Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7846d514-fc05-3149-a0a4-fad09dd9921b.roa
File:                     7846d514-fc05-3149-a0a4-fad09dd9921b.roa (raw, json)
Hash identifier:          KTdFgvDMKfTIOTDASjsThZ7jNLRtgOSRy55N5O/c9Hg=
Subject key identifier:   EC:6C:10:A7:01:08:47:DD:AF:A3:0E:53:F0:30:39:64:7D:88:E9:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483F8038FEDD79C9F74CC93360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7846d514-fc05-3149-a0a4-fad09dd9921b.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        166.1.180.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:38:fe:dd:79:c9:f7:4c:c9:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=3c18dd31-a594-4a8d-b2ec-e1d3056755cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:d6:b2:f7:bc:1c:e5:3a:ee:e2:58:2e:f0:
                    43:f8:06:0c:db:e4:c0:fb:ab:bf:ef:b0:37:ed:06:
                    3f:18:d3:b8:2c:38:d8:f7:48:1c:1f:99:c3:2a:59:
                    0d:57:7e:2d:6f:07:5c:2b:35:85:72:41:ac:d9:d6:
                    6f:5b:bf:6a:a3:ff:fa:a2:bb:a3:03:fe:95:42:e7:
                    5b:57:9e:26:f1:0a:27:93:b3:34:4d:73:b0:a1:eb:
                    ef:22:36:94:57:28:49:25:75:84:fd:ac:24:be:fb:
                    1c:0c:73:4f:6a:26:a8:f9:89:da:ef:82:6c:b5:a0:
                    c8:49:74:ef:8b:6b:57:c9:f3:40:4f:5c:ab:9b:e5:
                    1c:fd:15:ac:9f:39:5b:78:7f:67:f5:e0:be:80:42:
                    36:63:b4:88:54:f5:cf:04:9c:c5:99:7e:32:e5:cf:
                    f7:46:b3:a6:ba:4a:cb:b4:e1:a8:b0:7b:c3:a9:70:
                    38:7e:f6:a1:51:23:fc:4e:69:55:de:37:88:50:a6:
                    ea:2c:9a:17:2a:1f:58:81:f0:ed:cf:18:ed:68:e8:
                    c3:b1:2c:23:d7:99:b9:dc:b2:14:91:c1:02:af:b4:
                    74:ff:7d:ea:98:82:19:13:3d:c8:ab:d3:da:94:f9:
                    98:15:d9:e4:a6:3d:f9:bd:63:52:dd:0e:04:25:28:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:10:A7:01:08:47:DD:AF:A3:0E:53:F0:30:39:64:7D:88:E9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7846d514-fc05-3149-a0a4-fad09dd9921b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0a:18:39:65:fe:bc:23:7b:56:e5:09:23:90:80:d9:77:6e:
         8d:29:56:df:29:4e:44:3b:33:e3:34:4f:4f:70:b3:80:00:53:
         c1:9d:f7:91:65:f2:76:b1:a5:95:7d:e6:40:2a:21:6a:69:e8:
         1d:03:6f:bc:d0:42:e8:69:12:ae:1d:e3:74:74:ca:54:2e:ad:
         2e:1c:85:48:be:36:e1:03:4f:ed:5c:6a:cb:af:87:bf:8b:3a:
         75:16:3c:5e:e3:76:1c:0c:f9:6f:4e:29:0c:c0:9b:6d:c1:60:
         0c:5b:de:b3:f4:7c:94:be:01:9c:56:8e:4f:02:de:21:70:f1:
         42:5c:63:3d:d8:53:f1:ab:75:f5:97:17:1f:ba:be:5c:32:97:
         3b:c4:b3:0d:42:45:57:a1:b9:7c:b6:3b:71:03:01:e4:cf:bb:
         75:91:68:38:49:cb:ad:7d:03:3b:7a:cd:c2:ff:ae:15:03:e4:
         8c:39:a9:9f:4f:50:ac:b8:5c:02:8b:51:fd:42:a4:5c:39:71:
         6c:ff:94:60:1f:d8:50:f0:2f:26:0f:b7:79:89:be:e3:26:db:
         99:7b:37:d0:9c:7e:b8:a8:55:d7:35:b2:f2:b7:a9:31:10:9b:
         35:1f:33:cf:d3:bc:81:2e:a2:a3:f3:79:57:6e:8f:ee:04:65:
         76:9f:16:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDj+3XnJ90zJM2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
M2MxOGRkMzEtYTU5NC00YThkLWIyZWMtZTFkMzA1Njc1NWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJzWsve8HOU67uJYLvBD+AYM2+TA+6u/77A3
7QY/GNO4LDjY90gcH5nDKlkNV34tbwdcKzWFckGs2dZvW79qo//6orujA/6VQudb
V54m8Qonk7M0TXOwoevvIjaUVyhJJXWE/awkvvscDHNPaiao+Yna74JstaDISXTv
i2tXyfNAT1yrm+Uc/RWsnzlbeH9n9eC+gEI2Y7SIVPXPBJzFmX4y5c/3RrOmukrL
tOGosHvDqXA4fvahUSP8TmlV3jeIUKbqLJoXKh9YgfDtzxjtaOjDsSwj15m53LIU
kcECr7R0/33qmIIZEz3Iq9PalPmYFdnkpj35vWNS3Q4EJSh6xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxsEKcBCEfdr6MOU/AwOWR9iOnTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzg0NmQ1MTQtZmMwNS0z
MTQ5LWEwYTQtZmFkMDlkZDk5MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgG0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0KGDll/rwje1blCSOQgNl3bo0pVt8pTkQ7M+M0T09ws4AAU8Gd95Fl
8naxpZV95kAqIWpp6B0Db7zQQuhpEq4d43R0ylQurS4chUi+NuEDT+1casuvh7+L
OnUWPF7jdhwM+W9OKQzAm23BYAxb3rP0fJS+AZxWjk8C3iFw8UJcYz3YU/GrdfWX
Fx+6vlwylzvEsw1CRVehuXy2O3EDAeTPu3WRaDhJy619Azt6zcL/rhUD5Iw5qZ9P
UKy4XAKLUf1CpFw5cWz/lGAf2FDwLyYPt3mJvuMm25l7N9CcfrioVdc1svK3qTEQ
mzUfM8/TvIEuoqPzeVduj+4EZXafFpk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:23:01 2025 by rpki-client