Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43c31a37-bd81-31a7-a420-6853a0b82fca.roa
File:                     43c31a37-bd81-31a7-a420-6853a0b82fca.roa (raw, json)
Hash identifier:          XrTIdJ/uzykJ6ARXbPfccbPas7hOG6twfVQMDFYOGxY=
Subject key identifier:   08:7F:58:1F:1F:CF:3E:7E:64:29:92:FF:FA:81:F9:80:02:EB:AA:92
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583EBA4DA3AB4FE3BD7293013580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43c31a37-bd81-31a7-a420-6853a0b82fca.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     398465
IP address blocks:        108.165.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:4d:a3:ab:4f:e3:bd:72:93:01:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=06860bc6-cdba-44eb-ac65-2bd6f1774436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:a2:a2:6c:54:03:b0:9d:c4:94:c7:88:33:
                    9e:b9:1a:8a:5c:ed:d0:f1:89:07:e3:89:6f:8d:87:
                    21:ad:80:ed:8e:7e:1a:b8:8c:62:78:04:29:75:d5:
                    bc:98:bd:a0:60:27:cc:c5:7f:78:12:5b:4f:1d:19:
                    51:6f:f6:16:d1:be:c6:87:82:ce:b9:8c:7a:42:b0:
                    e2:7c:e0:2e:08:de:9f:e8:f9:88:e1:34:63:6e:46:
                    9c:c5:f1:19:0e:b9:2c:10:7f:d5:d3:d5:25:1a:ed:
                    80:2b:8a:f4:0c:58:c0:c3:75:8d:a7:02:af:3b:a9:
                    8a:b5:34:6b:f6:3b:6b:d7:2d:e0:38:c4:61:63:31:
                    2f:42:06:b1:a4:59:50:82:c4:5c:97:98:36:b4:39:
                    e3:29:7e:50:3a:f6:63:09:60:3f:f1:a3:0d:67:e8:
                    3c:c3:b8:94:ec:72:d5:d1:45:d0:c1:35:d0:a3:9c:
                    9c:84:82:cf:9f:63:06:a0:da:80:ce:dc:00:44:81:
                    5d:cd:34:c2:d9:d4:94:5a:4e:ea:31:26:27:59:4f:
                    9a:fe:03:c6:13:79:fb:80:83:2e:c2:e3:9c:f0:89:
                    d5:bd:ec:5b:42:a2:10:4a:ca:e6:ae:9d:ec:8e:0a:
                    6c:1d:4f:5f:56:2c:35:09:15:95:36:8d:78:a8:c6:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:58:1F:1F:CF:3E:7E:64:29:92:FF:FA:81:F9:80:02:EB:AA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43c31a37-bd81-31a7-a420-6853a0b82fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:56:0e:1e:5a:7b:12:4f:76:da:aa:26:48:b2:02:fa:e5:
         d9:25:56:99:b8:6c:e3:4f:cd:33:bb:5f:f0:50:cb:08:c5:28:
         a3:fb:7e:ec:ea:26:56:9d:24:10:6b:75:4c:16:85:8c:22:05:
         a5:fa:f7:79:12:9b:c9:f7:64:ff:bb:d4:89:3b:9b:e2:2e:81:
         45:8d:3f:15:14:d4:85:4d:e2:1f:7f:3f:58:90:5c:b9:06:d7:
         ca:5a:92:28:78:e8:3b:81:d5:84:42:50:bf:06:7f:53:72:db:
         14:40:91:c1:35:55:9b:e4:5d:56:60:cd:4f:0b:42:93:3c:12:
         ca:eb:ca:13:71:1c:a3:22:3d:b2:92:3e:9c:ec:aa:8b:93:64:
         36:e9:3d:c7:2d:44:70:34:46:67:e9:bf:1b:0a:f4:3b:b7:29:
         19:03:69:5a:48:73:f0:33:f5:28:14:03:49:73:ff:92:58:fc:
         25:83:f1:77:fa:09:b4:a5:db:f2:ea:da:98:dd:be:2b:15:2c:
         a4:18:5f:9c:23:9c:a3:25:7c:0d:25:d6:7c:5a:79:a8:ce:cf:
         60:c8:bd:26:fc:9a:ed:48:75:8f:ed:e6:79:ad:1b:4d:73:3a:
         fd:ab:da:1c:e7:57:90:04:2f:2b:f4:87:0c:18:83:d1:88:bc:
         1e:37:df:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD66TaOrT+O9cpMBNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDY4NjBiYzYtY2RiYS00NGViLWFjNjUtMmJkNmYxNzc0NDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaGiomxUA7CdxJTHiDOeuRqKXO3Q8YkH44lv
jYchrYDtjn4auIxieAQpddW8mL2gYCfMxX94EltPHRlRb/YW0b7Gh4LOuYx6QrDi
fOAuCN6f6PmI4TRjbkacxfEZDrksEH/V09UlGu2AK4r0DFjAw3WNpwKvO6mKtTRr
9jtr1y3gOMRhYzEvQgaxpFlQgsRcl5g2tDnjKX5QOvZjCWA/8aMNZ+g8w7iU7HLV
0UXQwTXQo5ychILPn2MGoNqAztwARIFdzTTC2dSUWk7qMSYnWU+a/gPGE3n7gIMu
wuOc8InVvexbQqIQSsrmrp3sjgpsHU9fViw1CRWVNo14qMb/VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAh/WB8fzz5+ZCmS//qB+YAC66qSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDNjMzFhMzctYmQ4MS0z
MWE3LWE0MjAtNjg1M2EwYjgyZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1UVg4eWnsST3baqiZIsgL65dklVpm4bONPzTO7X/BQywjFKKP7fuzq
JladJBBrdUwWhYwiBaX693kSm8n3ZP+71Ik7m+IugUWNPxUU1IVN4h9/P1iQXLkG
18pakih46DuB1YRCUL8Gf1Ny2xRAkcE1VZvkXVZgzU8LQpM8EsrryhNxHKMiPbKS
PpzsqouTZDbpPcctRHA0RmfpvxsK9Du3KRkDaVpIc/Az9SgUA0lz/5JY/CWD8Xf6
CbSl2/Lq2pjdvisVLKQYX5wjnKMlfA0l1nxaeajOz2DIvSb8mu1IdY/t5nmtG01z
Ov2r2hznV5AELyv0hwwYg9GIvB4331w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:29 2023 by rpki-client on console-ams.rpki-client.org