Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/afc0482a-2029-3c8a-9f8e-ec093be9572c.roa
File:                     afc0482a-2029-3c8a-9f8e-ec093be9572c.roa (raw, json)
Hash identifier:          tH5drGQoOqUGUXi86NRpu+EcpTqCi7hN2A5FZJjFp5s=
Subject key identifier:   FB:45:D4:E9:8E:46:BE:AF:A5:99:2B:DC:9E:28:96:AF:2B:AF:72:5E
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285843C8C5B7263A49F0428157C2D0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/afc0482a-2029-3c8a-9f8e-ec093be9572c.roa
Signing time:             Sun 05 Nov 2023 06:12:14 +0000
ROA not before:           Sun 05 Nov 2023 06:12:14 +0000
ROA not after:            Sat 03 Feb 2024 06:12:14 +0000
asID:                     207787
IP address blocks:        216.177.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 05:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c8:c5:b7:26:3a:49:f0:42:81:57:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov  5 06:12:14 2023 GMT
            Not After : Feb  3 06:12:14 2024 GMT
        Subject: CN=06188ddd-0e03-4606-a89a-7c688b42be71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:a5:83:d4:72:7c:a0:29:4a:ee:19:1c:4f:
                    4f:21:07:7d:91:23:04:9f:78:77:b5:d9:8e:76:23:
                    a9:32:8c:6c:f5:3b:96:61:a9:f3:d7:9a:7c:a5:89:
                    43:56:f2:fe:bc:fd:af:a0:0a:f2:89:e5:3c:4b:ee:
                    93:64:e3:1f:4a:4b:c7:3b:d0:52:31:43:74:09:3b:
                    b4:5d:dc:be:11:7f:ec:34:68:3d:6e:0b:f3:6e:dd:
                    39:9d:fc:ca:92:7b:fe:85:66:a9:23:29:38:00:e5:
                    0f:c9:fe:7f:aa:b1:5e:09:1e:31:5b:06:b0:e8:31:
                    e4:c4:1b:b6:a1:24:1c:3d:9a:16:96:f0:35:6a:9e:
                    25:a2:9e:11:65:35:e4:97:04:90:e3:41:d6:8b:ac:
                    ae:03:23:40:e0:61:d4:6b:d0:ea:6c:7b:2c:aa:10:
                    bd:ea:12:5e:d1:f9:e4:a6:6e:11:a1:92:01:2e:6a:
                    a9:52:69:88:10:f6:86:81:7b:b6:dd:9e:85:96:da:
                    c1:93:c6:0c:fa:8e:d8:b7:8c:31:1d:fa:09:4e:a4:
                    cc:a3:8a:6f:f1:8b:1f:dd:7b:bc:b1:69:7b:b2:6d:
                    18:63:bb:a0:38:a2:06:f3:83:63:b7:e0:10:e7:cb:
                    b6:48:76:50:58:22:06:a3:96:73:bd:ed:41:57:d8:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:D4:E9:8E:46:BE:AF:A5:99:2B:DC:9E:28:96:AF:2B:AF:72:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/afc0482a-2029-3c8a-9f8e-ec093be9572c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:ab:f9:bc:6c:47:26:d9:53:ca:27:88:ef:2e:bf:7c:45:
         cc:df:26:bc:fa:b6:68:b0:b6:9e:99:d5:03:4e:e2:99:18:ff:
         86:af:23:20:02:c6:f0:4e:4e:c6:b2:c8:7e:35:7b:6f:4a:2e:
         1e:e4:da:18:6e:af:47:16:97:a8:37:51:ba:4b:f7:af:63:92:
         58:d0:de:2b:20:69:e3:d5:f9:78:41:5b:2a:16:de:9e:48:9e:
         15:70:ae:3c:61:e2:26:d2:33:9e:aa:df:8e:08:c5:a3:80:6e:
         17:6e:74:db:01:71:9a:b2:f7:3e:58:93:54:f1:0a:dc:60:e0:
         77:54:85:ed:0e:0f:ac:c8:67:58:3c:c9:1f:f3:06:50:1b:c0:
         bd:6d:76:08:a3:51:81:a4:27:d8:4e:12:33:cf:0c:dc:cb:db:
         3b:3f:84:9a:fc:97:b2:b5:d3:46:0b:d4:31:8a:7c:13:05:59:
         4f:70:70:a0:00:63:38:b6:64:5f:29:fc:a3:54:c8:b4:f5:48:
         d4:78:47:25:0d:a1:25:52:08:55:7b:e0:ec:a0:7c:e8:41:36:
         82:eb:6d:15:08:20:d3:55:04:b8:29:23:fa:c3:f2:42:24:20:
         56:21:99:76:c2:f4:3f:1b:14:a7:02:91:82:27:9f:04:ef:18:
         ba:49:e4:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPIxbcmOknwQoFXwtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTIzMTEwNTA2MTIxNFoXDTI0MDIwMzA2MTIxNFowLzEtMCsGA1UEAxMk
MDYxODhkZGQtMGUwMy00NjA2LWE4OWEtN2M2ODhiNDJiZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4elg9RyfKApSu4ZHE9PIQd9kSMEn3h3tdmO
diOpMoxs9TuWYanz15p8pYlDVvL+vP2voAryieU8S+6TZOMfSkvHO9BSMUN0CTu0
Xdy+EX/sNGg9bgvzbt05nfzKknv+hWapIyk4AOUPyf5/qrFeCR4xWwaw6DHkxBu2
oSQcPZoWlvA1ap4lop4RZTXklwSQ40HWi6yuAyNA4GHUa9DqbHssqhC96hJe0fnk
pm4RoZIBLmqpUmmIEPaGgXu23Z6FltrBk8YM+o7Yt4wxHfoJTqTMo4pv8Ysf3Xu8
sWl7sm0YY7ugOKIG84Njt+AQ58u2SHZQWCIGo5Zzve1BV9hj5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtF1OmORr6vpZkr3J4olq8rr3JeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYWZjMDQ4MmEtMjAyOS0z
YzhhLTlmOGUtZWMwOTNiZTk1NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB46q/m8bEcm2VPKJ4jvLr98RczfJrz6tmiwtp6Z1QNO4pkY/4avIyAC
xvBOTsayyH41e29KLh7k2hhur0cWl6g3UbpL969jkljQ3isgaePV+XhBWyoW3p5I
nhVwrjxh4ibSM56q344IxaOAbhdudNsBcZqy9z5Yk1TxCtxg4HdUhe0OD6zIZ1g8
yR/zBlAbwL1tdgijUYGkJ9hOEjPPDNzL2zs/hJr8l7K100YL1DGKfBMFWU9wcKAA
Yzi2ZF8p/KNUyLT1SNR4RyUNoSVSCFV74OygfOhBNoLrbRUIINNVBLgpI/rD8kIk
IFYhmXbC9D8bFKcCkYInnwTvGLpJ5AQ=
-----END CERTIFICATE-----
Generated at Thu Jan 11 06:52:35 2024 by rpki-client on console-fra.rpki-client.org