Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76985e93-73f0-3482-a0f9-1df159baee5c.roa
File:                     76985e93-73f0-3482-a0f9-1df159baee5c.roa (raw, json)
Hash identifier:          cphlQ4NkgwlYVluvNLqUOpx43y+dJhvDupAYLv4mkdY=
Subject key identifier:   40:C2:41:8E:6E:30:D3:1A:4E:E1:68:E2:E7:3E:B6:16:44:75:82:3E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844474EDC9AB1F5F7D8F9458E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76985e93-73f0-3482-a0f9-1df159baee5c.roa
Signing time:             Wed 20 Dec 2023 14:00:21 +0000
ROA not before:           Wed 20 Dec 2023 14:00:21 +0000
ROA not after:            Tue 19 Mar 2024 13:00:21 +0000
asID:                     63023
IP address blocks:        108.165.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 17:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:47:4e:dc:9a:b1:f5:f7:d8:f9:45:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 20 14:00:21 2023 GMT
            Not After : Mar 19 13:00:21 2024 GMT
        Subject: CN=b0a49b47-8f16-48a8-a7b4-ceed543909e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:33:80:ed:e1:23:cd:f1:b6:4a:34:9a:34:
                    43:74:5c:e1:e1:ee:c5:d8:92:6c:39:5d:67:68:61:
                    50:4f:ef:4a:ec:2e:0a:f3:6d:a8:d3:58:61:d4:21:
                    09:f1:ec:ae:48:e8:51:ff:dd:a0:42:d3:be:e9:37:
                    1c:19:2a:7a:54:1a:ad:51:88:5f:f7:1d:6f:59:f4:
                    b7:ec:c8:ee:a6:7f:2b:f8:3d:e5:84:88:3f:6c:b4:
                    58:2a:c6:85:1b:66:b5:3a:bf:7d:c4:62:a1:85:8f:
                    70:90:b7:15:1c:a9:f7:b5:ee:f8:db:0e:5a:2e:ba:
                    1b:69:90:e3:45:48:a4:a1:a6:50:cd:a1:a2:bd:00:
                    f2:09:a5:a3:2a:1a:85:29:10:77:7a:85:c5:e5:c2:
                    f3:64:65:21:d8:7c:2e:ad:38:67:50:a3:42:44:fd:
                    69:0a:20:95:98:a5:12:6e:64:f8:cf:22:7d:02:9a:
                    4f:9e:44:59:c0:63:c4:c2:95:83:2f:f1:7f:ee:59:
                    43:a6:4f:cf:11:70:30:02:34:a0:e2:54:53:d5:81:
                    be:30:91:06:35:f3:17:0c:0e:4e:71:c8:c6:ac:bd:
                    14:dc:26:37:7e:69:c9:4e:a0:15:e6:50:98:22:f3:
                    b6:13:77:00:5e:57:b3:05:9b:52:8f:72:97:d1:73:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:41:8E:6E:30:D3:1A:4E:E1:68:E2:E7:3E:B6:16:44:75:82:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/76985e93-73f0-3482-a0f9-1df159baee5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:df:71:e9:0b:4d:22:03:6c:b5:dd:57:f5:0f:bb:c2:fb:
         ee:e5:ab:e6:50:bd:42:4a:7c:51:3c:28:41:81:58:29:0f:93:
         7c:cc:93:fd:a7:a4:85:a8:ec:79:5d:cc:ba:23:4a:ab:11:e6:
         a2:e7:bf:09:77:01:17:23:25:51:c5:6c:6c:18:b9:88:da:db:
         2f:1e:f4:f2:e4:b3:66:e2:b0:30:0a:f7:ab:f9:18:48:56:1a:
         3e:a0:15:fd:29:30:40:45:ed:9a:ce:58:8a:9a:52:ee:9d:d3:
         8c:26:41:c9:6b:09:04:07:1b:20:84:ff:94:f8:0f:f8:12:c4:
         49:8d:e1:ae:1c:62:5a:a9:32:d4:e5:5c:30:67:7e:a9:df:93:
         84:8d:67:02:38:c9:7c:39:46:37:1f:74:21:a6:1a:be:b4:a4:
         2b:df:51:92:f8:e7:a9:ab:fb:86:0c:4a:61:f8:60:18:68:bf:
         5c:36:35:2e:4c:ae:1d:28:11:23:eb:16:8d:b7:9d:df:01:91:
         6d:ee:05:db:b6:63:28:71:97:d0:db:62:03:52:f1:6c:48:89:
         84:d1:07:c1:8d:87:8a:06:ac:08:84:0b:92:6c:d5:da:c8:8e:
         61:99:5e:d3:10:1e:b1:e2:30:a4:f1:26:2e:9c:63:6c:a7:24:
         d6:e0:b4:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERHTtyasfX32PlFjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTIyMDE0MDAyMVoXDTI0MDMxOTEzMDAyMVowLzEtMCsGA1UEAxMk
YjBhNDliNDctOGYxNi00OGE4LWE3YjQtY2VlZDU0MzkwOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrYzgO3hI83xtko0mjRDdFzh4e7F2JJsOV1n
aGFQT+9K7C4K822o01hh1CEJ8eyuSOhR/92gQtO+6TccGSp6VBqtUYhf9x1vWfS3
7Mjupn8r+D3lhIg/bLRYKsaFG2a1Or99xGKhhY9wkLcVHKn3te742w5aLrobaZDj
RUikoaZQzaGivQDyCaWjKhqFKRB3eoXF5cLzZGUh2HwurThnUKNCRP1pCiCVmKUS
bmT4zyJ9AppPnkRZwGPEwpWDL/F/7llDpk/PEXAwAjSg4lRT1YG+MJEGNfMXDA5O
ccjGrL0U3CY3fmnJTqAV5lCYIvO2E3cAXlezBZtSj3KX0XP49QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDCQY5uMNMaTuFo4uc+thZEdYI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzY5ODVlOTMtNzNmMC0z
NDgyLWEwZjktMWRmMTU5YmFlZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKW1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtb33HpC00iA2y13Vf1D7vC++7lq+ZQvUJKfFE8KEGBWCkPk3zMk/2n
pIWo7HldzLojSqsR5qLnvwl3ARcjJVHFbGwYuYja2y8e9PLks2bisDAK96v5GEhW
Gj6gFf0pMEBF7ZrOWIqaUu6d04wmQclrCQQHGyCE/5T4D/gSxEmN4a4cYlqpMtTl
XDBnfqnfk4SNZwI4yXw5RjcfdCGmGr60pCvfUZL456mr+4YMSmH4YBhov1w2NS5M
rh0oESPrFo23nd8BkW3uBdu2Yyhxl9DbYgNS8WxIiYTRB8GNh4oGrAiEC5Js1drI
jmGZXtMQHrHiMKTxJi6cY2ynJNbgtMo=
-----END CERTIFICATE-----
Generated at Tue Feb 6 21:25:07 2024 by rpki-client on console-fra.rpki-client.org