Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28d915f4-a3a7-30c6-9df3-befea149f935.roa
File:                     28d915f4-a3a7-30c6-9df3-befea149f935.roa (raw, json)
Hash identifier:          1w7D0cluPHftNaF+4WiFTbQzfZ09046mwtOsGNBX90A=
Subject key identifier:   3D:F9:1C:8A:8D:0C:A3:E1:39:89:D2:B2:E2:AF:34:CC:B1:75:B4:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DC8BFC1C94605157D701DA180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28d915f4-a3a7-30c6-9df3-befea149f935.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Fri 02 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        141.156.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:bf:c1:c9:46:05:15:7d:70:1d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2025 GMT
        Subject: CN=0b91ad65-ef1e-47a5-80fc-7e0964be67ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:64:c7:97:24:f2:ee:c0:a1:69:38:ad:ca:
                    37:99:de:9f:7b:b1:a9:68:59:bf:5f:33:3c:12:39:
                    a8:0e:24:1e:d7:3c:06:2f:32:be:ec:55:e9:c2:1b:
                    60:0d:c2:8a:f2:47:c7:0e:69:af:fb:dd:d4:58:34:
                    c1:e9:69:5a:2e:9b:68:af:79:66:62:6d:7f:39:90:
                    10:ed:fc:df:a5:ab:76:4e:9b:09:24:65:5b:42:37:
                    1b:17:e8:57:66:8e:c8:2c:aa:70:41:5d:91:14:d3:
                    16:a6:52:dc:13:d4:b6:be:12:d2:a8:59:ba:07:0a:
                    ae:18:bb:7f:11:80:b2:87:8c:14:02:50:84:2f:9d:
                    40:b3:78:d1:c5:e5:20:23:b5:a4:9f:b4:26:f8:5c:
                    bc:5a:2d:7b:a6:4e:3e:77:6a:85:27:e3:5b:4a:9f:
                    75:48:9e:38:7e:e5:e4:be:72:5c:45:1b:3f:86:43:
                    58:0b:f2:85:c5:e5:30:d8:af:d5:9a:97:68:4e:e3:
                    1d:57:81:44:04:5d:bf:a2:da:6c:ef:74:11:15:c8:
                    39:01:9c:82:67:d0:6f:7b:4f:d6:59:f4:bf:35:20:
                    31:f9:d7:23:63:7a:d2:93:a5:57:33:bf:c9:d4:6e:
                    e7:1a:ea:a0:df:dd:b6:13:fe:f6:21:0b:b3:61:99:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F9:1C:8A:8D:0C:A3:E1:39:89:D2:B2:E2:AF:34:CC:B1:75:B4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28d915f4-a3a7-30c6-9df3-befea149f935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:19:e3:c6:ba:04:42:2c:e6:39:9d:90:c9:fb:1b:b4:8d:
         78:32:1e:0a:66:d9:7f:b0:b9:e9:4e:99:ca:f7:1c:ef:94:96:
         09:34:fb:76:c5:3e:80:88:89:1c:f0:36:56:c6:5b:84:1e:f8:
         8c:0b:f9:38:6c:ef:89:85:2b:63:a8:34:14:d9:d8:e9:3f:f8:
         f9:70:30:6c:21:24:bf:24:62:5f:28:b3:d5:5d:68:51:2a:bb:
         e0:ed:f1:a8:34:5a:25:d6:a1:55:82:3c:61:29:80:3c:21:37:
         19:ef:57:4f:05:88:7e:91:31:6e:06:25:47:17:1e:6b:9d:92:
         1a:57:42:0a:36:36:29:1b:42:fe:cd:13:44:cb:74:75:1f:89:
         b9:ec:0d:b1:a9:0c:4a:53:1e:a3:57:45:89:f0:9d:1a:ac:c0:
         65:6c:35:db:d1:9e:cf:0d:4d:2e:ed:66:1a:77:bf:47:c8:e8:
         18:a8:d3:64:cf:ba:14:6e:32:b6:78:05:7b:f9:c4:c7:5d:24:
         35:bd:46:b3:90:10:38:74:8e:74:4d:4f:7a:70:e6:7c:53:e5:
         34:8a:ae:36:54:1e:78:a6:53:d6:0b:9f:f8:a7:97:e9:5f:f0:
         75:66:28:9e:c2:7a:69:de:f8:03:86:59:e0:6b:43:98:fe:61:
         8e:95:29:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3Iv8HJRgUVfXAdoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUwMzEyMDAwMFoXDTI1MDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
MGI5MWFkNjUtZWYxZS00N2E1LTgwZmMtN2UwOTY0YmU2N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYdkx5ck8u7AoWk4rco3md6fe7GpaFm/XzM8
EjmoDiQe1zwGLzK+7FXpwhtgDcKK8kfHDmmv+93UWDTB6WlaLptor3lmYm1/OZAQ
7fzfpat2TpsJJGVbQjcbF+hXZo7ILKpwQV2RFNMWplLcE9S2vhLSqFm6BwquGLt/
EYCyh4wUAlCEL51As3jRxeUgI7Wkn7Qm+Fy8Wi17pk4+d2qFJ+NbSp91SJ44fuXk
vnJcRRs/hkNYC/KFxeUw2K/VmpdoTuMdV4FEBF2/otps73QRFcg5AZyCZ9Bve0/W
WfS/NSAx+dcjY3rSk6VXM7/J1G7nGuqg3922E/72IQuzYZnlbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD35HIqNDKPhOYnSsuKvNMyxdbSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhkOTE1ZjQtYTNhNy0z
MGM2LTlkZjMtYmVmZWExNDlmOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjZwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAelIZ48a6BEIs5jmdkMn7G7SNeDIeCmbZf7C56U6Zyvcc75SWCTT7dsU+
gIiJHPA2VsZbhB74jAv5OGzviYUrY6g0FNnY6T/4+XAwbCEkvyRiXyiz1V1oUSq7
4O3xqDRaJdahVYI8YSmAPCE3Ge9XTwWIfpExbgYlRxcea52SGldCCjY2KRtC/s0T
RMt0dR+JuewNsakMSlMeo1dFifCdGqzAZWw129Gezw1NLu1mGne/R8joGKjTZM+6
FG4ytngFe/nEx10kNb1Gs5AQOHSOdE1PenDmfFPlNIquNlQeeKZT1guf+KeX6V/w
dWYonsJ6ad74A4ZZ4GtDmP5hjpUp1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:30 2024 by rpki-client on console-ams.rpki-client.org