Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/384e34b7-2e4d-33f0-8775-6c8a3032c6c8.roa
File:                     384e34b7-2e4d-33f0-8775-6c8a3032c6c8.roa (raw, json)
Hash identifier:          PbW+ItCFQVNCZp2yJoyTrZAuaPonTCnwb8JPKMQdQQ8=
Subject key identifier:   1F:BF:06:22:DA:0C:99:2B:D7:2F:AE:93:25:C5:36:C2:7B:BB:8B:63
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840FAAE1D35FD2E8A728B27F580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/384e34b7-2e4d-33f0-8775-6c8a3032c6c8.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 25 May 2025 04:00:00 +0000
asID:                     51722
IP address blocks:        166.0.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:fa:ae:1d:35:fd:2e:8a:72:8b:27:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 25 04:00:00 2025 GMT
        Subject: CN=269609cc-fb0b-434b-b191-e64e28001c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:3c:ac:9b:bf:ed:05:a7:a6:d3:cb:8d:53:
                    5b:52:08:d6:8f:02:07:9a:a7:6b:16:7b:5b:4c:1b:
                    8e:7f:d0:7e:b9:53:5e:37:9d:de:87:7e:a6:87:1d:
                    9c:71:19:29:12:91:a0:1e:a2:b7:d2:b7:5f:67:31:
                    f0:f5:2a:47:09:01:6a:a5:34:89:08:c4:be:6d:7b:
                    31:d6:2f:34:44:64:90:51:02:32:54:ce:69:0f:6d:
                    aa:15:d5:7a:f4:c6:44:26:85:14:0b:1e:7a:0a:21:
                    3e:5b:66:14:cb:eb:a4:d9:4c:1d:f8:ed:2c:8b:04:
                    6b:d9:38:bd:f3:b8:62:32:57:05:db:2d:05:90:7a:
                    1d:e5:63:63:ab:13:72:3e:9f:48:85:08:5f:98:d3:
                    45:84:09:82:76:d9:41:d1:ba:71:7c:e4:73:0e:25:
                    a7:b3:97:67:db:f5:f2:0d:b4:80:dc:54:6c:cc:67:
                    df:66:f3:ba:22:3e:9d:fb:f5:23:c9:e1:77:00:c5:
                    c6:5e:b8:10:c1:19:2f:af:60:f1:c9:08:01:46:51:
                    95:51:a9:e0:ae:40:43:b1:6e:b2:cc:9d:b5:00:7f:
                    cc:7e:70:99:22:dc:b7:f1:3f:9a:22:1f:7d:98:b1:
                    86:2e:be:82:98:97:3e:58:5b:69:b7:da:ad:77:d7:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:06:22:DA:0C:99:2B:D7:2F:AE:93:25:C5:36:C2:7B:BB:8B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/384e34b7-2e4d-33f0-8775-6c8a3032c6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:d9:31:b6:f9:ba:d2:5c:c7:47:30:07:3e:49:95:52:29:
         89:b4:9e:e9:23:1b:ff:16:64:b8:b9:89:39:d2:00:23:a6:d3:
         e4:56:6f:c8:60:55:bb:83:27:16:f3:ac:cf:c7:d5:56:bd:b4:
         4e:26:89:83:d3:98:fb:71:f2:70:fa:09:e9:1d:ac:12:32:38:
         f7:00:bb:d3:ab:0b:55:98:28:b4:af:3f:a0:7c:cb:83:c5:4a:
         ed:e9:41:92:3f:d9:c9:b6:53:cd:19:56:e6:3d:b5:56:13:94:
         65:b2:c2:4e:9b:7c:1a:61:50:ae:6c:4a:ed:db:c1:d6:04:c2:
         be:cb:0d:e4:1d:99:c7:8a:0b:c7:e6:32:b8:67:65:5e:9d:9c:
         90:72:9c:b9:74:a0:14:1d:6a:d0:fa:0f:e1:3f:79:1c:71:82:
         2d:c2:5c:87:57:02:53:2d:49:e8:3e:38:e5:cd:7e:a3:30:ae:
         00:7b:f8:f4:06:3e:e8:2a:0a:37:82:86:2d:f1:63:e4:03:64:
         5b:38:ce:01:23:f9:9e:11:16:5a:02:4d:59:ef:20:7e:68:5b:
         44:51:9c:bc:5f:b9:90:63:2f:b4:50:d2:87:be:1d:6a:14:c6:
         65:00:3e:b9:93:62:7b:4b:14:09:b6:10:ef:2d:81:cf:04:16:
         6a:8f:fe:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWED6rh01/S6Kcosn9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjY5NjA5Y2MtZmIwYi00MzRiLWIxOTEtZTY0ZTI4MDAxYzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOQ8rJu/7QWnptPLjVNbUgjWjwIHmqdrFntb
TBuOf9B+uVNeN53eh36mhx2ccRkpEpGgHqK30rdfZzHw9SpHCQFqpTSJCMS+bXsx
1i80RGSQUQIyVM5pD22qFdV69MZEJoUUCx56CiE+W2YUy+uk2Uwd+O0siwRr2Ti9
87hiMlcF2y0FkHod5WNjqxNyPp9IhQhfmNNFhAmCdtlB0bpxfORzDiWns5dn2/Xy
DbSA3FRszGffZvO6Ij6d+/UjyeF3AMXGXrgQwRkvr2DxyQgBRlGVUangrkBDsW6y
zJ21AH/MfnCZIty38T+aIh99mLGGLr6CmJc+WFtpt9qtd9ffcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+/BiLaDJkr1y+ukyXFNsJ7u4tjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg0ZTM0YjctMmU0ZC0z
M2YwLTg3NzUtNmM4YTMwMzJjNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTT2TG2+brSXMdHMAc+SZVSKYm0nukjG/8WZLi5iTnSACOm0+RWb8hg
VbuDJxbzrM/H1Va9tE4miYPTmPtx8nD6CekdrBIyOPcAu9OrC1WYKLSvP6B8y4PF
Su3pQZI/2cm2U80ZVuY9tVYTlGWywk6bfBphUK5sSu3bwdYEwr7LDeQdmceKC8fm
MrhnZV6dnJBynLl0oBQdatD6D+E/eRxxgi3CXIdXAlMtSeg+OOXNfqMwrgB7+PQG
PugqCjeChi3xY+QDZFs4zgEj+Z4RFloCTVnvIH5oW0RRnLxfuZBjL7RQ0oe+HWoU
xmUAPrmTYntLFAm2EO8tgc8EFmqP/vk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:24 2023 by rpki-client on console-fra.rpki-client.org