJiZmI0YjctM2M0YS0z
ZWU2LTk2MDYtYjc1OGRkNmY3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa7bmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITs294kkteVx4bFLSUeWxyVH+9dN2xNRoUDIWrA4hL8srJ+0sNWA1UI
wZ7RsN/w75YU5Fi+CB1SK/VQuKC5I2eqOsRBNZ6MJf6H5T/KqCkpNqFbXDRWeUvJ
d63N7SDpMr5PN2+Hl9cXFOmPZM/FVW03v3bOxqEncYvtH418VYu2/VJ90NIvs+aB
WNR5sre9TXGUXKQ8fcrcG7Ul7qwaVCX9Lymp5Nh/cSaYWajCn2ymMP2+SGrj3g1N
5uliPkYUHwwVWAnGT7n7IXNkag2Iacm/qhBndHMlFBYQRezwoxhz1uitIiGjkdrd
HuXPZWp3ptDhRAm0ewsK7ikJLfaRuGE=
-----END CERTIFICATE-----
Generated at Wed Nov 13 21:37:56 2024 by rpki-client on console-ams.rpki-client.org