Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34b16691-9563-3eef-9781-6750ac1ef5ff.roa
File:                     34b16691-9563-3eef-9781-6750ac1ef5ff.roa (raw, json)
Hash identifier:          Wh15EsGy+PlMuGcEqGVM37MgyDEYWDK1THY5RTFlM98=
Subject key identifier:   07:51:8B:02:62:6A:4C:AA:35:09:BD:00:17:E3:74:01:3B:8A:BD:62
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858453B7800C72165BFCEC4AA9F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34b16691-9563-3eef-9781-6750ac1ef5ff.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     11798
IP address blocks:        166.1.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 22:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:78:00:c7:21:65:bf:ce:c4:aa:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=82cd992f-72f7-423e-98eb-053a3279ef87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:d4:8b:4a:49:72:aa:30:cb:5f:de:ba:8b:
                    f4:f5:05:18:f9:a1:f9:7d:4f:e1:53:6d:de:04:b7:
                    5d:50:d6:dc:4d:f0:0c:ae:b0:21:22:c7:cc:a5:34:
                    13:39:e6:19:ba:f4:8c:78:ca:f1:c0:5c:0f:e4:70:
                    57:62:ea:4f:c1:c9:cd:5b:13:b6:16:a3:82:ed:c7:
                    38:78:0e:00:b0:2f:c5:0c:7c:51:0b:4f:3a:ca:c3:
                    dd:ff:f5:18:4d:e6:04:27:c8:35:f1:e7:66:da:f1:
                    d9:86:63:49:71:7e:ff:d8:6a:3a:82:0b:19:0b:37:
                    27:c0:47:a0:cf:18:14:9c:6e:6d:f3:52:4b:84:2a:
                    e3:36:be:b3:e7:47:72:55:93:4e:61:77:d9:5f:c4:
                    7c:ef:f9:1c:ce:7b:19:ec:ee:40:6e:c5:dc:dd:ef:
                    81:8d:03:0b:df:86:2d:20:8f:b6:43:ca:74:ca:ec:
                    6d:7b:71:ba:e5:7a:bc:22:e7:46:1f:f1:ad:38:53:
                    52:46:b5:47:79:65:55:ad:59:e5:33:a3:5d:1b:44:
                    7b:4c:06:04:b0:6d:11:b5:c4:4b:7d:18:93:b0:f4:
                    fb:ba:e2:ff:b0:bf:ca:ce:e9:ca:0a:28:9a:85:80:
                    d3:a9:7a:05:17:bf:96:03:70:e2:62:31:f8:8c:70:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:8B:02:62:6A:4C:AA:35:09:BD:00:17:E3:74:01:3B:8A:BD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/34b16691-9563-3eef-9781-6750ac1ef5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:64:64:fa:8f:07:8b:9e:5e:b2:ee:54:e4:52:ce:78:1f:
         05:7a:12:66:df:9e:95:56:07:24:37:c3:37:1f:81:e9:58:92:
         95:1b:d2:96:4f:51:2c:47:95:c0:ba:01:3c:af:56:f1:57:1f:
         4b:d5:ea:37:7e:cf:d3:67:1f:58:b0:6f:2e:df:e6:22:a3:01:
         ff:27:df:81:8f:df:e4:77:5c:73:61:32:76:74:94:92:75:bb:
         3a:12:1f:76:85:93:e1:53:4b:9c:8b:36:57:d0:1b:d6:4b:da:
         c3:a7:87:b8:4f:98:4d:62:0c:4b:89:ff:18:2b:3a:75:81:6a:
         64:68:e9:c8:70:38:7c:ea:f1:94:3a:c4:93:eb:ac:d0:f8:9a:
         e0:59:5a:17:11:95:45:b8:91:8b:b6:d1:25:12:ce:5b:42:09:
         19:15:ac:43:bc:71:bf:e8:11:f8:bf:2a:7d:01:25:5d:42:0f:
         b4:e8:37:d1:5c:0d:5e:91:de:43:81:64:c7:68:12:42:8c:16:
         89:7f:dd:43:10:a8:8c:23:cc:ff:86:b4:b2:6f:82:30:dc:9a:
         a5:62:73:dd:63:0d:7e:39:ca:ec:1e:5c:75:26:ee:3c:0d:86:
         ae:00:c1:6a:d9:e2:10:0e:04:d5:ce:38:2b:c6:bf:26:e4:ab:
         52:90:7c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU7eADHIWW/zsSqn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxNzAxMDAyNloXDTI0MDYxNTAxMDAyNlowLzEtMCsGA1UEAxMk
ODJjZDk5MmYtNzJmNy00MjNlLTk4ZWItMDUzYTMyNzllZjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDUi0pJcqowy1/euov09QUY+aH5fU/hU23e
BLddUNbcTfAMrrAhIsfMpTQTOeYZuvSMeMrxwFwP5HBXYupPwcnNWxO2FqOC7cc4
eA4AsC/FDHxRC086ysPd//UYTeYEJ8g18edm2vHZhmNJcX7/2Go6ggsZCzcnwEeg
zxgUnG5t81JLhCrjNr6z50dyVZNOYXfZX8R87/kcznsZ7O5AbsXc3e+BjQML34Yt
II+2Q8p0yuxte3G65Xq8IudGH/GtOFNSRrVHeWVVrVnlM6NdG0R7TAYEsG0RtcRL
fRiTsPT7uuL/sL/KzunKCiiahYDTqXoFF7+WA3DiYjH4jHAlswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdRiwJiakyqNQm9ABfjdAE7ir1iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzRiMTY2OTEtOTU2My0z
ZWVmLTk3ODEtNjc1MGFjMWVmNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXDZGT6jweLnl6y7lTkUs54HwV6EmbfnpVWByQ3wzcfgelYkpUb0pZP
USxHlcC6ATyvVvFXH0vV6jd+z9NnH1iwby7f5iKjAf8n34GP3+R3XHNhMnZ0lJJ1
uzoSH3aFk+FTS5yLNlfQG9ZL2sOnh7hPmE1iDEuJ/xgrOnWBamRo6chwOHzq8ZQ6
xJPrrND4muBZWhcRlUW4kYu20SUSzltCCRkVrEO8cb/oEfi/Kn0BJV1CD7ToN9Fc
DV6R3kOBZMdoEkKMFol/3UMQqIwjzP+GtLJvgjDcmqVic91jDX45yuweXHUm7jwN
hq4AwWrZ4hAOBNXOOCvGvybkq1KQfLQ=
-----END CERTIFICATE-----
Generated at Wed Mar 20 23:37:46 2024 by rpki-client on console-fra.rpki-client.org