Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f219f832-539d-340b-a8da-97234d746937.roa
File:                     f219f832-539d-340b-a8da-97234d746937.roa (raw, json)
Hash identifier:          7FRAaavZsGQJiLeZgTTVdAJsRhAujPuePmtDxisN6uk=
Subject key identifier:   09:59:2A:F7:EB:3A:42:3E:85:46:6F:E0:C6:42:5D:EA:9C:2A:29:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858447F96E22FBBBC8C333C5F8380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f219f832-539d-340b-a8da-97234d746937.roa
Signing time:             Tue 09 Jan 2024 17:50:49 +0000
ROA not before:           Tue 09 Jan 2024 17:50:49 +0000
ROA not after:            Mon 08 Apr 2024 16:50:49 +0000
asID:                     16509
IP address blocks:        216.74.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Mar 2024 06:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:96:e2:2f:bb:bc:8c:33:3c:5f:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  9 17:50:49 2024 GMT
            Not After : Apr  8 16:50:49 2024 GMT
        Subject: CN=212cc14b-65b8-49f6-a8c6-69d4cc27f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:d2:96:b8:71:0c:75:f7:0d:f6:c6:c2:1e:
                    b5:19:50:57:f9:0e:40:96:9f:a6:88:e0:bc:f7:9e:
                    c6:08:a0:5f:87:64:96:28:f7:a6:4e:1d:3a:cb:bc:
                    e6:5f:9c:d3:7a:05:2a:a7:af:70:d9:d2:32:d4:40:
                    3b:0a:bb:92:62:96:3f:b9:1a:e0:07:30:26:97:ab:
                    3e:f7:22:e9:a1:eb:0f:db:99:ba:e2:b4:c0:3d:d8:
                    bd:86:93:f0:7c:41:e9:8b:b9:d6:c5:90:93:9c:54:
                    ac:cb:29:d4:e9:25:e8:12:01:c7:54:4d:06:27:66:
                    09:d5:fc:f2:23:13:29:6a:60:ee:a3:bc:b4:88:36:
                    22:cb:b5:81:47:8b:c1:8b:61:53:20:0d:f4:15:04:
                    17:27:e0:70:a8:fd:8c:a2:1d:ec:1a:07:cd:46:96:
                    be:e0:0a:a7:59:e5:84:47:fa:b8:f8:90:79:b9:14:
                    b6:ef:9e:ca:59:28:20:53:bf:b0:f7:23:7b:c3:50:
                    70:c7:4f:55:5e:cd:be:ea:e1:4b:77:02:2b:c2:f5:
                    78:4c:a5:85:79:9c:5e:43:8a:f7:9a:a1:10:d0:c4:
                    9b:2c:77:0c:2c:af:cf:55:cb:49:d7:40:4b:c8:46:
                    d6:6b:f2:d5:38:05:55:7c:21:10:86:82:68:ef:fc:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:2A:F7:EB:3A:42:3E:85:46:6F:E0:C6:42:5D:EA:9C:2A:29:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f219f832-539d-340b-a8da-97234d746937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:86:03:8e:4f:0c:db:8e:bd:3b:53:1f:21:db:e1:d3:9d:
         49:34:5c:83:5b:54:b0:a7:84:26:3a:ca:b8:1a:3f:1f:09:a9:
         48:66:14:38:d2:7a:be:06:40:d3:38:e2:a7:0a:94:3e:98:20:
         82:d9:c5:d1:e1:aa:9b:d7:3d:0e:9c:c2:cf:ff:5f:8c:fd:63:
         57:ac:6b:aa:08:bd:81:ea:bf:66:17:54:a3:43:b4:21:2d:18:
         b0:f2:bd:02:39:ae:5c:6b:3f:92:de:46:ed:16:fb:57:1f:f2:
         9d:72:05:70:f7:e4:07:e9:13:30:91:6d:83:75:e0:12:c5:e2:
         c9:97:30:2d:38:e2:22:81:3a:31:bd:54:36:31:7c:01:cf:65:
         c1:46:6b:6c:1d:d0:39:e3:10:cb:59:37:f2:30:f4:49:f2:02:
         fa:29:1b:af:d8:fd:89:c4:df:7e:66:0d:ed:e3:bd:2f:57:9b:
         05:0c:5b:62:85:ff:26:0d:e3:65:33:12:98:da:30:22:21:49:
         c4:a6:b9:4b:bc:69:26:28:56:29:7f:51:1a:8d:9b:18:ea:6a:
         e7:46:07:ea:18:7f:0d:13:d5:fd:4a:06:77:84:8f:17:dd:7f:
         6a:91:f0:40:42:0d:8d:1e:0a:30:68:c0:fd:36:7d:a6:77:af:
         e7:64:fc:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWER/luIvu7yMMzxfg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDEwOTE3NTA0OVoXDTI0MDQwODE2NTA0OVowLzEtMCsGA1UEAxMk
MjEyY2MxNGItNjViOC00OWY2LWE4YzYtNjlkNGNjMjdmMzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ/SlrhxDHX3DfbGwh61GVBX+Q5Alp+miOC8
957GCKBfh2SWKPemTh06y7zmX5zTegUqp69w2dIy1EA7CruSYpY/uRrgBzAml6s+
9yLpoesP25m64rTAPdi9hpPwfEHpi7nWxZCTnFSsyynU6SXoEgHHVE0GJ2YJ1fzy
IxMpamDuo7y0iDYiy7WBR4vBi2FTIA30FQQXJ+BwqP2Moh3sGgfNRpa+4AqnWeWE
R/q4+JB5uRS2757KWSggU7+w9yN7w1Bwx09VXs2+6uFLdwIrwvV4TKWFeZxeQ4r3
mqEQ0MSbLHcMLK/PVctJ10BLyEbWa/LVOAVVfCEQhoJo7/yXHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlZKvfrOkI+hUZv4MZCXeqcKikCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjIxOWY4MzItNTM5ZC0z
NDBiLWE4ZGEtOTcyMzRkNzQ2OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALw2hgOOTwzbjr07Ux8h2+HTnUk0XINbVLCnhCY6yrgaPx8JqUhmFDjS
er4GQNM44qcKlD6YIILZxdHhqpvXPQ6cws//X4z9Y1esa6oIvYHqv2YXVKNDtCEt
GLDyvQI5rlxrP5LeRu0W+1cf8p1yBXD35AfpEzCRbYN14BLF4smXMC044iKBOjG9
VDYxfAHPZcFGa2wd0DnjEMtZN/Iw9EnyAvopG6/Y/YnE335mDe3jvS9XmwUMW2KF
/yYN42UzEpjaMCIhScSmuUu8aSYoVil/URqNmxjqaudGB+oYfw0T1f1KBneEjxfd
f2qR8EBCDY0eCjBowP02faZ3r+dk/Gw=
-----END CERTIFICATE-----
Generated at Sun Mar 10 08:31:10 2024 by rpki-client on console-ams.rpki-client.org