Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f49564b9-fc05-31ef-9936-689b565c092a.roa
File:                     f49564b9-fc05-31ef-9936-689b565c092a.roa (raw, json)
Hash identifier:          9ex1fzCIHrGqAbn7Agd17JCMow13PkvBhDfv72cCrXw=
Subject key identifier:   A0:E0:FF:BC:DF:52:0D:39:17:07:C3:76:42:E3:E0:96:59:9F:C8:BA
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F432858449016E8DB38124A0158E39000
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f49564b9-fc05-31ef-9936-689b565c092a.roa
Signing time:             Mon 15 Jan 2024 15:41:42 +0000
ROA not before:           Mon 15 Jan 2024 15:41:42 +0000
ROA not after:            Sun 14 Apr 2024 14:41:42 +0000
asID:                     399275
IP address blocks:        172.81.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 02:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:90:16:e8:db:38:12:4a:01:58:e3:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jan 15 15:41:42 2024 GMT
            Not After : Apr 14 14:41:42 2024 GMT
        Subject: CN=685066ac-846c-4a4a-98de-050534a708f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:8e:ad:cb:9f:f2:3f:24:df:50:08:8b:18:
                    d1:62:22:97:86:49:63:26:d4:fa:a2:d2:2a:33:ad:
                    12:51:67:bc:48:85:43:dd:48:ba:62:4d:3f:ee:c2:
                    52:c8:0b:dd:b2:d2:4b:5d:8b:7e:53:36:ef:f0:22:
                    c3:9b:58:23:77:f7:4a:c7:2c:e6:ec:91:cf:a8:d3:
                    cf:41:67:6b:b5:9d:ff:e1:87:90:62:d1:a1:33:b4:
                    34:06:d8:82:cc:4f:fc:1f:15:04:02:3c:a1:7b:1c:
                    b1:07:6b:98:d0:36:66:db:0f:98:37:d0:c4:05:12:
                    f9:a7:77:3d:87:8a:6a:ff:44:1b:5e:d5:1a:91:f8:
                    8b:97:86:33:6b:7f:cd:73:bd:e1:fc:ce:17:34:92:
                    2d:74:33:91:bc:a0:c9:93:b3:59:e5:a1:ab:ea:4b:
                    dc:3b:f2:b0:38:f7:a9:b4:7c:68:3f:56:d3:ff:0b:
                    1f:4e:2b:49:28:77:e9:51:b0:c4:46:54:03:ec:3a:
                    c2:3f:ba:5a:33:5f:4d:91:c5:d4:39:a7:be:1d:b5:
                    8e:05:a0:aa:f9:81:a3:22:3a:5d:dc:57:40:30:3b:
                    3c:60:f7:e8:8b:b3:4d:6c:49:2c:b8:b2:33:4a:f1:
                    f5:fd:1d:b7:3f:d8:e6:df:2f:af:5d:ad:e4:79:3f:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E0:FF:BC:DF:52:0D:39:17:07:C3:76:42:E3:E0:96:59:9F:C8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f49564b9-fc05-31ef-9936-689b565c092a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:ae:57:0b:5c:88:d1:0a:c2:a0:4f:0a:0c:5a:05:ab:73:
         42:cd:76:93:1a:bd:b3:85:13:50:f7:90:db:e1:f6:b6:03:74:
         1d:ac:e7:d6:81:c4:85:ff:ba:9e:35:4e:46:fd:2e:cb:43:4a:
         9b:2d:87:69:80:dd:5d:95:2b:c9:23:b1:9d:76:95:84:4d:64:
         3b:4c:0c:08:28:46:57:bd:e7:3c:0e:fd:5c:20:c7:66:1a:7e:
         a2:93:0b:65:e4:f6:31:c5:d0:12:da:d2:e8:1b:66:50:3c:6c:
         89:47:52:df:7b:69:a0:3d:35:d6:73:37:01:cf:82:e7:5b:e3:
         71:ad:8a:d6:54:49:31:d9:6f:60:01:45:a8:53:bd:22:d0:dc:
         09:a1:fa:f4:87:2f:29:19:32:db:ad:ef:35:62:17:65:72:67:
         01:6e:01:1a:86:29:2d:a4:f1:66:08:5d:c5:82:33:d5:d0:ee:
         4e:78:b6:3d:6e:56:3c:b1:4f:27:84:fd:3d:f6:b5:a6:0d:db:
         f6:e1:5c:16:6b:c8:09:29:2c:4a:62:a6:ca:d2:63:9e:38:a9:
         de:a6:a1:d8:80:00:7c:8f:69:cd:72:ee:7d:81:d9:b1:ad:1e:
         91:ed:5e:8e:d2:9f:a9:87:14:58:d2:8d:87:c7:df:82:d4:fd:
         10:95:06:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESQFujbOBJKAVjjkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2
ZTc1MB4XDTI0MDExNTE1NDE0MloXDTI0MDQxNDE0NDE0MlowLzEtMCsGA1UEAxMk
Njg1MDY2YWMtODQ2Yy00YTRhLTk4ZGUtMDUwNTM0YTcwOGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlraOrcuf8j8k31AIixjRYiKXhkljJtT6otIq
M60SUWe8SIVD3Ui6Yk0/7sJSyAvdstJLXYt+Uzbv8CLDm1gjd/dKxyzm7JHPqNPP
QWdrtZ3/4YeQYtGhM7Q0BtiCzE/8HxUEAjyhexyxB2uY0DZm2w+YN9DEBRL5p3c9
h4pq/0QbXtUakfiLl4Yza3/Nc73h/M4XNJItdDORvKDJk7NZ5aGr6kvcO/KwOPep
tHxoP1bT/wsfTitJKHfpUbDERlQD7DrCP7paM19NkcXUOae+HbWOBaCq+YGjIjpd
3FdAMDs8YPfoi7NNbEksuLIzSvH1/R23P9jm3y+vXa3keT8RywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDg/7zfUg05FwfDdkLj4JZZn8i6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl
NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZjQ5NTY0YjktZmMwNS0z
MWVmLTk5MzYtNjg5YjU2NWMwOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky
OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4
NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj
OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFE7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJd8rlcLXIjRCsKgTwoMWgWrc0LNdpMavbOFE1D3kNvh9rYDdB2s59aB
xIX/up41Tkb9LstDSpsth2mA3V2VK8kjsZ12lYRNZDtMDAgoRle95zwO/Vwgx2Ya
fqKTC2Xk9jHF0BLa0ugbZlA8bIlHUt97aaA9NdZzNwHPgudb43GtitZUSTHZb2AB
RahTvSLQ3Amh+vSHLykZMtut7zViF2VyZwFuARqGKS2k8WYIXcWCM9XQ7k54tj1u
VjyxTyeE/T32taYN2/bhXBZryAkpLEpipsrSY544qd6modiAAHyPac1y7n2B2bGt
HpHtXo7Sn6mHFFjSjYfH34LU/RCVBko=
-----END CERTIFICATE-----
Generated at Wed Jan 17 06:41:16 2024 by rpki-client on console-fra.rpki-client.org