Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212235.roa
File:                     AS212235.roa (raw, json)
Hash identifier:          F4c1ZfDAo/X9zYg9DHS3glbsVSxwoN83R6CK56H0YOw=
Subject key identifier:   BE:47:C1:A5:87:F5:C9:AA:D7:37:33:E9:B9:85:15:EE:3E:60:3C:EB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       153D59D558C8C051474F521B9611DEFECA8696A2
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212235.roa
Signing time:             Thu 24 Aug 2023 17:26:56 +0000
ROA not before:           Thu 24 Aug 2023 17:21:56 +0000
ROA not after:            Thu 22 Aug 2024 17:26:56 +0000
asID:                     212235
IP address blocks:        50.31.139.0/24 maxlen: 24
                          50.31.161.0/24 maxlen: 24
                          64.202.99.0/24 maxlen: 24
                          64.202.100.0/24 maxlen: 24
                          64.202.103.0/24 maxlen: 24
                          64.202.105.0/24 maxlen: 24
                          64.202.106.0/24 maxlen: 24
                          66.225.193.0/24 maxlen: 24
                          66.225.199.0/24 maxlen: 24
                          66.225.238.0/24 maxlen: 24
                          66.225.242.0/24 maxlen: 24
                          75.102.11.0/24 maxlen: 24
                          75.102.18.0/24 maxlen: 24
                          75.102.28.0/24 maxlen: 24
                          75.102.29.0/24 maxlen: 24
                          204.93.166.0/24 maxlen: 24
                          204.93.171.0/24 maxlen: 24
                          204.93.184.0/24 maxlen: 24
                          204.93.195.0/24 maxlen: 24
                          204.93.209.0/24 maxlen: 24
                          204.93.235.0/24 maxlen: 24
                          204.93.245.0/24 maxlen: 24
                          204.93.246.0/24 maxlen: 24
                          205.234.133.0/24 maxlen: 24
                          205.234.142.0/24 maxlen: 24
                          205.234.147.0/24 maxlen: 24
                          205.234.148.0/24 maxlen: 24
                          205.234.151.0/24 maxlen: 24
                          205.234.164.0/24 maxlen: 24
                          205.234.166.0/24 maxlen: 24
                          205.234.169.0/24 maxlen: 24
                          205.234.172.0/24 maxlen: 24
                          205.234.180.0/24 maxlen: 24
                          205.234.192.0/24 maxlen: 24
                          205.234.196.0/24 maxlen: 24
                          205.234.202.0/24 maxlen: 24
                          205.234.228.0/24 maxlen: 24
                          205.234.242.0/24 maxlen: 24
                          205.234.245.0/24 maxlen: 24
                          205.234.254.0/24 maxlen: 24
                          216.246.8.0/24 maxlen: 24
                          216.246.11.0/24 maxlen: 24
                          216.246.13.0/24 maxlen: 24
                          216.246.16.0/24 maxlen: 24
                          216.246.17.0/24 maxlen: 24
                          216.246.22.0/24 maxlen: 24
                          216.246.23.0/24 maxlen: 24
                          216.246.27.0/24 maxlen: 24
                          216.246.32.0/24 maxlen: 24
                          216.246.35.0/24 maxlen: 24
                          216.246.41.0/24 maxlen: 24
                          216.246.43.0/24 maxlen: 24
                          216.246.45.0/24 maxlen: 24
                          216.246.48.0/24 maxlen: 24
                          216.246.52.0/24 maxlen: 24
                          216.246.53.0/24 maxlen: 24
                          216.246.54.0/24 maxlen: 24
                          216.246.55.0/24 maxlen: 24
                          216.246.57.0/24 maxlen: 24
                          216.246.80.0/24 maxlen: 24
                          216.246.81.0/24 maxlen: 24
                          216.246.82.0/24 maxlen: 24
                          216.246.83.0/24 maxlen: 24
                          216.246.84.0/24 maxlen: 24
                          216.246.85.0/24 maxlen: 24
                          216.246.86.0/24 maxlen: 24
                          216.246.87.0/24 maxlen: 24
                          216.246.90.0/24 maxlen: 24
                          216.246.93.0/24 maxlen: 24
                          216.246.95.0/24 maxlen: 24
                          216.246.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 29 Aug 2023 08:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3d:59:d5:58:c8:c0:51:47:4f:52:1b:96:11:de:fe:ca:86:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 24 17:21:56 2023 GMT
            Not After : Aug 22 17:26:56 2024 GMT
        Subject: CN=BE47C1A587F5C9AAD73733E9B98515EE3E603CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:96:96:c2:9d:41:41:51:0d:95:a7:a0:87:
                    03:90:30:74:6d:bf:25:ff:40:fa:26:a0:89:9d:43:
                    61:6b:66:bd:99:bf:7d:97:af:45:e7:81:83:c2:49:
                    a7:65:f3:8b:eb:d4:d4:47:2d:b2:75:4c:74:3c:3f:
                    8b:ab:83:7f:f7:01:a7:08:cd:6d:57:1d:3b:9d:d9:
                    12:99:0c:50:3d:ee:5e:45:32:f9:13:a3:61:dc:a8:
                    db:0a:22:d4:42:e9:43:2b:b9:e1:e3:00:38:a4:06:
                    43:ab:fa:5f:c1:fc:ac:c9:97:87:b3:e7:59:98:29:
                    f3:76:46:f6:5e:8a:50:ef:67:b7:b0:0d:c3:42:11:
                    4b:d8:2f:1e:37:b0:f8:0b:47:15:fe:60:45:c0:cc:
                    bd:09:da:35:6c:2f:e8:9a:b2:e3:6a:0e:9d:c1:dc:
                    19:bd:50:15:82:e4:60:87:cb:41:03:b9:a0:5f:6b:
                    d5:64:f3:2b:70:29:02:3d:ce:d2:42:ae:39:13:f3:
                    e8:d7:c0:a9:a8:6c:5c:8d:19:f6:89:eb:80:bb:80:
                    f1:36:e1:a4:71:9b:51:21:f4:6b:0d:f9:07:bd:47:
                    07:09:65:95:52:25:81:d1:6f:59:0f:65:e5:41:d8:
                    ae:16:4f:69:0b:2f:c1:b2:f6:fa:6b:aa:7a:9e:37:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:C1:A5:87:F5:C9:AA:D7:37:33:E9:B9:85:15:EE:3E:60:3C:EB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.139.0/24
                  50.31.161.0/24
                  64.202.99.0-64.202.100.255
                  64.202.103.0/24
                  64.202.105.0-64.202.106.255
                  66.225.193.0/24
                  66.225.199.0/24
                  66.225.238.0/24
                  66.225.242.0/24
                  75.102.11.0/24
                  75.102.18.0/24
                  75.102.28.0/23
                  204.93.166.0/24
                  204.93.171.0/24
                  204.93.184.0/24
                  204.93.195.0/24
                  204.93.209.0/24
                  204.93.235.0/24
                  204.93.245.0-204.93.246.255
                  205.234.133.0/24
                  205.234.142.0/24
                  205.234.147.0-205.234.148.255
                  205.234.151.0/24
                  205.234.164.0/24
                  205.234.166.0/24
                  205.234.169.0/24
                  205.234.172.0/24
                  205.234.180.0/24
                  205.234.192.0/24
                  205.234.196.0/24
                  205.234.202.0/24
                  205.234.228.0/24
                  205.234.242.0/24
                  205.234.245.0/24
                  205.234.254.0/24
                  216.246.8.0/24
                  216.246.11.0/24
                  216.246.13.0/24
                  216.246.16.0/23
                  216.246.22.0/23
                  216.246.27.0/24
                  216.246.32.0/24
                  216.246.35.0/24
                  216.246.41.0/24
                  216.246.43.0/24
                  216.246.45.0/24
                  216.246.48.0/24
                  216.246.52.0/22
                  216.246.57.0/24
                  216.246.80.0/21
                  216.246.90.0/24
                  216.246.93.0/24
                  216.246.95.0/24
                  216.246.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:aa:fa:49:a9:fc:50:cc:43:ef:02:78:7b:ec:4a:02:2e:
         3f:1b:6d:87:20:dd:48:78:cd:b9:c5:20:22:07:6e:10:6e:42:
         98:4c:35:b1:32:8c:cb:b0:50:59:cd:c4:d4:a6:56:c4:5c:f4:
         b0:c8:c1:6a:89:05:74:75:22:32:4e:43:fc:af:d9:cf:a9:70:
         5d:62:05:9f:3c:c8:8e:86:d0:c2:2e:30:c6:17:ac:04:4b:69:
         8b:e9:20:65:e1:ea:60:23:bb:51:81:f0:18:68:b5:d7:03:5d:
         00:71:6a:ca:3a:18:2a:46:5a:3b:30:d2:e2:6b:b1:1a:be:07:
         87:1b:49:96:78:cb:c1:0a:50:33:b0:87:d6:94:38:3b:32:ed:
         67:bc:68:ca:79:aa:00:15:5f:89:9e:ba:cc:0d:bd:79:ed:88:
         84:ca:5e:2e:90:d1:b5:c6:f4:06:96:ee:7b:76:6b:90:aa:85:
         51:bd:4e:5c:88:52:be:0e:7c:95:7e:13:07:37:3b:cb:4b:a9:
         82:e1:c3:de:e7:7f:d0:f3:8f:6f:79:77:b6:8e:73:85:ab:43:
         87:7c:e0:47:24:9b:38:fb:ac:14:4e:51:53:6d:ca:1c:31:41:
         fc:59:3d:66:fc:74:2e:af:c7:45:b9:d8:fc:22:7b:7a:c9:b2:
         b9:f9:da:a5
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUFT1Z1VjIwFFHT1IblhHe/sqGlqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwODI0MTcyMTU2WhcNMjQwODIyMTcyNjU2
WjAzMTEwLwYDVQQDEyhCRTQ3QzFBNTg3RjVDOUFBRDczNzMzRTlCOTg1MTVFRTNF
NjAzQ0VCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9GWlsKdQUFR
DZWnoIcDkDB0bb8l/0D6JqCJnUNha2a9mb99l69F54GDwkmnZfOL69TURy2ydUx0
PD+Lq4N/9wGnCM1tVx07ndkSmQxQPe5eRTL5E6Nh3KjbCiLUQulDK7nh4wA4pAZD
q/pfwfysyZeHs+dZmCnzdkb2XopQ72e3sA3DQhFL2C8eN7D4C0cV/mBFwMy9Cdo1
bC/omrLjag6dwdwZvVAVguRgh8tBA7mgX2vVZPMrcCkCPc7SQq45E/Po18CpqGxc
jRn2ieuAu4DxNuGkcZtRIfRrDfkHvUcHCWWVUiWB0W9ZD2XlQdiuFk9pCy/Bsvb6
a6p6njdbjQIDAQABo4ID5zCCA+MwHQYDVR0OBBYEFL5HwaWH9cmq1zcz6bmFFe4+
YDzrMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzIxMjIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AYUGCCsGAQUFBwEHAQH/BIIBdDCCAXAwggFsBAIAATCCAWQDBAAyH4sDBAAyH6Ew
DAMEAEDKYwMEAEDKZAMEAEDKZzAMAwQAQMppAwQAQMpqAwQAQuHBAwQAQuHHAwQA
QuHuAwQAQuHyAwQAS2YLAwQAS2YSAwQBS2YcAwQAzF2mAwQAzF2rAwQAzF24AwQA
zF3DAwQAzF3RAwQAzF3rMAwDBADMXfUDBADMXfYDBADN6oUDBADN6o4wDAMEAM3q
kwMEAM3qlAMEAM3qlwMEAM3qpAMEAM3qpgMEAM3qqQMEAM3qrAMEAM3qtAMEAM3q
wAMEAM3qxAMEAM3qygMEAM3q5AMEAM3q8gMEAM3q9QMEAM3q/gMEANj2CAMEANj2
CwMEANj2DQMEAdj2EAMEAdj2FgMEANj2GwMEANj2IAMEANj2IwMEANj2KQMEANj2
KwMEANj2LQMEANj2MAMEAtj2NAMEANj2OQMEA9j2UAMEANj2WgMEANj2XQMEANj2
XwMEANj2bzANBgkqhkiG9w0BAQsFAAOCAQEACkCq+kmp/FDMQ+8CeHvsSgIuPxtt
hyDdSHjNucUgIgduEG5CmEw1sTKMy7BQWc3E1KZWxFz0sMjBaokFdHUiMk5D/K/Z
z6lwXWIFnzzIjobQwi4wxhesBEtpi+kgZeHqYCO7UYHwGGi11wNdAHFqyjoYKkZa
OzDS4muxGr4HhxtJlnjLwQpQM7CH1pQ4OzLtZ7xoynmqABVfiZ66zA29ee2IhMpe
LpDRtcb0Bpbue3ZrkKqFUb1OXIhSvg58lX4TBzc7y0upguHD3ud/0POPb3l3to5z
hatDh3zgRySbOPusFE5RU23KHDFB/Fk9Zvx0Lq/HRbnY/CJ7esmyufnapQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org