Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/97105020-44b6-3e8e-8dc1-c341cb2fd0ba.roa
File:                     97105020-44b6-3e8e-8dc1-c341cb2fd0ba.roa (raw, json)
Hash identifier:          7UbrxgZSRLvlMkJCmTO8uZXZV8NqI4Mts7qtT3D0REk=
Subject key identifier:   F4:E6:0D:09:58:85:BA:00:5D:E2:27:B6:C0:3D:91:B7:6C:84:2F:3A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843849F3EEE07EAA9ABC2F60940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/97105020-44b6-3e8e-8dc1-c341cb2fd0ba.roa
Signing time:             Wed 11 Oct 2023 20:19:46 +0000
ROA not before:           Wed 11 Oct 2023 20:19:46 +0000
ROA not after:            Tue 09 Jan 2024 21:19:46 +0000
asID:                     852
IP address blocks:        173.211.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:84:9f:3e:ee:07:ea:a9:ab:c2:f6:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 11 20:19:46 2023 GMT
            Not After : Jan  9 21:19:46 2024 GMT
        Subject: CN=69941bf9-5a57-43bb-b3c9-cea2a3f3cc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:b8:c9:cb:ef:8d:f1:5b:22:fa:88:0b:4a:
                    ca:2f:56:05:5b:14:f3:05:1e:85:5c:c1:f0:e5:fa:
                    d4:3e:b2:6f:7e:1e:07:dd:dc:ff:92:5f:4e:df:c1:
                    a9:af:91:f1:3b:79:d8:5e:b4:20:9f:fc:9d:82:e1:
                    3b:3b:75:9f:be:0c:5d:3e:98:b4:59:18:3a:af:e6:
                    d7:61:5a:26:bc:dc:31:a7:ce:d3:b8:bb:07:98:7d:
                    0e:4b:ec:49:c7:8b:40:2a:91:87:09:be:40:24:eb:
                    c6:fa:3c:b1:41:99:21:86:db:9f:23:6c:31:26:83:
                    d3:f9:19:9c:64:19:73:b5:7b:2e:6b:64:dd:71:e8:
                    4a:bf:8c:b5:21:a0:d0:ed:ab:9b:da:fb:65:3a:76:
                    c1:f0:ac:57:6a:f6:22:5a:c2:98:e4:23:a4:90:fc:
                    69:eb:f5:05:cd:38:5d:21:e9:68:1c:1b:5d:46:90:
                    cb:9f:59:56:5f:f8:2a:ee:88:47:76:37:61:eb:53:
                    3b:b5:36:8d:29:d9:7d:d1:16:53:b5:a2:43:9c:78:
                    58:77:17:c7:d5:17:33:13:87:7c:37:b9:80:55:c9:
                    32:39:19:c7:0c:bb:4b:17:99:a6:0d:a8:9b:9f:92:
                    18:df:e3:a2:37:b8:c1:38:ed:a9:49:17:fd:53:86:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E6:0D:09:58:85:BA:00:5D:E2:27:B6:C0:3D:91:B7:6C:84:2F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/97105020-44b6-3e8e-8dc1-c341cb2fd0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:16:b2:92:5c:ff:6f:7a:98:4a:95:08:fe:f8:ae:77:77:
         84:e0:b8:d5:d0:cc:b5:a0:6b:10:ae:b7:ca:97:41:5e:84:d7:
         83:4c:53:f7:e0:39:a6:ca:22:87:07:b0:d6:8b:1b:9e:5b:f1:
         1a:0d:e2:99:2a:8c:d2:5b:ca:4f:3c:21:06:f3:74:ca:9a:5c:
         4f:60:9a:d8:a0:96:0c:c7:e3:44:8d:6d:0a:ba:26:f3:e1:68:
         b3:44:4c:d4:5b:a2:4c:ec:59:df:55:5f:ef:c8:65:d0:b5:1e:
         e7:e7:99:52:57:03:d7:46:71:21:94:ec:f5:73:00:e0:ed:fe:
         02:74:0d:d3:6e:4e:94:0b:d8:da:9c:c7:cb:b4:34:ef:cc:93:
         df:3e:9c:1c:d7:e6:2b:05:2a:e7:38:19:dd:d5:13:b8:3d:7d:
         20:0b:41:28:3f:49:9f:6f:ce:a3:11:26:f7:fa:16:11:f3:84:
         c5:a7:88:65:12:69:a6:e3:95:ba:fa:de:4a:f7:f8:57:80:41:
         cb:44:61:95:f8:d3:27:da:28:e5:a7:90:27:39:b3:21:52:0f:
         16:ab:74:88:fb:b0:44:ed:1c:03:0f:57:8c:f4:51:b2:50:69:
         a4:f4:4f:c5:10:21:eb:e3:04:8b:30:2c:ec:b8:9a:ca:ff:36:
         a0:92:9f:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOEnz7uB+qpq8L2CUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMTAxMTIwMTk0NloXDTI0MDEwOTIxMTk0NlowLzEtMCsGA1UEAxMk
Njk5NDFiZjktNWE1Ny00M2JiLWIzYzktY2VhMmEzZjNjYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J64ycvvjfFbIvqIC0rKL1YFWxTzBR6FXMHw
5frUPrJvfh4H3dz/kl9O38Gpr5HxO3nYXrQgn/ydguE7O3WfvgxdPpi0WRg6r+bX
YVomvNwxp87TuLsHmH0OS+xJx4tAKpGHCb5AJOvG+jyxQZkhhtufI2wxJoPT+Rmc
ZBlztXsua2TdcehKv4y1IaDQ7aub2vtlOnbB8KxXavYiWsKY5COkkPxp6/UFzThd
IeloHBtdRpDLn1lWX/gq7ohHdjdh61M7tTaNKdl90RZTtaJDnHhYdxfH1RczE4d8
N7mAVckyORnHDLtLF5mmDaibn5IY3+OiN7jBOO2pSRf9U4YYnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTmDQlYhboAXeIntsA9kbdshC86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTcxMDUwMjAtNDRiNi0z
ZThlLThkYzEtYzM0MWNiMmZkMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8fFrKSXP9vephKlQj++K53d4TguNXQzLWgaxCut8qXQV6E14NMU/fg
OabKIocHsNaLG55b8RoN4pkqjNJbyk88IQbzdMqaXE9gmtiglgzH40SNbQq6JvPh
aLNETNRbokzsWd9VX+/IZdC1HufnmVJXA9dGcSGU7PVzAODt/gJ0DdNuTpQL2Nqc
x8u0NO/Mk98+nBzX5isFKuc4Gd3VE7g9fSALQSg/SZ9vzqMRJvf6FhHzhMWniGUS
aabjlbr63kr3+FeAQctEYZX40yfaKOWnkCc5syFSDxardIj7sETtHAMPV4z0UbJQ
aaT0T8UQIevjBIswLOy4msr/NqCSn68=
-----END CERTIFICATE-----
Generated at Fri Nov 10 21:03:46 2023 by rpki-client on console-fra.rpki-client.org