Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/56b8c077-6f15-3009-9564-84d8227136f1.roa
File:                     56b8c077-6f15-3009-9564-84d8227136f1.roa (raw, json)
Hash identifier:          wV7Hq5OHejcZxIql9v6Dtv1e8ZmPX+QDxF1MFj36aow=
Subject key identifier:   ED:43:8F:A7:29:12:19:AE:69:81:77:C1:5A:A0:BE:E8:8B:48:B2:A4
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328583AB185E32E7F57110B7D68D190
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/56b8c077-6f15-3009-9564-84d8227136f1.roa
Signing time:             Mon 12 Jul 2021 04:00:00 +0000
ROA not before:           Mon 12 Jul 2021 04:00:00 +0000
ROA not after:            Sat 12 Jul 2031 04:00:00 +0000
asID:                     399883
IP address blocks:        104.247.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 31 Jan 2023 17:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:b1:85:e3:2e:7f:57:11:0b:7d:68:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jul 12 04:00:00 2021 GMT
            Not After : Jul 12 04:00:00 2031 GMT
        Subject: CN=348790ea-accf-434a-8f70-56325f76ad4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:7a:94:52:44:80:29:4b:d9:d8:be:88:61:
                    e0:dd:5f:49:24:11:d9:27:78:d8:a4:13:24:9c:b9:
                    0b:83:ed:79:14:c0:5a:3e:32:74:81:39:54:7b:e4:
                    e6:5b:11:c1:f3:e5:c6:58:3a:08:ff:98:0b:0f:16:
                    64:34:87:43:7c:bf:f4:89:f6:b0:c2:b6:55:52:05:
                    6d:78:ca:cd:ae:e9:c7:2a:44:c0:e5:f7:32:64:f8:
                    d7:07:c4:6e:b2:68:85:13:9e:f3:e3:81:cb:c1:5e:
                    11:42:e1:f8:63:e1:dd:28:c4:5a:41:e2:0a:bc:63:
                    7e:40:3e:3f:32:46:a7:96:97:a1:e8:5a:14:b5:19:
                    ce:a5:d1:f1:03:a6:96:a5:8e:e7:97:3c:16:f3:da:
                    d0:39:b5:1c:51:e9:f6:fe:45:17:78:8e:13:cf:7b:
                    4c:10:86:6e:62:a7:fa:15:0a:f5:34:fd:03:ad:35:
                    8b:d6:67:9e:bd:30:13:dd:c6:be:c5:d0:d5:21:62:
                    e2:c6:23:ec:13:b8:b1:35:50:44:dc:11:1c:98:3e:
                    dc:15:5b:05:ac:dc:ca:ea:be:ec:04:dc:5e:98:c7:
                    ff:23:ae:e5:37:12:b8:b3:17:ae:57:1e:6c:14:09:
                    9a:d3:aa:58:00:2e:85:3e:86:85:66:19:c0:c3:e8:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:43:8F:A7:29:12:19:AE:69:81:77:C1:5A:A0:BE:E8:8B:48:B2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/56b8c077-6f15-3009-9564-84d8227136f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:9d:41:84:9a:42:13:1e:a1:e0:e9:c4:bc:77:15:1e:58:
         54:a8:29:47:36:7d:e2:c4:e1:7d:0d:d7:7a:23:b9:21:17:89:
         09:ec:15:fe:0c:e9:6a:fe:8d:34:24:25:17:91:1d:a2:74:ea:
         eb:22:2e:0b:5a:93:88:a7:88:ea:8c:62:2a:12:90:93:a2:fd:
         b9:96:d0:af:f1:8a:d1:2e:ae:bc:06:ba:22:e4:df:e9:bb:f6:
         53:68:cf:d3:3b:2f:4c:a3:7a:70:b8:dd:60:97:cd:74:a9:d1:
         de:b7:6b:49:47:26:d8:8a:c7:43:c6:7b:26:a7:bd:f4:fa:9d:
         3a:16:5b:1d:66:c1:21:80:bd:34:ce:32:bc:cd:a5:49:d7:ab:
         0e:b1:0c:39:4a:4a:e2:37:ae:0c:92:1c:cb:f2:f0:42:61:0c:
         34:86:63:30:39:9d:26:d5:26:88:aa:7b:eb:0e:a1:12:4c:74:
         2e:a5:87:94:b3:10:63:11:09:ac:dd:d8:24:08:33:f9:b0:d4:
         88:67:2b:f0:c7:96:1d:bd:f6:46:c9:7b:53:88:d9:ec:5a:f9:
         a2:de:0c:27:ed:f9:de:f1:a3:64:6c:b4:72:b8:e0:fc:6f:ce:
         37:8e:d0:71:6e:0f:e9:bc:cb:5f:de:49:8c:d6:12:72:ea:52:
         47:40:d3:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqxheMuf1cRC31o0ZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIw
MTg2MB4XDTIxMDcxMjA0MDAwMFoXDTMxMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ4NzkwZWEtYWNjZi00MzRhLThmNzAtNTYzMjVmNzZhZDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeR6lFJEgClL2di+iGHg3V9JJBHZJ3jYpBMk
nLkLg+15FMBaPjJ0gTlUe+TmWxHB8+XGWDoI/5gLDxZkNIdDfL/0ifawwrZVUgVt
eMrNrunHKkTA5fcyZPjXB8RusmiFE57z44HLwV4RQuH4Y+HdKMRaQeIKvGN+QD4/
Mkanlpeh6FoUtRnOpdHxA6aWpY7nlzwW89rQObUcUen2/kUXeI4Tz3tMEIZuYqf6
FQr1NP0DrTWL1meevTAT3ca+xdDVIWLixiPsE7ixNVBE3BEcmD7cFVsFrNzK6r7s
BNxemMf/I67lNxK4sxeuVx5sFAma06pYAC6FPoaFZhnAw+jNDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1Dj6cpEhmuaYF3wVqgvuiLSLKkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4
ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvNTZiOGMwNzctNmYxNS0z
MDA5LTk1NjQtODRkODIyNzEzNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmUwOGUwZGUtYWI1ZS00ODgzLThm
MDktN2Q5NTcwZjIwMTg2LzZlMDhlMGRlLWFiNWUtNDg4My04ZjA5LTdkOTU3MGYy
MDE4Ni5jcmwwHwYDVR0jBBgwFoAU62igpaUyYfOMs5A+D0fqSS+zhlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1
NzBmMjAxODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQLnUGEmkITHqHg6cS8dxUeWFSoKUc2feLE4X0N13ojuSEXiQnsFf4M
6Wr+jTQkJReRHaJ06usiLgtak4iniOqMYioSkJOi/bmW0K/xitEurrwGuiLk3+m7
9lNoz9M7L0yjenC43WCXzXSp0d63a0lHJtiKx0PGeyanvfT6nToWWx1mwSGAvTTO
MrzNpUnXqw6xDDlKSuI3rgySHMvy8EJhDDSGYzA5nSbVJoiqe+sOoRJMdC6lh5Sz
EGMRCazd2CQIM/mw1IhnK/DHlh299kbJe1OI2exa+aLeDCft+d7xo2RstHK44Pxv
zjeO0HFuD+m8y1/eSYzWEnLqUkdA08A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org