Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6d3ffaa-5276-3773-aba9-72d5c29370d4.roa
File:                     d6d3ffaa-5276-3773-aba9-72d5c29370d4.roa (raw, json)
Hash identifier:          c7gxOAlci81J3vgW9vy279Mqq4q+CLF0FZue7jEaEFs=
Subject key identifier:   A1:E6:90:8C:98:F1:2E:05:32:23:AC:90:F1:6A:16:14:9A:99:E9:E0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845F2B99B78E85A7608A41131A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6d3ffaa-5276-3773-aba9-72d5c29370d4.roa
Signing time:             Tue 21 May 2024 16:25:40 +0000
ROA not before:           Tue 21 May 2024 16:25:40 +0000
ROA not after:            Mon 19 Aug 2024 16:25:40 +0000
asID:                     400866
IP address blocks:        216.107.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 06:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:b9:9b:78:e8:5a:76:08:a4:11:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 21 16:25:40 2024 GMT
            Not After : Aug 19 16:25:40 2024 GMT
        Subject: CN=2cf3cfeb-d8ab-4089-9d48-e9bab9486450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:0b:0c:82:b9:cf:2c:ff:15:b6:d1:6c:38:
                    b8:9e:0a:13:89:c7:dc:a2:a7:39:db:f2:37:a1:c0:
                    53:41:a0:d3:27:e8:96:81:8e:23:8e:c8:c6:6b:44:
                    3b:96:b9:7c:8f:71:5c:bd:46:eb:3f:9a:89:c3:f6:
                    f3:51:58:96:90:d9:4d:0c:3a:58:c6:99:f2:a1:3c:
                    b0:e6:7f:ec:2c:67:a9:63:7c:07:5d:ee:7d:b3:3a:
                    ce:40:a0:36:13:d5:9e:ac:39:55:19:1e:97:be:58:
                    14:f4:0e:c2:d0:34:9b:bb:d6:8a:c7:37:3c:8c:b8:
                    c7:dc:07:a8:5d:67:3b:d9:e2:d8:b9:03:dc:b6:52:
                    1f:35:01:2b:30:fe:c3:d6:b2:f8:df:f2:64:e6:06:
                    d2:61:27:65:67:93:6a:c6:ea:ed:19:43:e2:ac:f6:
                    31:fb:08:58:f9:ed:2c:4e:f2:5a:eb:80:6c:34:23:
                    5a:06:08:f7:b4:0e:1e:9b:36:fc:a1:23:c3:7f:2b:
                    a2:98:cd:33:0d:b2:2b:da:7e:e1:ca:b1:9b:e4:f6:
                    eb:08:4d:04:e2:a5:d1:2c:c5:ed:a8:61:3a:66:19:
                    5a:10:a3:f2:90:49:b6:5a:68:f9:9e:18:20:18:8e:
                    43:da:7d:c2:49:0d:fc:93:48:cc:66:72:63:e2:08:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:90:8C:98:F1:2E:05:32:23:AC:90:F1:6A:16:14:9A:99:E9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6d3ffaa-5276-3773-aba9-72d5c29370d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:d3:67:c6:9f:7e:09:31:c9:7f:3c:7a:38:43:16:6e:1a:
         ad:db:86:f4:59:22:c1:1d:cd:2e:6f:c7:11:d2:00:16:df:8b:
         eb:b4:14:2e:49:31:2b:24:80:25:e9:54:d0:b3:c6:b1:d5:b2:
         68:3b:4f:0d:31:f8:60:df:0d:62:7a:a1:fc:20:41:63:58:f3:
         4c:23:a6:cc:df:71:2c:09:6b:3e:3d:5f:e3:0f:48:5a:33:2c:
         f8:1a:cc:1b:56:5e:51:8c:ca:9d:bc:e2:bd:e3:9d:08:c5:af:
         ed:11:8d:eb:88:35:7e:09:4c:4e:c7:5d:12:4c:5f:83:da:b7:
         a9:12:cc:cc:74:c7:63:fb:91:0b:41:95:66:ba:d5:b8:e6:4b:
         1e:1f:96:42:f1:52:e1:82:53:bb:4e:31:18:05:3c:19:ee:f0:
         c0:a7:31:ae:d1:92:0d:1c:c3:44:a3:7c:1c:d9:fd:c9:7b:56:
         f8:e3:eb:57:88:41:39:f5:dd:da:12:1e:dd:12:f3:34:dd:6c:
         1f:ab:c7:35:b2:a3:81:de:2c:b7:e5:66:42:8d:58:4b:52:0e:
         5d:e1:5f:8a:a3:55:5f:06:82:4a:1f:f4:81:e3:9c:37:18:45:
         3f:b1:49:39:8a:4e:91:4d:e8:8a:46:24:3f:be:9e:af:50:2a:
         cb:a5:76:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXyuZt46Fp2CKQRMaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDUyMTE2MjU0MFoXDTI0MDgxOTE2MjU0MFowLzEtMCsGA1UEAxMk
MmNmM2NmZWItZDhhYi00MDg5LTlkNDgtZTliYWI5NDg2NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMgLDIK5zyz/FbbRbDi4ngoTicfcoqc52/I3
ocBTQaDTJ+iWgY4jjsjGa0Q7lrl8j3FcvUbrP5qJw/bzUViWkNlNDDpYxpnyoTyw
5n/sLGepY3wHXe59szrOQKA2E9WerDlVGR6XvlgU9A7C0DSbu9aKxzc8jLjH3Aeo
XWc72eLYuQPctlIfNQErMP7D1rL43/Jk5gbSYSdlZ5NqxurtGUPirPYx+whY+e0s
TvJa64BsNCNaBgj3tA4emzb8oSPDfyuimM0zDbIr2n7hyrGb5PbrCE0E4qXRLMXt
qGE6ZhlaEKPykEm2Wmj5nhggGI5D2n3CSQ38k0jMZnJj4gjQxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHmkIyY8S4FMiOskPFqFhSamengMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDZkM2ZmYWEtNTI3Ni0z
NzczLWFiYTktNzJkNWMyOTM3MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GuDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1E02fGn34JMcl/PHo4QxZuGq3bhvRZIsEdzS5vxxHSABbfi+u0FC5J
MSskgCXpVNCzxrHVsmg7Tw0x+GDfDWJ6ofwgQWNY80wjpszfcSwJaz49X+MPSFoz
LPgazBtWXlGMyp284r3jnQjFr+0RjeuINX4JTE7HXRJMX4Pat6kSzMx0x2P7kQtB
lWa61bjmSx4flkLxUuGCU7tOMRgFPBnu8MCnMa7Rkg0cw0SjfBzZ/cl7Vvjj61eI
QTn13doSHt0S8zTdbB+rxzWyo4HeLLflZkKNWEtSDl3hX4qjVV8Ggkof9IHjnDcY
RT+xSTmKTpFN6IpGJD++nq9QKsuldnk=
-----END CERTIFICATE-----