Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5807fc99-838f-3dde-b306-e1d1c5863ea4.roa
File:                     5807fc99-838f-3dde-b306-e1d1c5863ea4.roa (raw, json)
Hash identifier:          xJRBl1RACPjNclGhHfh1zRgbvHGIUUyGsglgAhttYo8=
Subject key identifier:   56:0E:FD:A7:27:C2:17:FC:F2:70:AA:4E:AD:B9:4A:B4:E9:B8:8C:B2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F802D00748D53DC8BC22200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5807fc99-838f-3dde-b306-e1d1c5863ea4.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.19.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2d:00:74:8d:53:dc:8b:c2:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=b1ce3437-8a58-433e-9eed-bf96882af8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:6e:05:8e:dd:04:07:54:ab:18:2d:80:79:
                    b4:b1:54:69:e8:a2:ee:94:c6:ec:51:49:e6:f4:62:
                    57:a9:8f:f3:4f:c0:64:af:8c:a0:ff:c9:f9:d1:50:
                    e3:93:41:bf:94:1d:5c:e4:8b:d8:62:09:27:9d:bd:
                    9a:07:cd:14:52:9c:fa:de:42:73:e7:2e:06:d9:0a:
                    ca:39:24:eb:14:ad:46:e5:1a:5b:59:1b:9c:0f:25:
                    45:c4:fe:2a:eb:3d:c5:4a:ac:81:90:67:7e:11:0b:
                    26:bc:3f:90:69:66:27:41:a5:0c:b2:92:c3:de:58:
                    16:2d:73:27:35:ee:59:92:b4:16:06:bc:ac:0b:be:
                    c7:77:6a:1f:56:86:2c:27:35:36:aa:c2:80:4c:94:
                    70:e9:53:2f:e4:d9:62:36:51:8b:8c:83:02:bc:e6:
                    c9:81:c7:24:f5:7e:b5:c8:6b:fd:da:17:06:ca:ee:
                    6a:6a:cd:41:38:6d:77:e2:21:28:75:7b:73:43:2c:
                    d7:e8:ff:0a:37:04:60:6a:e7:34:0a:25:11:22:7c:
                    be:a6:fa:24:f6:09:47:8d:58:f5:1b:34:41:07:ab:
                    c2:41:8c:37:14:f9:a9:a4:17:c8:1c:be:13:b6:08:
                    36:76:ed:ce:45:d8:2c:50:36:6a:87:76:70:c8:6e:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:FD:A7:27:C2:17:FC:F2:70:AA:4E:AD:B9:4A:B4:E9:B8:8C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5807fc99-838f-3dde-b306-e1d1c5863ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:7a:0e:02:0a:14:5e:12:32:2e:10:df:bd:67:7d:d4:41:
         3b:9c:32:47:d4:40:a5:4c:c9:33:17:fe:5b:28:3b:88:e4:85:
         63:16:d4:23:49:62:b2:45:66:f1:78:14:a9:9a:03:15:06:a3:
         03:92:2d:aa:6c:40:57:62:03:69:8a:e6:af:5d:86:8a:6c:0c:
         72:f1:06:ad:c9:22:5a:67:de:a9:ae:be:d8:98:e3:0b:3d:37:
         e1:d9:8c:3a:5d:86:ed:57:78:8b:d4:b2:3d:33:b0:20:b7:09:
         04:ff:ef:73:29:db:39:48:df:80:0f:40:59:13:d2:62:e3:76:
         44:53:f3:57:d1:b6:74:aa:a2:3c:f6:75:d7:d0:8e:1f:2b:4c:
         a4:c1:89:1d:df:23:a0:ac:db:bf:43:12:0c:9c:71:eb:68:3f:
         5f:bf:e5:55:77:4e:bb:c3:5f:97:b1:92:12:39:27:ec:8b:11:
         fd:fe:72:b1:e1:f0:58:7c:6b:5b:4d:fd:d2:39:4f:c0:4e:d9:
         71:e2:d5:c8:3e:fb:eb:87:a6:41:c2:06:af:27:b9:07:3f:7a:
         5b:31:2b:04:cd:3b:89:a0:a8:45:ef:4b:91:6d:12:08:fe:21:
         a1:c6:2e:bc:5c:55:5b:27:b7:5a:c9:1f:ac:5a:38:63:0f:b7:
         f2:f3:7e:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gC0AdI1T3IvCIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjFjZTM0MzctOGE1OC00MzNlLTllZWQtYmY5Njg4MmFmOGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljJuBY7dBAdUqxgtgHm0sVRp6KLulMbsUUnm
9GJXqY/zT8Bkr4yg/8n50VDjk0G/lB1c5IvYYgknnb2aB80UUpz63kJz5y4G2QrK
OSTrFK1G5RpbWRucDyVFxP4q6z3FSqyBkGd+EQsmvD+QaWYnQaUMspLD3lgWLXMn
Ne5ZkrQWBrysC77Hd2ofVoYsJzU2qsKATJRw6VMv5NliNlGLjIMCvObJgcck9X61
yGv92hcGyu5qas1BOG134iEodXtzQyzX6P8KNwRgauc0CiURIny+pvok9glHjVj1
GzRBB6vCQYw3FPmppBfIHL4Ttgg2du3ORdgsUDZqh3ZwyG7LLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYO/acnwhf88nCqTq25SrTpuIyyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTgwN2ZjOTktODM4Zi0z
ZGRlLWIzMDYtZTFkMWM1ODYzZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgETMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHjeg4CChReEjIuEN+9Z33UQTucMkfUQKVMyTMX/lsoO4jkhWMW1CNJ
YrJFZvF4FKmaAxUGowOSLapsQFdiA2mK5q9dhopsDHLxBq3JIlpn3qmuvtiY4ws9
N+HZjDpdhu1XeIvUsj0zsCC3CQT/73Mp2zlI34APQFkT0mLjdkRT81fRtnSqojz2
ddfQjh8rTKTBiR3fI6Cs279DEgyccetoP1+/5VV3TrvDX5exkhI5J+yLEf3+crHh
8Fh8a1tN/dI5T8BO2XHi1cg+++uHpkHCBq8nuQc/elsxKwTNO4mgqEXvS5FtEgj+
IaHGLrxcVVsnt1rJH6xaOGMPt/Lzfs4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:13:28 2025 by rpki-client