Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203631333137.roa
File:                     3139392e36382e3231382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ftCdDqaP/So+VPbP2jG7/u52PxdQYD5b/KVUa2TtceQ=
Subject key identifier:   45:46:9F:B7:95:28:93:9A:34:0C:9F:FF:B9:11:80:E1:61:6E:46:07
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       29844FC8A356D926734873F9DAFD7B221A92D5C3
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 09 Nov 2023 06:26:11 +0000
ROA not before:           Thu 09 Nov 2023 06:21:11 +0000
ROA not after:            Thu 07 Nov 2024 06:26:11 +0000
asID:                     61317
IP address blocks:        199.68.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:84:4f:c8:a3:56:d9:26:73:48:73:f9:da:fd:7b:22:1a:92:d5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov  9 06:21:11 2023 GMT
            Not After : Nov  7 06:26:11 2024 GMT
        Subject: CN=45469FB79528939A340C9FFFB91180E1616E4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:84:e9:0e:4e:e3:95:fb:62:73:41:ff:3f:
                    2f:25:7b:79:c7:0b:8a:89:a6:a7:b7:dd:c2:2c:df:
                    07:50:2f:fb:6b:02:5c:bc:d8:9a:51:08:11:18:be:
                    7e:5a:62:6d:ea:14:63:f7:6d:f0:fa:ed:c6:9f:4a:
                    bd:c9:4c:d5:3d:39:75:dd:b8:81:63:36:70:55:d9:
                    ca:10:b1:46:34:5e:ae:c8:10:66:85:4e:13:41:aa:
                    00:fe:44:79:b6:9d:81:10:68:61:f6:ee:f6:13:07:
                    ba:4c:49:3e:49:ba:f2:c7:5a:4a:f2:91:7e:37:ae:
                    1e:a0:8b:ee:00:36:43:69:e2:27:b8:29:63:62:80:
                    eb:b8:e9:8d:02:1d:66:fe:a8:18:fe:27:6e:d7:c2:
                    cd:a4:5d:b1:3f:0f:22:40:ff:de:6c:e1:13:b7:56:
                    e6:67:c2:52:ab:a8:f4:a0:04:f9:f3:26:81:04:47:
                    d7:7f:61:07:ad:84:5e:a3:56:68:20:a7:b1:e4:03:
                    cd:e8:02:62:cf:03:1d:eb:f0:9b:63:ff:c1:8b:b6:
                    36:a3:80:1b:65:5a:21:a7:10:93:95:d5:b2:28:52:
                    38:27:ae:52:ef:5f:b8:55:e3:0d:74:4c:de:9a:7c:
                    fe:79:05:2d:27:9a:de:47:12:a2:e6:fc:5c:a2:a1:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:9F:B7:95:28:93:9A:34:0C:9F:FF:B9:11:80:E1:61:6E:46:07
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:99:cd:0b:59:e7:a8:7b:8f:5d:05:95:27:3d:ea:3c:02:6e:
         b5:c9:fd:ff:6e:1a:2a:8f:c2:0e:8e:69:f0:01:b4:ee:9b:21:
         61:05:7d:99:fa:ee:b5:1a:82:7e:b5:c6:c3:11:44:d4:f3:6e:
         92:a6:76:fb:10:6a:bf:5b:a3:e5:ed:0a:7f:36:fd:33:51:28:
         05:55:9a:de:89:fb:4e:b9:e4:c5:bb:e8:cd:e1:5f:a6:69:50:
         37:de:6c:99:ab:ff:58:a4:50:c2:3e:c7:86:bf:fc:ae:3d:93:
         7d:94:b2:8b:f9:5e:e4:3d:be:82:bb:66:1c:f9:7d:86:9d:a1:
         f6:03:46:71:18:8a:23:87:26:16:01:2c:97:b1:a7:14:3e:b3:
         5c:99:bb:d2:0b:d4:41:03:eb:0c:00:65:36:d5:fe:08:14:af:
         f8:24:36:6a:fe:1c:bc:9c:c9:2d:0d:24:a4:48:99:78:e7:5b:
         e8:71:6f:cc:12:69:1e:5b:7e:a2:86:60:b4:f4:68:78:66:76:
         4a:6a:98:0f:6e:02:8a:d2:90:42:ac:8e:ce:98:98:d6:99:d8:
         78:42:c1:02:3d:2a:9a:98:48:7c:26:b7:57:c4:26:2f:8a:25:
         59:7c:fd:be:f9:ff:d1:9b:59:f8:49:77:af:70:80:2a:01:dc:
         d5:f9:7f:02
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKYRPyKNW2SZzSHP52v17IhqS1cMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjMxMTA5MDYyMTExWhcNMjQxMTA3MDYyNjEx
WjAzMTEwLwYDVQQDEyg0NTQ2OUZCNzk1Mjg5MzlBMzQwQzlGRkZCOTExODBFMTYx
NkU0NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lOE6Q5O45X7
YnNB/z8vJXt5xwuKiaant93CLN8HUC/7awJcvNiaUQgRGL5+WmJt6hRj923w+u3G
n0q9yUzVPTl13biBYzZwVdnKELFGNF6uyBBmhU4TQaoA/kR5tp2BEGhh9u72Ewe6
TEk+Sbryx1pK8pF+N64eoIvuADZDaeInuCljYoDruOmNAh1m/qgY/idu18LNpF2x
Pw8iQP/ebOETt1bmZ8JSq6j0oAT58yaBBEfXf2EHrYReo1ZoIKex5APN6AJizwMd
6/CbY//Bi7Y2o4AbZVohpxCTldWyKFI4J65S71+4VeMNdEzemnz+eQUtJ5reRxKi
5vxcoqHTJwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEVGn7eVKJOaNAyf/7kRgOFh
bkYHMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzYzODJlMzIzMTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdE2jANBgkqhkiG9w0BAQsF
AAOCAQEAEZnNC1nnqHuPXQWVJz3qPAJutcn9/24aKo/CDo5p8AG07pshYQV9mfru
tRqCfrXGwxFE1PNukqZ2+xBqv1uj5e0Kfzb9M1EoBVWa3on7TrnkxbvozeFfpmlQ
N95smav/WKRQwj7Hhr/8rj2TfZSyi/le5D2+grtmHPl9hp2h9gNGcRiKI4cmFgEs
l7GnFD6zXJm70gvUQQPrDABlNtX+CBSv+CQ2av4cvJzJLQ0kpEiZeOdb6HFvzBJp
Hlt+ooZgtPRoeGZ2SmqYD24CitKQQqyOzpiY1pnYeELBAj0qmphIfCa3V8QmL4ol
WXz9vvn/0ZtZ+El3r3CAKgHc1fl/Ag==
-----END CERTIFICATE-----
Generated at Fri Aug 2 01:44:02 2024 by rpki-client on console-ams.rpki-client.org