Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/2521f51c-74dc-34b2-a574-91a51981907d.roa
File:                     2521f51c-74dc-34b2-a574-91a51981907d.roa (raw, json)
Hash identifier:          LaSlhVEWAKcfZ+XNr/9PhNsmL12sF90aA0UkP/wByxs=
Subject key identifier:   C4:9F:9F:21:93:33:51:88:E5:AF:2C:71:70:38:09:FA:04:9B:B1:11
Certificate issuer:       /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial:       010D0C9F43285847C1DF4E133208AD811370C070
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/2521f51c-74dc-34b2-a574-91a51981907d.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     400808
IP address blocks:        66.33.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 22:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:4e:13:32:08:ad:81:13:70:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=7987f5e1-1be0-4934-8643-07647b1a6692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:e2:13:19:7f:52:24:ae:46:28:71:92:a5:
                    11:79:fa:53:fe:3c:68:62:f3:b8:fa:30:39:26:4d:
                    be:9c:8e:a0:e6:de:46:ab:f6:d5:c4:5d:a3:cc:7c:
                    d7:fc:07:50:57:c7:67:17:ff:de:03:9a:51:ed:5b:
                    3a:de:1e:fe:5a:58:04:7e:70:55:b6:63:ef:51:a3:
                    6f:bd:86:e4:9f:aa:2d:a1:b2:5f:e2:d6:f8:2b:a5:
                    99:0b:3a:dc:76:e5:0a:c2:89:39:c5:5d:6f:ad:8f:
                    0d:ca:a5:5d:5d:f4:1c:b7:fc:77:4f:51:87:1f:b2:
                    88:94:83:22:be:d4:6f:30:cb:8e:7a:04:a3:b6:bb:
                    25:03:ae:ec:07:31:ce:a2:db:cd:80:e0:65:09:ef:
                    f9:f8:bf:be:2e:4d:91:e2:fe:44:d3:04:15:61:97:
                    a2:43:1d:e4:16:a2:ce:19:d5:13:76:da:fe:cb:fe:
                    02:6f:ba:d1:50:26:f9:56:90:3f:9b:1b:d7:b3:bb:
                    a6:3b:d3:47:2d:6c:4d:0d:c6:39:98:09:ef:d3:44:
                    f9:08:d4:09:36:8c:9f:1e:0e:21:c7:a7:1b:bc:26:
                    e5:e0:c7:66:3f:c2:ad:95:87:99:56:5e:06:f8:82:
                    5e:df:16:9f:2c:79:f7:ac:09:b3:6a:40:9e:08:0f:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:9F:21:93:33:51:88:E5:AF:2C:71:70:38:09:FA:04:9B:B1:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/2521f51c-74dc-34b2-a574-91a51981907d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl

            X509v3 Authority Key Identifier:
                keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:32:dc:b9:ec:fb:7d:56:50:97:44:b3:23:1d:be:a9:e3:d1:
         1d:82:c2:05:04:c5:55:72:ab:4d:8d:41:8d:a6:91:86:0d:50:
         2e:12:7f:45:79:dd:96:54:41:bd:de:33:43:c0:8d:f4:53:63:
         a5:82:86:31:e0:d7:49:03:96:7c:90:52:38:4f:52:7d:22:d3:
         ee:3d:0d:47:59:31:c6:93:9b:fe:54:3b:86:d9:6d:a6:eb:9b:
         4e:ce:96:65:65:2b:db:fe:56:b2:18:94:da:15:ee:38:51:75:
         1a:a5:33:df:82:e1:5c:6e:68:d7:c8:aa:0e:f6:a4:8b:90:17:
         24:99:dd:d8:79:b8:4d:07:46:5a:7a:fb:2f:d8:5b:d8:60:90:
         d7:ec:6d:28:66:c5:72:87:20:50:33:c4:e9:f3:31:69:a0:61:
         99:cd:2b:eb:8d:7a:a1:53:28:cc:81:01:e1:14:03:45:38:b4:
         fa:14:19:df:16:a3:14:8c:d9:26:36:19:b8:40:df:4e:5c:2f:
         d6:ea:0a:d1:e8:e4:bb:38:9d:70:36:a8:15:2a:ee:11:b0:e1:
         be:bf:9e:63:77:6c:32:8f:44:8c:a6:01:f3:c1:9d:00:90:96:
         9a:d1:8c:90:02:55:bf:e0:a7:8a:da:05:5c:be:e5:77:59:eb:
         66:4e:d7:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB304TMgitgRNwwHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlZDYxODUtMTg2Yy00ZGE4LTkyNTMtN2Y2MTczMWFl
ZjI1MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
Nzk4N2Y1ZTEtMWJlMC00OTM0LTg2NDMtMDc2NDdiMWE2NjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF7iExl/UiSuRihxkqURefpT/jxoYvO4+jA5
Jk2+nI6g5t5Gq/bVxF2jzHzX/AdQV8dnF//eA5pR7Vs63h7+WlgEfnBVtmPvUaNv
vYbkn6otobJf4tb4K6WZCzrcduUKwok5xV1vrY8NyqVdXfQct/x3T1GHH7KIlIMi
vtRvMMuOegSjtrslA67sBzHOotvNgOBlCe/5+L++Lk2R4v5E0wQVYZeiQx3kFqLO
GdUTdtr+y/4Cb7rRUCb5VpA/mxvXs7umO9NHLWxNDcY5mAnv00T5CNQJNoyfHg4h
x6cbvCbl4MdmP8KtlYeZVl4G+IJe3xafLHn3rAmzakCeCA8xnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSfnyGTM1GI5a8scXA4CfoEm7ERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYmVk
NjE4NS0xODZjLTRkYTgtOTI1My03ZjYxNzMxYWVmMjUvMjUyMWY1MWMtNzRkYy0z
NGIyLWE1NzQtOTFhNTE5ODE5MDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGJlZDYxODUtMTg2Yy00ZGE4LTky
NTMtN2Y2MTczMWFlZjI1LzBiZWQ2MTg1LTE4NmMtNGRhOC05MjUzLTdmNjE3MzFh
ZWYyNS5jcmwwHwYDVR0jBBgwFoAUQCIapIrE96pnpTsYYnt6uYyoJH8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYmVkNjE4NS0xODZjLTRkYTgtOTI1My03ZjYx
NzMxYWVmMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMy3Lns+31WUJdEsyMdvqnj0R2CwgUExVVyq02NQY2mkYYNUC4Sf0V5
3ZZUQb3eM0PAjfRTY6WChjHg10kDlnyQUjhPUn0i0+49DUdZMcaTm/5UO4bZbabr
m07OlmVlK9v+VrIYlNoV7jhRdRqlM9+C4VxuaNfIqg72pIuQFySZ3dh5uE0HRlp6
+y/YW9hgkNfsbShmxXKHIFAzxOnzMWmgYZnNK+uNeqFTKMyBAeEUA0U4tPoUGd8W
oxSM2SY2GbhA305cL9bqCtHo5Ls4nXA2qBUq7hGw4b6/nmN3bDKPRIymAfPBnQCQ
lprRjJACVb/gp4raBVy+5XdZ62ZO19Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:11:07 2024 by rpki-client on console-ams.rpki-client.org