Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2dd6ab3-67c1-38f4-9dcb-2a1f4e0cb42b.roa
File:                     d2dd6ab3-67c1-38f4-9dcb-2a1f4e0cb42b.roa (raw, json)
Hash identifier:          5kaga3r5z1d12o8fADBjmj26nL1B0iQMHs1CqE80SjM=
Subject key identifier:   91:74:7F:58:5C:1E:3F:F4:71:0D:E7:7C:63:C5:4E:8F:F3:89:3C:A0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285845D465531F233D07A0B9791BC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2dd6ab3-67c1-38f4-9dcb-2a1f4e0cb42b.roa
Signing time:             Fri 10 May 2024 19:41:36 +0000
ROA not before:           Fri 10 May 2024 19:41:36 +0000
ROA not after:            Thu 08 Aug 2024 19:41:36 +0000
asID:                     18779
IP address blocks:        168.93.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 May 2024 19:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d4:65:53:1f:23:3d:07:a0:b9:79:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 10 19:41:36 2024 GMT
            Not After : Aug  8 19:41:36 2024 GMT
        Subject: CN=2e0b1754-877d-4eb7-91a3-017502ebd379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:d8:74:a3:41:02:ec:84:61:e5:92:55:f7:
                    30:73:13:96:d7:4a:66:eb:a8:9c:1b:18:4e:e3:66:
                    d0:1e:0f:47:30:43:78:f3:b5:42:c7:3b:87:13:89:
                    ea:de:fe:ff:ff:b4:17:92:f8:06:87:0a:89:be:a3:
                    ff:e2:e7:c1:2f:a3:d6:5e:57:73:d3:6e:7e:40:cf:
                    cb:16:f9:37:5f:08:4c:93:f9:91:00:57:33:fe:a4:
                    26:a5:cc:3f:44:16:cb:19:73:a5:ea:07:8e:1e:6c:
                    e3:bc:77:8d:ec:db:29:e9:9d:30:1b:66:7d:3a:ce:
                    7c:27:38:b6:ff:35:7d:47:7e:64:33:a4:87:d5:8d:
                    70:cf:29:34:99:50:28:a4:a0:5d:47:90:ee:d0:a5:
                    c2:0d:80:3b:45:a1:0a:af:85:57:56:3a:45:c1:af:
                    40:6c:b8:fe:73:49:80:f9:cf:e8:5d:ad:9c:4c:26:
                    3d:52:4e:18:ed:03:a4:8b:c1:32:de:32:b8:33:73:
                    88:9a:3f:a6:36:8b:12:3a:52:b8:82:ab:28:ab:48:
                    bc:dc:b1:c1:56:e5:34:d8:1c:62:96:80:ca:8b:b6:
                    5f:5d:fd:58:84:a0:b3:38:ac:e7:b8:1f:b4:79:a8:
                    59:92:82:5f:d3:a0:8f:15:85:cd:c1:c5:bd:8c:82:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:7F:58:5C:1E:3F:F4:71:0D:E7:7C:63:C5:4E:8F:F3:89:3C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2dd6ab3-67c1-38f4-9dcb-2a1f4e0cb42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:09:8b:54:59:36:30:b8:61:4f:56:ab:84:a7:1c:d5:1c:fd:
         02:95:af:0d:d7:34:1d:95:47:31:32:05:60:4c:e7:1c:19:bf:
         57:8d:94:38:6f:f0:2e:39:d3:18:95:6b:86:0c:09:48:94:a3:
         1e:e4:24:50:85:36:2e:f9:30:db:45:d9:2a:40:7c:30:25:cc:
         33:c7:b0:ac:71:46:be:11:1c:7a:d1:ee:d9:c4:91:48:14:69:
         31:83:cb:e6:42:fe:ca:7e:ef:6e:6f:e3:60:d0:8a:9c:6a:ee:
         2a:e5:36:cd:3b:90:12:a3:fd:e9:cd:21:f9:2e:bc:27:53:04:
         ad:02:be:a6:ad:61:e8:2d:70:0b:64:9b:10:dd:6f:c7:d3:78:
         e8:c0:be:4b:f5:93:73:ae:8c:f6:58:f5:f4:63:fa:69:14:14:
         48:e6:24:56:cc:bc:72:0a:b6:eb:74:07:da:cd:a5:41:81:3d:
         a1:9e:f6:6f:98:d4:cd:71:65:17:a0:1b:5f:3c:f1:3c:e1:ca:
         9e:72:fe:9b:24:28:58:d9:6d:b1:b9:da:e8:47:e6:a7:a1:de:
         ed:4a:7c:fa:54:15:b5:43:09:e4:7f:a1:a7:8f:03:3c:66:34:
         eb:72:ec:46:b9:92:45:e0:fb:54:fe:78:50:4e:cb:24:66:b3:
         71:7d:03:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXUZVMfIz0HoLl5G8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDUxMDE5NDEzNloXDTI0MDgwODE5NDEzNlowLzEtMCsGA1UEAxMk
MmUwYjE3NTQtODc3ZC00ZWI3LTkxYTMtMDE3NTAyZWJkMzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHLYdKNBAuyEYeWSVfcwcxOW10pm66icGxhO
42bQHg9HMEN487VCxzuHE4nq3v7//7QXkvgGhwqJvqP/4ufBL6PWXldz025+QM/L
Fvk3XwhMk/mRAFcz/qQmpcw/RBbLGXOl6geOHmzjvHeN7Nsp6Z0wG2Z9Os58Jzi2
/zV9R35kM6SH1Y1wzyk0mVAopKBdR5Du0KXCDYA7RaEKr4VXVjpFwa9AbLj+c0mA
+c/oXa2cTCY9Uk4Y7QOki8Ey3jK4M3OImj+mNosSOlK4gqsoq0i83LHBVuU02Bxi
loDKi7ZfXf1YhKCzOKznuB+0eahZkoJf06CPFYXNwcW9jILuNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJF0f1hcHj/0cQ3nfGPFTo/ziTygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDJkZDZhYjMtNjdjMS0z
OGY0LTlkY2ItMmExZjRlMGNiNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkJi1RZNjC4YU9Wq4SnHNUc/QKVrw3XNB2VRzEyBWBM5xwZv1eNlDhv
8C450xiVa4YMCUiUox7kJFCFNi75MNtF2SpAfDAlzDPHsKxxRr4RHHrR7tnEkUgU
aTGDy+ZC/sp+725v42DQipxq7irlNs07kBKj/enNIfkuvCdTBK0CvqatYegtcAtk
mxDdb8fTeOjAvkv1k3OujPZY9fRj+mkUFEjmJFbMvHIKtut0B9rNpUGBPaGe9m+Y
1M1xZRegG1888Tzhyp5y/pskKFjZbbG52uhH5qeh3u1KfPpUFbVDCeR/oaePAzxm
NOty7Ea5kkXg+1T+eFBOyyRms3F9A1w=
-----END CERTIFICATE-----
Generated at Fri May 24 00:14:04 2024 by rpki-client on console-ams.rpki-client.org