Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/8c4c9561-e294-35e4-a1bf-c88338ec8233.roa
File:                     8c4c9561-e294-35e4-a1bf-c88338ec8233.roa (raw, json)
Hash identifier:          zN/0KGx2WqqveNm8+xsVjN9TMjJoNmzH8SuxXDunCZw=
Subject key identifier:   7D:E3:C8:B3:72:2C:CD:1C:79:F0:14:EE:4F:72:56:B3:A0:30:E6:71
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F43285843A298C8C3B6AF46C677112940
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/8c4c9561-e294-35e4-a1bf-c88338ec8233.roa
Signing time:             Sat 21 Oct 2023 12:00:00 +0000
ROA not before:           Sat 21 Oct 2023 12:00:00 +0000
ROA not after:            Tue 04 Mar 2025 05:00:00 +0000
asID:                     6453
IP address blocks:        162.213.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a2:98:c8:c3:b6:af:46:c6:77:11:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Oct 21 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2025 GMT
        Subject: CN=f4dab583-4f7f-42ff-bbd0-47f1986e070e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:4b:d8:2d:6f:bd:14:4f:d5:34:f9:13:36:
                    f7:f1:c6:ff:3e:6b:d6:f9:a7:b7:59:19:4e:5d:50:
                    70:2b:ee:a9:c8:b3:6f:da:a4:95:77:d8:d9:15:54:
                    12:08:2b:f2:87:48:e2:34:24:8d:2a:46:b5:c8:e5:
                    85:5a:c1:94:10:8d:82:59:af:0d:88:f6:10:e6:97:
                    82:11:8c:d8:ac:5e:42:d8:fd:2b:9b:4b:29:d3:8f:
                    ad:88:bc:5b:8c:a5:73:ec:7c:e5:5e:61:eb:f8:c9:
                    a6:eb:9d:d9:ce:56:f1:95:d2:66:6c:b7:11:c2:b5:
                    d1:31:4a:ac:62:93:fd:6e:f5:16:70:fa:fe:af:d1:
                    72:70:8a:e4:d9:19:61:d4:6f:83:c5:5c:dd:6f:8f:
                    cc:db:05:26:df:d4:75:90:b5:dd:95:46:17:c4:a3:
                    53:33:65:49:7d:eb:a0:75:cf:14:5c:bd:ef:8e:a6:
                    8c:ff:94:ce:de:bc:21:ea:b8:45:f4:46:3c:86:59:
                    20:57:01:a6:b1:bc:0a:dc:30:3b:80:33:fc:70:53:
                    59:0a:a6:81:f6:8d:f9:c9:99:f0:21:c4:91:6e:39:
                    0b:c3:d5:87:59:68:b0:76:19:c2:ed:25:31:12:bb:
                    8a:e4:0e:1c:5f:e0:07:a6:44:d6:d6:6f:65:1c:36:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:C8:B3:72:2C:CD:1C:79:F0:14:EE:4F:72:56:B3:A0:30:E6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/8c4c9561-e294-35e4-a1bf-c88338ec8233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:32:0b:ce:41:f6:bd:14:cd:eb:d0:5b:01:9a:61:61:24:
         3f:4f:db:72:0a:e4:59:cc:51:1d:b7:9e:95:75:bd:b5:87:6a:
         fc:79:53:26:46:39:a0:0d:e9:2c:5e:20:cf:49:23:49:03:6a:
         c1:b8:89:09:6a:a5:bd:99:8d:d1:d7:e4:39:4d:2b:cb:b6:76:
         92:e0:27:56:81:37:8c:98:48:32:ad:6a:68:d9:86:50:9d:b7:
         5a:14:57:7d:a0:88:5d:8f:56:ef:f7:08:60:ba:43:79:96:60:
         15:50:f0:5a:8b:71:22:ae:4b:0f:81:1a:78:a0:0d:d0:b6:a7:
         b2:45:89:f2:0d:9c:29:5a:86:f1:5c:64:96:fc:fc:a6:39:f6:
         0c:46:c9:7c:2e:0e:4d:92:27:37:cd:0c:7c:7c:ba:f2:6d:0a:
         05:6f:60:4a:c0:56:49:01:d7:9d:f2:6f:7d:73:8e:9e:e8:3b:
         82:bf:27:0f:09:8d:30:87:c2:c2:a5:6b:cf:4a:52:74:f8:bb:
         9f:c2:7f:11:24:9e:09:c9:75:e1:0a:48:75:ac:81:e3:2f:3f:
         0f:bd:17:03:78:48:2d:38:83:fb:c8:bd:a9:e4:f3:92:71:e1:
         74:02:ff:1e:b6:54:7d:59:11:9d:2b:89:5f:70:a5:75:b2:34:
         fa:8d:22:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOimMjDtq9GxncRKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi
Nzg1MB4XDTIzMTAyMTEyMDAwMFoXDTI1MDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZjRkYWI1ODMtNGY3Zi00MmZmLWJiZDAtNDdmMTk4NmUwNzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxNL2C1vvRRP1TT5Ezb38cb/PmvW+ae3WRlO
XVBwK+6pyLNv2qSVd9jZFVQSCCvyh0jiNCSNKka1yOWFWsGUEI2CWa8NiPYQ5peC
EYzYrF5C2P0rm0sp04+tiLxbjKVz7HzlXmHr+Mmm653ZzlbxldJmbLcRwrXRMUqs
YpP9bvUWcPr+r9FycIrk2Rlh1G+DxVzdb4/M2wUm39R1kLXdlUYXxKNTM2VJfeug
dc8UXL3vjqaM/5TO3rwh6rhF9EY8hlkgVwGmsbwK3DA7gDP8cFNZCqaB9o35yZnw
IcSRbjkLw9WHWWiwdhnC7SUxEruK5A4cX+AHpkTW1m9lHDaxMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3jyLNyLM0cefAU7k9yVrOgMOZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi
MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvOGM0Yzk1NjEtZTI5NC0z
NWU0LWExYmYtYzg4MzM4ZWM4MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk
MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi
Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw
YzU0YmI3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAJMgvOQfa9FM3r0FsBmmFhJD9P23IK5FnMUR23npV1vbWHavx5UyZG
OaAN6SxeIM9JI0kDasG4iQlqpb2ZjdHX5DlNK8u2dpLgJ1aBN4yYSDKtamjZhlCd
t1oUV32giF2PVu/3CGC6Q3mWYBVQ8FqLcSKuSw+BGnigDdC2p7JFifINnClahvFc
ZJb8/KY59gxGyXwuDk2SJzfNDHx8uvJtCgVvYErAVkkB153yb31zjp7oO4K/Jw8J
jTCHwsKla89KUnT4u5/CfxEkngnJdeEKSHWsgeMvPw+9FwN4SC04g/vIvank85Jx
4XQC/x62VH1ZEZ0riV9wpXWyNPqNIo4=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org