Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a462e2e-60a2-3c6d-9a00-8de2aded4ca8.roa
File:                     0a462e2e-60a2-3c6d-9a00-8de2aded4ca8.roa (raw, json)
Hash identifier:          3ktyX4a4wEogcH+nZS7txoZBH06KyUULjzPAcS6UmtA=
Subject key identifier:   0A:B9:64:20:CC:DF:32:10:F8:B2:5C:DE:FA:26:A3:B0:F2:D5:AC:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07342DDC04BE2D65873994C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a462e2e-60a2-3c6d-9a00-8de2aded4ca8.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        141.152.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:34:2d:dc:04:be:2d:65:87:39:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=3da2a120-6293-48f5-898d-78d54b4a297a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:11:8d:6d:23:78:f7:ac:31:35:06:ee:b6:
                    7c:4a:d7:b1:3c:b4:25:f7:77:ee:8a:75:2f:3c:87:
                    d8:a4:1b:81:81:ef:ba:35:3a:af:7d:6a:5d:97:84:
                    d4:4d:e4:b7:bd:41:32:01:93:fc:64:95:c5:8b:c7:
                    a5:d3:0d:2b:8c:3e:85:e1:81:65:a7:19:4a:c3:08:
                    39:ad:ed:c5:f5:f9:9f:6f:4f:de:3a:51:ec:47:97:
                    30:91:37:38:3d:78:f0:6a:c7:f9:d1:ed:c6:39:59:
                    be:6f:08:01:de:95:6f:ea:5b:30:ee:ce:26:50:02:
                    1b:f1:ee:df:ea:e1:2b:3e:61:18:30:61:d0:a3:d5:
                    e5:20:1c:bf:12:71:76:3d:22:61:12:0c:d1:f4:56:
                    93:8e:3a:6a:83:42:95:c3:dd:22:8e:56:0d:5c:d7:
                    3e:9a:c4:c7:02:8a:25:d4:ce:76:91:66:56:8b:e9:
                    e2:95:b1:d5:94:30:c4:c4:35:fd:89:6a:ac:3d:6b:
                    2f:85:95:b1:c9:28:12:bb:51:ea:0f:63:16:bc:35:
                    2f:f2:58:36:46:dd:87:f0:78:39:94:c8:85:d0:44:
                    52:cf:9d:4d:9d:8e:93:9c:d2:d8:c3:35:5a:10:ea:
                    ee:07:de:e4:61:77:fa:4b:8d:1b:b5:e7:eb:02:1e:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:64:20:CC:DF:32:10:F8:B2:5C:DE:FA:26:A3:B0:F2:D5:AC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a462e2e-60a2-3c6d-9a00-8de2aded4ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:db:5e:5d:03:f5:7e:f2:22:ea:8c:49:55:dd:72:7b:c7:ff:
         9f:4b:61:7b:9c:9e:0f:b8:35:fd:fc:bb:82:be:b4:df:4f:ff:
         ac:94:9b:bd:6e:f1:fd:38:f6:bb:c3:82:09:c9:93:d7:9e:e2:
         ed:dd:55:f3:3d:a5:97:6c:eb:59:10:40:e7:02:53:33:3a:e0:
         20:91:8d:8d:2b:3e:42:0a:92:4b:c6:89:82:90:ce:b6:3a:f3:
         09:c0:ba:29:19:94:14:0c:3b:d4:44:8c:f4:9e:9d:64:c8:05:
         97:b3:24:62:ff:46:fb:12:b8:62:55:39:1c:c9:cf:d1:c4:b5:
         95:c0:8b:61:e5:3a:9d:f0:71:9e:dd:0a:3c:7d:a3:d1:0f:4f:
         4e:fe:6c:2b:24:0a:2a:a5:0c:10:0e:ef:be:7d:17:46:9e:32:
         d8:46:6f:e2:14:06:db:52:a7:d7:36:2e:49:38:4b:2a:a1:5a:
         8b:78:ff:51:e9:20:47:87:34:46:4b:d1:66:87:d8:6b:94:0d:
         3a:5f:e8:a0:67:93:94:1d:25:fb:37:cb:0d:a9:d3:bc:5f:91:
         7d:05:36:3b:0e:59:8b:9d:7c:18:1d:20:e3:8a:10:04:0b:78:
         44:ad:30:ff:e8:07:90:e0:a8:d3:9d:a1:7f:81:c0:c4:5c:55:
         a6:87:62:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HNC3cBL4tZYc5lMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
M2RhMmExMjAtNjI5My00OGY1LTg5OGQtNzhkNTRiNGEyOTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkQRjW0jePesMTUG7rZ8StexPLQl93fuinUv
PIfYpBuBge+6NTqvfWpdl4TUTeS3vUEyAZP8ZJXFi8el0w0rjD6F4YFlpxlKwwg5
re3F9fmfb0/eOlHsR5cwkTc4PXjwasf50e3GOVm+bwgB3pVv6lsw7s4mUAIb8e7f
6uErPmEYMGHQo9XlIBy/EnF2PSJhEgzR9FaTjjpqg0KVw90ijlYNXNc+msTHAool
1M52kWZWi+nilbHVlDDExDX9iWqsPWsvhZWxySgSu1HqD2MWvDUv8lg2Rt2H8Hg5
lMiF0ERSz51NnY6TnNLYwzVaEOruB97kYXf6S40btefrAh6KvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAq5ZCDM3zIQ+LJc3vomo7Dy1ax3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE0NjJlMmUtNjBhMi0z
YzZkLTlhMDAtOGRlMmFkZWQ0Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjZhMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLbXl0D9X7yIuqMSVXdcnvH/59LYXucng+4Nf38u4K+tN9P/6yUm71u
8f049rvDggnJk9ee4u3dVfM9pZds61kQQOcCUzM64CCRjY0rPkIKkkvGiYKQzrY6
8wnAuikZlBQMO9REjPSenWTIBZezJGL/RvsSuGJVORzJz9HEtZXAi2HlOp3wcZ7d
Cjx9o9EPT07+bCskCiqlDBAO7759F0aeMthGb+IUBttSp9c2Lkk4SyqhWot4/1Hp
IEeHNEZL0WaH2GuUDTpf6KBnk5QdJfs3yw2p07xfkX0FNjsOWYudfBgdIOOKEAQL
eEStMP/oB5DgqNOdoX+BwMRcVaaHYs4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org