Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59b9841a-75ac-358e-90d4-7918203fa7fc.roa
File:                     59b9841a-75ac-358e-90d4-7918203fa7fc.roa (raw, json)
Hash identifier:          ZdVdXcFlPT6OqTkmnH7xZNQcd9OnDyTbWFedJ2SMAx0=
Subject key identifier:   14:AC:BE:0E:02:A9:C6:5F:67:43:D6:EA:1A:D7:86:9D:7D:48:91:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446FF30AD2B52962FE5EF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59b9841a-75ac-358e-90d4-7918203fa7fc.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 13:13:06 +0000
asID:                     207279
IP address blocks:        166.1.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:ff:30:ad:2b:52:96:2f:e5:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 13:13:06 2023 GMT
        Subject: CN=2412699d-b19a-47d8-ba0b-4291b76a7fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:77:bd:72:4d:13:05:62:59:05:d8:7e:46:
                    5e:89:bf:50:22:eb:54:42:3c:88:4f:01:b7:de:94:
                    21:50:62:13:c6:26:08:5f:ac:9a:0b:8b:ee:ad:66:
                    eb:96:f5:eb:b7:b9:18:8c:4e:96:5b:56:96:f2:58:
                    46:23:ba:13:f6:9d:1f:25:02:61:40:a1:24:fb:95:
                    bf:6f:1c:da:51:25:25:f9:aa:3c:7c:e9:35:26:4d:
                    9e:f7:49:9f:91:f4:d1:a5:34:70:40:f6:78:c5:b1:
                    c3:ee:2c:12:2a:6b:27:49:5c:4c:9d:37:3f:72:31:
                    b2:da:99:5f:16:be:6e:bb:1f:39:d6:f8:24:be:ce:
                    fa:8b:f9:45:03:9b:a7:69:f8:f1:3e:57:42:6a:29:
                    00:35:29:ba:12:02:de:fe:3a:e5:cb:45:8a:44:43:
                    37:ba:53:a2:4c:6e:6c:1d:51:72:18:d9:19:18:59:
                    0e:89:3d:bc:47:19:c9:2c:83:cf:84:bc:92:22:f8:
                    c1:a1:0a:81:f1:d4:9c:eb:7d:09:18:05:f7:c6:f6:
                    93:40:e8:55:cf:03:48:e5:ec:9a:0d:e7:ff:f2:87:
                    3a:77:5f:17:18:e5:e6:55:a6:79:8d:56:20:76:72:
                    cb:9f:20:2c:69:fd:62:b5:8e:c8:4a:a2:7d:9a:37:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AC:BE:0E:02:A9:C6:5F:67:43:D6:EA:1A:D7:86:9D:7D:48:91:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59b9841a-75ac-358e-90d4-7918203fa7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:c1:1a:9c:7c:ef:47:0e:cb:ae:9c:d9:a3:cd:07:c8:36:
         94:b0:c2:77:0c:2a:5b:ba:da:06:6d:29:6d:49:7b:2d:cb:e2:
         f1:ff:a5:4d:16:62:06:ef:a0:63:72:69:39:07:9b:3a:f5:e0:
         30:1e:4a:f7:49:eb:a2:64:e9:fd:19:9a:a5:ca:82:16:5b:3a:
         e5:c3:4c:3b:c0:7d:87:71:c3:39:76:93:a8:d1:e6:3a:d6:6b:
         a2:0e:42:e5:d8:49:fb:b5:44:5a:20:22:7f:28:b4:2c:b6:3f:
         d5:ec:dd:c1:e2:b0:d3:dc:1e:34:a0:60:3d:45:0e:0c:d7:c8:
         27:16:7b:ec:2e:ba:46:58:3e:9c:2c:15:98:50:2a:7e:c8:5d:
         e8:9f:6c:98:fe:f9:3e:de:cd:f8:e6:d2:34:69:4b:98:f5:83:
         c8:b0:59:c1:3b:59:23:42:90:8c:78:3a:2b:ee:36:e4:dd:6d:
         43:76:92:a6:21:1d:20:94:2c:5f:02:54:fd:d1:8f:d9:cb:2c:
         99:a3:ee:2a:e0:f8:a8:b3:35:20:de:80:66:af:73:12:2a:a8:
         62:5d:73:e7:26:73:f6:2a:b1:72:d8:94:77:a9:b1:c1:5d:d3:
         ed:84:64:55:75:61:27:7e:07:db:23:35:5b:13:b7:34:ce:f3:
         16:5b:61:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRv8wrStSli/l74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwODEzMTMwNlowLzEtMCsGA1UEAxMk
MjQxMjY5OWQtYjE5YS00N2Q4LWJhMGItNDI5MWI3NmE3ZmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdl3vXJNEwViWQXYfkZeib9QIutUQjyITwG3
3pQhUGITxiYIX6yaC4vurWbrlvXrt7kYjE6WW1aW8lhGI7oT9p0fJQJhQKEk+5W/
bxzaUSUl+ao8fOk1Jk2e90mfkfTRpTRwQPZ4xbHD7iwSKmsnSVxMnTc/cjGy2plf
Fr5uux851vgkvs76i/lFA5unafjxPldCaikANSm6EgLe/jrly0WKREM3ulOiTG5s
HVFyGNkZGFkOiT28RxnJLIPPhLySIvjBoQqB8dSc630JGAX3xvaTQOhVzwNI5eya
Def/8oc6d18XGOXmVaZ5jVYgdnLLnyAsaf1itY7ISqJ9mjeGHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSsvg4CqcZfZ0PW6hrXhp19SJGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTliOTg0MWEtNzVhYy0z
NThlLTkwZDQtNzkxODIwM2ZhN2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwiwRqcfO9HDsuunNmjzQfINpSwwncMKlu62gZtKW1Jey3L4vH/pU0W
YgbvoGNyaTkHmzr14DAeSvdJ66Jk6f0ZmqXKghZbOuXDTDvAfYdxwzl2k6jR5jrW
a6IOQuXYSfu1RFogIn8otCy2P9Xs3cHisNPcHjSgYD1FDgzXyCcWe+wuukZYPpws
FZhQKn7IXeifbJj++T7ezfjm0jRpS5j1g8iwWcE7WSNCkIx4OivuNuTdbUN2kqYh
HSCULF8CVP3Rj9nLLJmj7irg+KizNSDegGavcxIqqGJdc+cmc/YqsXLYlHepscFd
0+2EZFV1YSd+B9sjNVsTtzTO8xZbYSI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:35 2023 by rpki-client on console-fra.rpki-client.org