Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb/273ef2cf-ebc1-3fb7-9b4b-121054917f26.roa
File:                     273ef2cf-ebc1-3fb7-9b4b-121054917f26.roa (raw, json)
Hash identifier:          8UlljZbtP2soUVG/TzCp+/pKk6rh3J0wQKO1wY/WI4o=
Subject key identifier:   8F:6B:F2:49:57:3C:06:6A:6C:F1:2F:0C:DF:C0:84:76:9A:FD:D1:D5
Certificate issuer:       /CN=90ee77a2-5659-4f4a-bfaa-b18602cbb8fb
Certificate serial:       010D0C9F432858414AB5F7D16FDF522592D38D80
Authority key identifier: F3:B5:AE:04:2D:31:D1:F1:29:55:A5:10:DF:3B:9D:0E:F4:41:EE:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb/273ef2cf-ebc1-3fb7-9b4b-121054917f26.roa
Signing time:             Tue 21 Mar 2023 14:59:09 +0000
ROA not before:           Tue 21 Mar 2023 14:59:09 +0000
ROA not after:            Mon 23 Jun 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        74.114.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Mar 2023 17:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:b5:f7:d1:6f:df:52:25:92:d3:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ee77a2-5659-4f4a-bfaa-b18602cbb8fb
        Validity
            Not Before: Mar 21 14:59:09 2023 GMT
            Not After : Jun 23 04:00:00 2025 GMT
        Subject: CN=5be5efc3-2750-474e-8669-ddd7f1e047e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:ce:d2:c8:52:d5:ff:e7:3a:96:a7:df:0d:
                    d9:e6:6a:8e:ff:78:6b:db:07:df:0a:5f:ee:78:a9:
                    87:ef:3a:80:6b:1e:e2:cf:06:71:07:a6:dd:2a:df:
                    c9:80:85:93:1d:c2:ff:ba:0e:bd:93:3a:cb:bc:f0:
                    34:02:b7:d1:ee:6c:3e:ab:b0:ec:53:fb:5e:89:e9:
                    b0:0b:19:ee:1c:c5:65:0a:62:03:0c:e1:2f:fa:29:
                    f0:1a:cd:45:82:ce:96:ce:4a:12:58:7d:fa:8d:5c:
                    72:01:fe:74:6b:90:a3:16:17:28:4c:a6:d1:63:50:
                    2f:28:16:88:4d:3c:5c:9d:01:d8:05:76:b9:13:d1:
                    58:49:29:b5:25:26:25:d0:09:50:cd:b3:9e:be:65:
                    6c:22:d0:3c:f5:43:20:ac:c9:0e:de:bf:3e:2c:09:
                    d7:70:62:ae:e3:61:4c:cb:92:1f:3a:ce:d6:e4:ad:
                    41:87:a1:c4:6e:51:78:61:5a:81:c9:d9:9f:9b:ec:
                    71:4a:50:8c:7b:03:26:ec:dc:e5:61:39:a8:80:2c:
                    2f:7f:86:88:ba:8d:24:56:a9:1b:8c:05:5a:5b:b7:
                    cb:91:3d:00:b2:40:7e:f9:3d:95:e1:6c:da:cb:ff:
                    b2:23:88:62:c4:24:3e:59:2b:26:da:2e:08:9e:ea:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6B:F2:49:57:3C:06:6A:6C:F1:2F:0C:DF:C0:84:76:9A:FD:D1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb/273ef2cf-ebc1-3fb7-9b4b-121054917f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:B5:AE:04:2D:31:D1:F1:29:55:A5:10:DF:3B:9D:0E:F4:41:EE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/90ee77a2-5659-4f4a-bfaa-b18602cbb8fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:85:81:7a:77:e6:65:d1:9c:89:00:d5:83:97:ca:32:d9:
         b2:15:83:d9:09:1d:cc:78:a6:cf:aa:f5:8c:88:22:53:ce:85:
         27:54:34:cb:d1:4e:a0:4e:e2:43:41:20:d7:72:2f:a7:9f:b2:
         f4:76:d3:d8:d2:49:f7:f9:34:53:f3:b4:7c:c1:d9:a5:d6:ca:
         0b:5f:43:d1:77:98:92:43:aa:79:b3:63:9e:d6:a8:e9:14:22:
         c7:6a:5a:21:bb:61:b7:55:46:b1:22:25:13:60:1d:25:c9:0c:
         7b:10:a2:73:e5:c3:40:b2:02:94:f9:a3:d1:a2:3a:37:ba:22:
         cb:82:c8:d7:7e:79:fd:88:cf:cc:3a:17:88:53:42:80:00:48:
         65:53:6a:3e:b8:a7:b0:5e:1f:04:d9:74:0b:eb:49:56:af:86:
         7e:44:c4:67:77:e3:15:ba:4c:7c:85:6a:14:89:1f:e1:ec:75:
         ad:e5:31:45:19:54:ee:a2:d1:be:0a:be:c6:86:59:f4:48:58:
         7d:a3:f8:15:cd:8b:a4:1e:d8:f5:1e:b6:d6:78:00:1d:7b:8a:
         40:45:c3:25:56:31:52:e7:cd:ad:0d:9a:c4:bb:e8:a2:ab:55:
         82:4d:72:18:de:4d:df:7d:9c:ba:ae:93:64:9a:74:25:ff:00:
         75:75:e6:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKtffRb99SJZLTjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBlZTc3YTItNTY1OS00ZjRhLWJmYWEtYjE4NjAyY2Ji
OGZiMB4XDTIzMDMyMTE0NTkwOVoXDTI1MDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWJlNWVmYzMtMjc1MC00NzRlLTg2NjktZGRkN2YxZTA0N2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdjO0shS1f/nOpan3w3Z5mqO/3hr2wffCl/u
eKmH7zqAax7izwZxB6bdKt/JgIWTHcL/ug69kzrLvPA0ArfR7mw+q7DsU/teiemw
CxnuHMVlCmIDDOEv+inwGs1Fgs6WzkoSWH36jVxyAf50a5CjFhcoTKbRY1AvKBaI
TTxcnQHYBXa5E9FYSSm1JSYl0AlQzbOevmVsItA89UMgrMkO3r8+LAnXcGKu42FM
y5IfOs7W5K1Bh6HEblF4YVqBydmfm+xxSlCMewMm7NzlYTmogCwvf4aIuo0kVqkb
jAVaW7fLkT0AskB++T2V4Wzay/+yI4hixCQ+WSsm2i4InurMBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9r8klXPAZqbPEvDN/AhHaa/dHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MGVl
NzdhMi01NjU5LTRmNGEtYmZhYS1iMTg2MDJjYmI4ZmIvMjczZWYyY2YtZWJjMS0z
ZmI3LTliNGItMTIxMDU0OTE3ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTBlZTc3YTItNTY1OS00ZjRhLWJm
YWEtYjE4NjAyY2JiOGZiLzkwZWU3N2EyLTU2NTktNGY0YS1iZmFhLWIxODYwMmNi
YjhmYi5jcmwwHwYDVR0jBBgwFoAU87WuBC0x0fEpVaUQ3zudDvRB7qIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MGVlNzdhMi01NjU5LTRmNGEtYmZhYS1iMTg2
MDJjYmI4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnJEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsYhYF6d+Zl0ZyJANWDl8oy2bIVg9kJHcx4ps+q9YyIIlPOhSdUNMvR
TqBO4kNBINdyL6efsvR209jSSff5NFPztHzB2aXWygtfQ9F3mJJDqnmzY57WqOkU
IsdqWiG7YbdVRrEiJRNgHSXJDHsQonPlw0CyApT5o9GiOje6IsuCyNd+ef2Iz8w6
F4hTQoAASGVTaj64p7BeHwTZdAvrSVavhn5ExGd34xW6THyFahSJH+Hsda3lMUUZ
VO6i0b4KvsaGWfRIWH2j+BXNi6Qe2PUettZ4AB17ikBFwyVWMVLnza0NmsS76KKr
VYJNchjeTd99nLquk2SadCX/AHV15u0=
-----END CERTIFICATE-----