Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5efd3b83-043e-3666-a633-b093c7c90864.roa
File:                     5efd3b83-043e-3666-a633-b093c7c90864.roa (raw, json)
Hash identifier:          Lu1on5xclmQyakNVbR4nO/8dqrQbRu//U+IIdIrYX+o=
Subject key identifier:   74:99:83:61:BF:E8:B2:C6:03:61:90:61:B3:80:D3:28:90:F0:A2:BA
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F43285846C7E523AB214D7E5116253480
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5efd3b83-043e-3666-a633-b093c7c90864.roa
Signing time:             Tue 06 Aug 2024 01:00:28 +0000
ROA not before:           Tue 06 Aug 2024 01:00:28 +0000
ROA not after:            Mon 04 Nov 2024 02:00:28 +0000
asID:                     212271
IP address blocks:        208.65.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 20:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:e5:23:ab:21:4d:7e:51:16:25:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Aug  6 01:00:28 2024 GMT
            Not After : Nov  4 02:00:28 2024 GMT
        Subject: CN=ffb44444-7770-4027-ac5b-b95a5b8404b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:40:0f:d1:76:d9:c0:15:f8:cc:cf:67:59:
                    94:ea:2d:90:6c:7f:37:40:03:c2:f4:ea:4c:22:f5:
                    39:f0:fb:6d:c0:d3:fd:35:93:e6:d2:83:d8:de:e2:
                    14:6a:08:61:22:5b:14:9f:4b:c5:8f:0d:d2:9f:88:
                    80:e2:7a:c7:f7:ee:53:48:76:9c:95:fc:88:f2:0f:
                    ee:39:26:fc:91:c0:70:f9:6c:33:f4:9a:d5:58:1b:
                    a5:c3:69:c9:25:8b:a7:34:a7:87:2d:b2:80:47:2f:
                    f0:88:fe:ea:1b:e2:bf:bf:59:22:22:65:ca:1c:64:
                    da:ec:cb:13:05:f7:90:7c:bf:71:a5:6b:9c:da:ca:
                    df:07:32:cd:13:94:e1:da:77:94:c3:3b:ce:e4:38:
                    5a:b1:e6:a5:17:a6:d8:20:4a:5f:ab:a5:45:fe:66:
                    d5:31:4f:9e:63:81:f8:23:bc:7a:cc:bb:fd:28:c9:
                    c5:f5:e9:4a:df:8a:35:3c:92:cb:bd:af:62:14:29:
                    8b:23:df:0d:06:36:0c:56:fe:e9:00:04:7b:65:91:
                    db:76:af:80:6f:de:ce:27:ac:41:bb:1f:22:77:93:
                    17:33:d8:29:8f:11:c5:01:58:bb:bc:cd:ab:19:9e:
                    7d:ae:1e:b0:6a:85:f2:df:34:14:5c:31:36:9d:3c:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:83:61:BF:E8:B2:C6:03:61:90:61:B3:80:D3:28:90:F0:A2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5efd3b83-043e-3666-a633-b093c7c90864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:bf:dd:e4:04:a0:e3:3f:e0:83:5e:5b:14:38:6b:39:0f:
         72:3c:06:68:c0:4e:9e:19:91:fa:78:9e:1b:d3:46:f4:9f:38:
         80:f7:e0:3f:4f:57:19:9d:54:3a:19:24:cd:29:35:6e:87:4b:
         f9:96:b1:93:d7:4d:98:5e:f2:84:60:55:2c:ad:5b:28:a3:98:
         4c:7d:70:ad:5f:d4:f8:a6:5a:b3:a4:6e:60:0e:74:07:cf:46:
         1f:de:54:2e:c3:2f:e3:09:50:4b:a8:40:4a:f6:2c:01:83:3b:
         13:6f:f1:68:f0:c8:6b:b9:23:f0:4a:11:b1:4c:be:5a:c5:6d:
         b7:65:be:15:0c:af:c8:85:a3:03:7a:cc:41:27:ce:d0:fc:8d:
         9f:53:7e:94:51:6b:98:c4:5e:cd:4c:ef:44:54:95:cf:40:95:
         e3:74:5a:d2:21:98:fb:1f:11:b0:1d:15:ef:c3:ca:89:7a:a7:
         96:19:91:c2:26:2d:86:ca:9d:50:33:cf:b2:15:36:93:8e:3f:
         1c:9c:05:89:61:19:11:38:e0:15:89:d8:b8:9f:4a:d3:98:ed:
         34:65:c9:84:5a:cb:30:33:62:da:7c:2f:79:ba:12:33:d8:d6:
         29:5d:cd:a9:6b:24:e4:e3:8f:3d:58:eb:e7:a7:7a:f2:ea:58:
         d2:e8:ec:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbH5SOrIU1+URYlNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2
NDAxMB4XDTI0MDgwNjAxMDAyOFoXDTI0MTEwNDAyMDAyOFowLzEtMCsGA1UEAxMk
ZmZiNDQ0NDQtNzc3MC00MDI3LWFjNWItYjk1YTViODQwNGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJAD9F22cAV+MzPZ1mU6i2QbH83QAPC9OpM
IvU58PttwNP9NZPm0oPY3uIUaghhIlsUn0vFjw3Sn4iA4nrH9+5TSHaclfyI8g/u
OSb8kcBw+Wwz9JrVWBulw2nJJYunNKeHLbKARy/wiP7qG+K/v1kiImXKHGTa7MsT
BfeQfL9xpWuc2srfBzLNE5Th2neUwzvO5DhasealF6bYIEpfq6VF/mbVMU+eY4H4
I7x6zLv9KMnF9elK34o1PJLLva9iFCmLI98NBjYMVv7pAAR7ZZHbdq+Ab97OJ6xB
ux8id5MXM9gpjxHFAVi7vM2rGZ59rh6waoXy3zQUXDE2nTxWDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSZg2G/6LLGA2GQYbOA0yiQ8KK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz
NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvNWVmZDNiODMtMDQzZS0z
NjY2LWE2MzMtYjA5M2M3YzkwODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl
ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1
NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4
ODY2NTY0MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EFXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+fv93kBKDjP+CDXlsUOGs5D3I8BmjATp4Zkfp4nhvTRvSfOID34D9P
VxmdVDoZJM0pNW6HS/mWsZPXTZhe8oRgVSytWyijmEx9cK1f1PimWrOkbmAOdAfP
Rh/eVC7DL+MJUEuoQEr2LAGDOxNv8WjwyGu5I/BKEbFMvlrFbbdlvhUMr8iFowN6
zEEnztD8jZ9TfpRRa5jEXs1M70RUlc9AleN0WtIhmPsfEbAdFe/Dyol6p5YZkcIm
LYbKnVAzz7IVNpOOPxycBYlhGRE44BWJ2LifStOY7TRlyYRayzAzYtp8L3m6EjPY
1ildzalrJOTjjz1Y6+enevLqWNLo7Ns=
-----END CERTIFICATE-----
Generated at Tue Oct 15 22:51:29 2024 by rpki-client on console-ams.rpki-client.org