Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/cca605e6-eec2-3d11-bc9a-80488512639e.roa
File:                     cca605e6-eec2-3d11-bc9a-80488512639e.roa (raw, json)
Hash identifier:          P4YMKUcMR5P9XFU8e+T6IoFJB3ww26kRMbNksqI24q0=
Subject key identifier:   53:3D:F7:CA:00:DC:54:0B:67:C6:6C:EA:AC:8C:42:B9:CD:0C:04:07
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B5D0C731DC4444F52599E00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/cca605e6-eec2-3d11-bc9a-80488512639e.roa
Signing time:             Thu 05 Dec 2024 15:21:12 +0000
ROA not before:           Thu 05 Dec 2024 15:21:12 +0000
ROA not after:            Wed 05 Mar 2025 15:21:12 +0000
asID:                     376
IP address blocks:        132.213.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:5d:0c:73:1d:c4:44:4f:52:59:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:21:12 2024 GMT
            Not After : Mar  5 15:21:12 2025 GMT
        Subject: CN=5d253d8f-6062-45d7-aea1-3f898088e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:71:39:53:23:13:75:78:f0:97:1a:08:c6:
                    4e:e1:2a:3f:9f:d8:b4:0e:32:bc:d9:97:f1:7b:01:
                    1d:c1:2b:b9:05:54:19:62:b9:45:39:f7:49:4c:6b:
                    bb:e8:09:6d:b4:2b:0b:9e:ff:aa:46:8a:76:09:d7:
                    55:dc:5c:85:90:60:bd:21:c6:6c:97:26:bb:76:a8:
                    55:63:31:d4:0b:e3:c9:cd:2c:01:71:27:1e:54:36:
                    ba:de:b0:e0:c2:14:8b:7d:7a:a0:82:64:06:96:fd:
                    97:72:99:6c:7b:35:97:5f:b4:1c:aa:50:bc:53:16:
                    91:11:4e:ea:6c:c8:b9:fe:02:85:96:ef:c0:a5:8a:
                    5e:91:a2:9f:f8:51:79:1d:60:93:a9:b2:92:80:42:
                    6c:5f:dd:09:0f:b0:b1:6b:4b:0c:c1:55:de:88:19:
                    f9:a7:7a:77:bf:05:27:f5:62:80:9f:c8:c8:d3:3b:
                    6f:02:47:92:7b:00:9a:06:05:ac:ee:f2:9e:9f:0d:
                    54:a5:35:d3:2f:13:2a:6e:86:01:c1:d2:c8:10:0b:
                    08:76:9d:e4:d0:bf:f9:d6:86:28:57:ee:40:7d:4e:
                    cd:40:e1:42:79:62:e0:63:f7:3a:eb:10:4c:fe:43:
                    2b:a0:11:18:91:92:b1:60:28:ed:ce:fd:31:ae:96:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:F7:CA:00:DC:54:0B:67:C6:6C:EA:AC:8C:42:B9:CD:0C:04:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/cca605e6-eec2-3d11-bc9a-80488512639e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:5b:06:c3:b8:1d:70:c4:4c:60:62:8b:1d:cf:50:ae:db:
         bc:1b:bf:24:2a:58:c0:21:d1:9e:32:79:c3:8b:a6:e0:f2:4b:
         1b:e0:36:ff:9e:41:71:fb:27:36:f1:70:df:5b:7b:31:a7:24:
         24:60:6f:3b:70:0a:fa:80:56:76:fe:38:23:4a:69:e9:c7:1e:
         e2:f3:c1:39:f1:5f:ff:60:b4:26:c2:99:e2:49:73:22:24:71:
         3d:6b:f3:aa:25:90:a1:04:69:46:b2:3c:6a:1a:9b:ef:0c:27:
         1b:3a:83:0f:6e:d4:c8:45:dc:56:5c:a6:5d:e5:d4:90:29:f5:
         8c:94:8f:79:31:7c:72:eb:ee:0c:7f:e1:a1:e5:b1:2a:6e:b6:
         fa:72:f0:dc:bd:b6:9c:81:3f:e2:77:3a:32:1f:54:23:71:aa:
         98:e1:7b:a0:79:fe:49:35:d6:1a:e2:bd:47:dd:48:34:7a:d2:
         cd:db:a2:0a:88:19:66:8e:89:2c:41:48:e2:72:04:82:45:1d:
         e2:37:b1:5e:46:1e:eb:f2:86:c0:e2:7e:57:79:a0:d0:cd:7b:
         59:7f:ee:1e:da:dd:19:7b:fe:8a:61:7f:5e:db:10:e9:26:f6:
         09:9b:0d:55:90:ce:43:90:f5:48:9d:76:5f:b5:ae:3b:65:f4:
         88:dc:35:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbXQxzHcRET1JZngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1MjExMloXDTI1MDMwNTE1MjExMlowLzEtMCsGA1UEAxMk
NWQyNTNkOGYtNjA2Mi00NWQ3LWFlYTEtM2Y4OTgwODhlOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkNxOVMjE3V48JcaCMZO4So/n9i0DjK82Zfx
ewEdwSu5BVQZYrlFOfdJTGu76AlttCsLnv+qRop2CddV3FyFkGC9IcZslya7dqhV
YzHUC+PJzSwBcSceVDa63rDgwhSLfXqggmQGlv2XcplsezWXX7QcqlC8UxaREU7q
bMi5/gKFlu/ApYpekaKf+FF5HWCTqbKSgEJsX90JD7Cxa0sMwVXeiBn5p3p3vwUn
9WKAn8jI0ztvAkeSewCaBgWs7vKenw1UpTXTLxMqboYBwdLIEAsIdp3k0L/51oYo
V+5AfU7NQOFCeWLgY/c66xBM/kMroBEYkZKxYCjtzv0xrpawlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFM998oA3FQLZ8Zs6qyMQrnNDAQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvY2NhNjA1ZTYtZWVjMi0z
ZDExLWJjOWEtODA0ODg1MTI2MzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNU3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYtWwbDuB1wxExgYosdz1Cu27wbvyQqWMAh0Z4yecOLpuDySxvgNv+e
QXH7JzbxcN9bezGnJCRgbztwCvqAVnb+OCNKaenHHuLzwTnxX/9gtCbCmeJJcyIk
cT1r86olkKEEaUayPGoam+8MJxs6gw9u1MhF3FZcpl3l1JAp9YyUj3kxfHLr7gx/
4aHlsSputvpy8Ny9tpyBP+J3OjIfVCNxqpjhe6B5/kk11hrivUfdSDR60s3bogqI
GWaOiSxBSOJyBIJFHeI3sV5GHuvyhsDifld5oNDNe1l/7h7a3Rl7/ophf17bEOkm
9gmbDVWQzkOQ9Uiddl+1rjtl9IjcNas=
-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org