Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ddf53070-d8f4-3e5c-a038-cef36799d3dc.roa
File:                     ddf53070-d8f4-3e5c-a038-cef36799d3dc.roa (raw, json)
Hash identifier:          qOmfYPofTGEfx6377EFrVRraAx4miuSLWE5Hh4T1HFg=
Subject key identifier:   32:AE:F9:6C:C6:EF:28:EC:07:73:CE:CA:3B:BC:B6:67:00:F6:15:F4
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285846970A306469523CA41E40B500
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ddf53070-d8f4-3e5c-a038-cef36799d3dc.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     149181
IP address blocks:        103.24.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 05:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:30:64:69:52:3c:a4:1e:40:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=ab74da27-db91-46d4-b63c-4161b11585ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:68:8c:e5:38:b2:18:90:f5:35:2f:cb:32:
                    18:39:02:ee:6f:52:7a:dd:6a:f1:6e:96:7e:00:01:
                    de:5a:b9:9a:3c:8e:e1:55:1c:d6:7e:86:26:ac:9d:
                    eb:7e:7c:a5:1c:7d:27:56:99:fd:a1:e2:4b:09:1b:
                    47:64:a2:22:21:6b:9a:c1:7b:52:35:53:79:cc:0d:
                    8f:d3:2c:71:f6:45:18:8e:a3:9c:53:cb:83:8a:2c:
                    d4:14:04:69:ac:2a:5d:ca:48:c2:fe:e0:7b:58:b4:
                    d8:ba:d0:c4:6e:a5:e6:32:ce:93:77:8f:e4:20:6d:
                    46:01:d0:55:e9:97:32:dc:65:8e:d9:c8:d4:7a:6e:
                    8f:2b:a5:bb:bd:c7:f2:5a:98:12:d7:cb:61:6d:dd:
                    fc:85:51:ec:5e:57:8f:53:cb:7d:38:3c:15:cd:d6:
                    6c:0d:63:af:99:a5:a3:ee:6a:ba:cc:44:1e:31:da:
                    82:da:4a:0a:94:e4:0c:47:9f:ff:95:0b:b8:d2:57:
                    77:f9:20:ee:fe:80:2d:06:f0:4a:e9:c5:f7:02:6a:
                    8f:f5:3f:47:94:9b:8a:63:32:5e:cc:9b:a9:7b:c6:
                    45:6a:c3:3a:22:11:60:45:d6:96:ee:b7:6c:21:9f:
                    a8:cf:1b:dc:71:38:24:6a:4f:9c:85:7c:a6:56:41:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AE:F9:6C:C6:EF:28:EC:07:73:CE:CA:3B:BC:B6:67:00:F6:15:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ddf53070-d8f4-3e5c-a038-cef36799d3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:da:8d:17:9c:19:84:3c:fc:fe:fa:8a:cb:09:d9:c4:cb:
         24:9f:d9:14:a8:07:78:e7:f2:4d:af:af:ef:38:08:b2:c7:65:
         01:e0:9b:ac:b2:67:46:2d:77:6f:1a:29:dc:77:66:b1:bb:81:
         55:4f:87:bc:3f:3c:b3:a7:7d:a9:18:8e:2e:a3:54:36:f7:a3:
         f6:bf:dc:c1:d9:33:0c:7f:b5:f5:f7:1f:9c:65:18:b5:7b:4c:
         5d:90:54:6c:7a:1e:3b:bc:72:23:d7:13:04:c4:73:21:5c:f4:
         ca:57:6d:b4:24:6b:cd:24:be:87:73:24:e5:57:69:12:af:ed:
         ed:70:97:d5:00:a8:9b:00:5b:c2:02:5c:f4:4a:a7:98:d8:74:
         fa:09:bd:5c:e9:81:ef:25:6c:eb:3e:46:84:1f:3d:8e:4a:f8:
         6f:da:c1:8e:ad:bd:6c:14:53:95:69:4c:b8:4f:c7:c8:73:36:
         80:98:5b:14:9d:a5:e9:d4:73:f6:ff:ae:85:01:bf:86:3b:b5:
         4c:36:65:da:bf:cc:81:9e:20:0f:75:63:1e:36:47:50:d8:4d:
         34:5c:91:49:f0:83:76:75:9f:61:7a:e9:08:b6:85:4b:18:cf:
         da:d1:1f:32:9c:22:1e:c5:82:3e:d7:13:ee:9b:9c:16:b9:d2:
         46:f6:2e:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCjBkaVI8pB5AtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
YWI3NGRhMjctZGI5MS00NmQ0LWI2M2MtNDE2MWIxMTU4NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ZojOU4shiQ9TUvyzIYOQLub1J63WrxbpZ+
AAHeWrmaPI7hVRzWfoYmrJ3rfnylHH0nVpn9oeJLCRtHZKIiIWuawXtSNVN5zA2P
0yxx9kUYjqOcU8uDiizUFARprCpdykjC/uB7WLTYutDEbqXmMs6Td4/kIG1GAdBV
6Zcy3GWO2cjUem6PK6W7vcfyWpgS18thbd38hVHsXlePU8t9ODwVzdZsDWOvmaWj
7mq6zEQeMdqC2koKlOQMR5//lQu40ld3+SDu/oAtBvBK6cX3AmqP9T9HlJuKYzJe
zJupe8ZFasM6IhFgRdaW7rdsIZ+ozxvccTgkak+chXymVkG4ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKu+WzG7yjsB3POyju8tmcA9hX0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvZGRmNTMwNzAtZDhmNC0z
ZTVjLWEwMzgtY2VmMzY3OTlkM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxjpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8f2o0XnBmEPPz++orLCdnEyySf2RSoB3jn8k2vr+84CLLHZQHgm6yy
Z0Ytd28aKdx3ZrG7gVVPh7w/PLOnfakYji6jVDb3o/a/3MHZMwx/tfX3H5xlGLV7
TF2QVGx6Hju8ciPXEwTEcyFc9MpXbbQka80kvodzJOVXaRKv7e1wl9UAqJsAW8IC
XPRKp5jYdPoJvVzpge8lbOs+RoQfPY5K+G/awY6tvWwUU5VpTLhPx8hzNoCYWxSd
penUc/b/roUBv4Y7tUw2Zdq/zIGeIA91Yx42R1DYTTRckUnwg3Z1n2F66Qi2hUsY
z9rRHzKcIh7Fgj7XE+6bnBa50kb2Lrg=
-----END CERTIFICATE-----