Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60117.roa
File:                     AS60117.roa (raw, json)
Hash identifier:          +bfMB32gX/2cgvdBI2QVcGQUN1Y2YjRMMqfa58fgUII=
Subject key identifier:   D5:B2:DE:34:01:16:44:82:2C:07:DE:A0:03:44:CA:54:E0:C7:5D:18
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       285265EAA79990445CB15835DCF2423831C7C253
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60117.roa
Signing time:             Tue 11 Oct 2022 11:52:26 +0000
ROA not before:           Tue 11 Oct 2022 11:47:26 +0000
ROA not after:            Tue 10 Oct 2023 11:52:26 +0000
asID:                     60117
IP address blocks:        140.99.216.0/22 maxlen: 22
                          140.99.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:52:65:ea:a7:99:90:44:5c:b1:58:35:dc:f2:42:38:31:c7:c2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 11 11:47:26 2022 GMT
            Not After : Oct 10 11:52:26 2023 GMT
        Subject: CN=D5B2DE34011644822C07DEA00344CA54E0C75D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:73:ef:8a:b0:0b:84:02:f9:49:48:cf:40:
                    3c:a5:80:d4:0a:49:cd:27:3d:9b:20:47:2a:6e:8f:
                    13:78:45:47:8d:80:f7:47:5f:09:22:a3:4e:77:82:
                    ef:4f:25:38:93:df:45:d3:a4:35:47:7f:3f:6b:1f:
                    ea:e4:fc:ea:52:3f:1c:a4:e1:0e:bb:87:cd:50:3c:
                    c0:c5:53:60:da:8b:5a:07:10:29:d8:cd:7f:fb:9b:
                    be:c7:f0:95:cb:07:20:05:ab:e4:d9:75:fe:10:98:
                    dd:2e:e4:1c:3c:a4:94:0c:f4:86:ef:10:70:b1:fe:
                    53:04:da:27:b5:0c:1b:c8:df:fd:bb:11:25:eb:6c:
                    eb:e8:e0:9e:e6:e8:44:32:b0:60:31:cb:04:e3:da:
                    1c:31:2b:78:36:50:06:5b:d2:5e:e4:5a:51:6a:48:
                    0b:1c:eb:22:b5:0e:cc:5b:ab:04:44:87:67:8f:04:
                    0d:b7:69:c0:f3:f2:0f:90:88:e9:80:d6:fa:3d:83:
                    ff:fd:b2:16:95:fe:bb:ff:28:db:db:db:0f:34:69:
                    65:8c:20:2d:ff:bb:78:75:11:e4:7c:cf:97:e4:4f:
                    8d:09:1e:60:c9:24:d1:84:55:a6:0e:41:e5:a9:37:
                    59:88:10:5e:5c:0e:35:e3:76:b7:2c:ca:4a:bb:c2:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:DE:34:01:16:44:82:2C:07:DE:A0:03:44:CA:54:E0:C7:5D:18
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.216.0/22
                  140.99.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:61:d9:77:20:f0:b0:e8:a2:8d:3a:6e:a9:63:0a:83:b0:
         31:73:ff:e4:3a:72:7d:43:43:b6:da:24:bf:b0:08:b8:d8:ff:
         5f:0e:02:0c:52:78:57:0c:06:11:a5:f0:0d:78:d1:91:ac:b4:
         a4:6e:83:08:5d:26:d6:df:36:7f:2d:88:37:e7:e8:8d:65:17:
         30:e3:fd:7a:45:94:12:58:e3:05:0c:48:90:6e:ae:01:87:7b:
         ff:4c:79:35:30:50:f2:63:3a:e1:00:e9:3d:f1:53:24:54:92:
         e9:9f:84:69:bd:a3:af:91:e9:73:03:f2:8b:f2:f3:d8:63:a1:
         ca:e9:a0:11:90:ab:a4:d4:11:2a:39:7b:9e:98:b0:aa:ea:6e:
         68:f4:a0:6a:04:c9:55:09:00:ba:43:e2:c2:14:4a:7e:ee:33:
         9b:02:47:4e:0d:0e:70:d7:dd:71:16:aa:03:f3:61:13:fc:5c:
         6e:bd:c0:9c:c2:01:6d:46:72:f2:40:d6:e4:0f:04:28:5b:49:
         e4:3a:5d:bf:02:fa:2a:02:cb:07:88:05:bb:0d:ae:1d:98:0b:
         79:af:73:35:d6:06:5b:2b:f4:63:c3:09:d3:88:b4:77:07:12:
         d1:03:12:0b:fa:1c:08:16:4b:fd:01:96:a0:88:bb:76:1e:0c:
         4b:3b:61:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUKFJl6qeZkERcsVg13PJCODHHwlMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjIxMDExMTE0NzI2WhcNMjMxMDEwMTE1MjI2
WjAzMTEwLwYDVQQDEyhENUIyREUzNDAxMTY0NDgyMkMwN0RFQTAwMzQ0Q0E1NEUw
Qzc1RDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7pz74qwC4QC
+UlIz0A8pYDUCknNJz2bIEcqbo8TeEVHjYD3R18JIqNOd4LvTyU4k99F06Q1R38/
ax/q5PzqUj8cpOEOu4fNUDzAxVNg2otaBxAp2M1/+5u+x/CVywcgBavk2XX+EJjd
LuQcPKSUDPSG7xBwsf5TBNontQwbyN/9uxEl62zr6OCe5uhEMrBgMcsE49ocMSt4
NlAGW9Je5FpRakgLHOsitQ7MW6sERIdnjwQNt2nA8/IPkIjpgNb6PYP//bIWlf67
/yjb29sPNGlljCAt/7t4dRHkfM+X5E+NCR5gySTRhFWmDkHlqTdZiBBeXA4143a3
LMpKu8J1+QIDAQABo4IChDCCAoAwHQYDVR0OBBYEFNWy3jQBFkSCLAfeoANEylTg
x10YMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzYwMTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjGPYAwQCjGPwMA0GCSqGSIb3DQEB
CwUAA4IBAQAzy2HZdyDwsOiijTpuqWMKg7Axc//kOnJ9Q0O22iS/sAi42P9fDgIM
UnhXDAYRpfANeNGRrLSkboMIXSbW3zZ/LYg35+iNZRcw4/16RZQSWOMFDEiQbq4B
h3v/THk1MFDyYzrhAOk98VMkVJLpn4RpvaOvkelzA/KL8vPYY6HK6aARkKuk1BEq
OXuemLCq6m5o9KBqBMlVCQC6Q+LCFEp+7jObAkdODQ5w191xFqoD82ET/FxuvcCc
wgFtRnLyQNbkDwQoW0nkOl2/AvoqAssHiAW7Da4dmAt5r3M11gZbK/RjwwnTiLR3
BxLRAxIL+hwIFkv9AZagiLt2HgxLO2Ec
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org