Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/42b7507a-1f9c-3b8f-9c2f-23f0a97a5089.roa
File:                     42b7507a-1f9c-3b8f-9c2f-23f0a97a5089.roa (raw, json)
Hash identifier:          5V08gwNRApMr03scc6riI/jpFAG7azj0comjSmPBJ4c=
Subject key identifier:   9A:E4:1F:61:E4:7D:A7:EA:72:C4:68:D9:79:65:B6:6D:C4:19:DC:18
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F432858456C532417644F8DC9BE8F49C8
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/42b7507a-1f9c-3b8f-9c2f-23f0a97a5089.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     30311
IP address blocks:        139.104.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 20:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:24:17:64:4f:8d:c9:be:8f:49:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=6ef4684f-fc90-46dd-b68e-75aadf3b6e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:c2:74:5d:24:72:88:8a:c7:49:f3:85:b9:
                    90:d0:ea:47:7c:de:b4:d5:7e:14:9e:1e:54:f8:4e:
                    d1:9c:68:3d:c6:bd:54:8f:f1:8f:de:52:2f:c6:9f:
                    c7:c2:31:a1:86:6d:4c:6d:e5:e2:7d:98:7b:d1:2a:
                    c6:5e:59:66:9c:1d:f5:df:f9:29:62:a6:84:3a:18:
                    f6:4c:d0:cf:46:78:04:68:64:6d:46:ea:fb:21:54:
                    40:e4:34:df:47:86:ca:77:ac:ab:d1:fb:bf:37:60:
                    cd:41:7e:a9:9d:02:86:ce:a2:6e:5b:da:6c:f0:ee:
                    97:da:6d:bd:01:fe:c8:02:4b:2f:a2:01:73:57:04:
                    b8:35:33:76:9d:f7:8d:51:00:a7:8b:56:3d:87:d1:
                    db:e5:31:df:c9:89:84:97:1e:e9:ed:32:2e:6e:07:
                    dd:b7:a3:7b:0a:9f:b1:1a:70:67:05:52:3f:2e:19:
                    6e:d9:45:7d:96:ed:be:73:de:a9:ae:d8:0e:8b:31:
                    a0:c0:62:b2:a6:5e:47:74:a7:57:6e:50:86:1b:20:
                    ff:46:e6:ab:05:b1:df:fb:fe:45:68:ab:c4:08:c4:
                    ce:43:ec:97:c2:a2:07:a4:d0:df:22:57:a1:18:ce:
                    bd:b4:1f:1a:38:83:62:04:fc:34:3d:1d:54:94:db:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E4:1F:61:E4:7D:A7:EA:72:C4:68:D9:79:65:B6:6D:C4:19:DC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/42b7507a-1f9c-3b8f-9c2f-23f0a97a5089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:09:8e:a6:02:31:f9:ef:d4:b6:10:27:c8:69:59:c4:5f:df:
         96:06:8f:ec:52:79:69:80:c5:c0:28:81:2f:8a:2a:5c:86:78:
         4a:ed:d2:94:48:77:d0:ab:65:51:5e:97:b1:29:31:33:ee:ce:
         ec:4d:99:55:e2:79:be:d2:76:00:0d:7e:72:a6:18:74:60:eb:
         bd:49:29:27:40:25:40:4d:3b:06:ad:7f:70:6a:db:d0:67:a0:
         0f:19:43:71:a1:09:62:0e:f4:a0:6b:08:ea:f5:c1:11:b5:2e:
         29:cc:8e:33:c0:ab:bd:85:fa:02:ec:21:1e:7b:52:da:a4:10:
         c8:8d:75:54:6a:01:f1:be:23:4e:4a:35:c3:d2:cb:2d:34:04:
         fd:75:57:af:16:e3:cb:b3:bc:8b:6a:11:86:dc:40:4d:3f:d6:
         cf:93:73:7c:bb:43:fe:2d:dc:d0:c5:0e:34:7b:8b:95:6d:e9:
         2a:34:07:51:f7:c9:e8:38:f4:3c:b0:30:5b:8c:81:f2:a4:58:
         50:54:0b:af:01:2c:ba:fc:89:63:cc:e5:58:e3:4f:c6:6a:fa:
         41:19:fb:92:4e:90:5b:d4:8c:67:fa:5d:ef:08:e0:79:d3:8a:
         71:09:18:62:28:2a:eb:ba:ea:28:8f:2a:f0:11:42:d9:e9:25:
         e3:5a:62:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUyQXZE+Nyb6PScgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4
OThjMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
NmVmNDY4NGYtZmM5MC00NmRkLWI2OGUtNzVhYWRmM2I2ZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFnCdF0kcoiKx0nzhbmQ0OpHfN601X4Unh5U
+E7RnGg9xr1Uj/GP3lIvxp/HwjGhhm1MbeXifZh70SrGXllmnB313/kpYqaEOhj2
TNDPRngEaGRtRur7IVRA5DTfR4bKd6yr0fu/N2DNQX6pnQKGzqJuW9ps8O6X2m29
Af7IAksvogFzVwS4NTN2nfeNUQCni1Y9h9Hb5THfyYmElx7p7TIubgfdt6N7Cp+x
GnBnBVI/Lhlu2UV9lu2+c96prtgOizGgwGKypl5HdKdXblCGGyD/RuarBbHf+/5F
aKvECMTOQ+yXwqIHpNDfIlehGM69tB8aOINiBPw0PR1UlNvPpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrkH2HkfafqcsRo2Xlltm3EGdwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli
ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvNDJiNzUwN2EtMWY5Yy0z
YjhmLTljMmYtMjNmMGE5N2E1MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4
OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3
ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3
ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi2gUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMJjqYCMfnv1LYQJ8hpWcRf35YGj+xSeWmAxcAogS+KKlyGeErt0pRI
d9CrZVFel7EpMTPuzuxNmVXieb7SdgANfnKmGHRg671JKSdAJUBNOwatf3Bq29Bn
oA8ZQ3GhCWIO9KBrCOr1wRG1LinMjjPAq72F+gLsIR57UtqkEMiNdVRqAfG+I05K
NcPSyy00BP11V68W48uzvItqEYbcQE0/1s+Tc3y7Q/4t3NDFDjR7i5Vt6So0B1H3
yeg49DywMFuMgfKkWFBUC68BLLr8iWPM5VjjT8Zq+kEZ+5JOkFvUjGf6Xe8I4HnT
inEJGGIoKuu66iiPKvARQtnpJeNaYjI=
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:24:40 2024 by rpki-client on console-fra.rpki-client.org