Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa8ef997-f1eb-3980-b81e-a9da733ac578.roa
File:                     fa8ef997-f1eb-3980-b81e-a9da733ac578.roa (raw, json)
Hash identifier:          tiNS9PulT59i4PP00/eNK3vaGirc96SmrJLzVJ/8/oU=
Subject key identifier:   D9:74:C6:5A:09:E8:53:62:33:D7:21:46:B7:F4:D9:5B:9E:C4:D1:DD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584543D7FF102EB60F9019854280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa8ef997-f1eb-3980-b81e-a9da733ac578.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     834
IP address blocks:        206.206.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 16:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d7:ff:10:2e:b6:0f:90:19:85:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=5075756c-03fc-4750-9faf-cf46a40f5bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ea:ca:3a:d9:03:e6:6e:03:a8:21:e2:cb:
                    e2:5c:07:6d:5a:b3:2e:aa:c3:17:82:8b:08:c6:3f:
                    64:a0:41:02:f6:d9:cd:32:5e:8b:b9:58:0e:dd:fa:
                    d4:ad:f6:23:a7:7b:63:c1:70:81:67:bf:1b:30:df:
                    78:9f:eb:a9:f2:57:10:fb:9b:4c:18:f1:cf:20:d9:
                    a8:c9:88:95:c6:e6:fa:7b:78:88:5c:25:8d:11:07:
                    93:87:5f:0d:9e:41:cf:e6:e9:fd:68:e2:ea:95:0e:
                    7b:62:40:e8:f0:5a:09:78:d8:c3:ca:95:c1:28:3c:
                    d9:2a:c6:56:fa:e4:06:8d:c9:3c:ea:53:c7:83:76:
                    32:f9:e6:7b:f3:f4:5a:1b:e9:41:e0:f4:8f:99:99:
                    04:1d:99:aa:35:49:cd:cd:48:ac:8d:4b:bb:72:53:
                    74:6f:9b:04:36:a3:9f:90:86:5c:ee:54:b8:ef:03:
                    19:7d:df:cf:ad:07:8f:eb:06:45:ce:0b:bd:0e:40:
                    e7:4b:94:6e:07:2a:10:77:de:52:69:b3:d7:61:99:
                    39:a4:67:1f:c1:02:c9:d4:92:8a:66:36:e5:03:f3:
                    c7:4c:b1:ed:78:c5:fe:26:58:14:38:f6:c5:1f:26:
                    2a:18:31:9d:0d:14:de:f1:13:63:4a:a2:21:aa:a2:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:C6:5A:09:E8:53:62:33:D7:21:46:B7:F4:D9:5B:9E:C4:D1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa8ef997-f1eb-3980-b81e-a9da733ac578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:66:de:ee:83:95:ea:03:10:ef:5c:b8:ac:21:67:8d:6d:
         4c:d9:59:60:83:96:df:68:38:cf:cb:7d:92:45:1e:da:2c:d8:
         ba:5f:c2:2c:e7:6f:19:0d:6e:a6:fe:26:c9:e7:fc:80:de:37:
         ea:ac:44:9e:91:11:be:d3:5a:63:ad:47:e4:52:fb:56:6d:a6:
         fa:7e:5b:df:93:ff:12:7f:03:82:53:02:de:8e:40:4c:93:e9:
         a2:72:e3:62:93:1e:4a:6a:c5:c6:6e:0b:67:87:45:15:d0:2c:
         ab:61:6c:87:75:d2:5c:36:86:00:82:b7:7b:77:36:77:e6:6f:
         4f:4b:46:80:b4:fd:c0:1a:fe:98:e0:c2:86:4f:67:4b:d7:b0:
         c6:da:79:36:c7:6f:ca:2a:29:91:57:c7:fe:30:1b:93:93:72:
         ed:fa:6b:57:36:85:53:98:fd:3f:81:fd:e5:b0:d0:87:7c:af:
         64:d8:14:75:3e:56:22:73:97:8c:59:ed:76:89:6d:8c:27:6a:
         d0:e5:34:34:ce:57:80:6d:cf:01:f8:2d:2b:d4:2a:7b:df:6f:
         22:57:ca:b8:0d:5f:f9:09:a7:87:d0:39:7b:f1:63:94:a6:4a:
         ab:13:06:28:26:ec:c4:22:d8:98:94:5a:70:89:8d:f0:88:d1:
         76:c1:44:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVD1/8QLrYPkBmFQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMyMDAxMDAyNFoXDTI0MDYxODAxMDAyNFowLzEtMCsGA1UEAxMk
NTA3NTc1NmMtMDNmYy00NzUwLTlmYWYtY2Y0NmE0MGY1YmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpjqyjrZA+ZuA6gh4sviXAdtWrMuqsMXgosI
xj9koEEC9tnNMl6LuVgO3frUrfYjp3tjwXCBZ78bMN94n+up8lcQ+5tMGPHPINmo
yYiVxub6e3iIXCWNEQeTh18NnkHP5un9aOLqlQ57YkDo8FoJeNjDypXBKDzZKsZW
+uQGjck86lPHg3Yy+eZ78/RaG+lB4PSPmZkEHZmqNUnNzUisjUu7clN0b5sENqOf
kIZc7lS47wMZfd/PrQeP6wZFzgu9DkDnS5RuByoQd95SabPXYZk5pGcfwQLJ1JKK
ZjblA/PHTLHteMX+JlgUOPbFHyYqGDGdDRTe8RNjSqIhqqIWOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNl0xloJ6FNiM9chRrf02VuexNHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZmE4ZWY5OTctZjFlYi0z
OTgwLWI4MWUtYTlkYTczM2FjNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs57MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4yZt7ug5XqAxDvXLisIWeNbUzZWWCDlt9oOM/LfZJFHtos2Lpfwizn
bxkNbqb+Jsnn/IDeN+qsRJ6REb7TWmOtR+RS+1Ztpvp+W9+T/xJ/A4JTAt6OQEyT
6aJy42KTHkpqxcZuC2eHRRXQLKthbId10lw2hgCCt3t3Nnfmb09LRoC0/cAa/pjg
woZPZ0vXsMbaeTbHb8oqKZFXx/4wG5OTcu36a1c2hVOY/T+B/eWw0Id8r2TYFHU+
ViJzl4xZ7XaJbYwnatDlNDTOV4BtzwH4LSvUKnvfbyJXyrgNX/kJp4fQOXvxY5Sm
SqsTBigm7MQi2JiUWnCJjfCI0XbBRCA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:20 2024 by rpki-client on console-ams.rpki-client.org