Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa
File:                     82ab9425-9f05-3a51-9ed9-36def47569eb.roa (raw, json)
Hash identifier:          PLo+EXirtpEbL71ZBBt3bvgR7sPkjdZPN7U12RLOxLU=
Subject key identifier:   F6:C3:90:E5:C2:EE:46:56:92:82:97:BD:4D:4E:5E:E9:84:8E:EE:AD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858446E646B5FEC573A8C4D9CE280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa
Signing time:             Wed 03 Jan 2024 14:00:21 +0000
ROA not before:           Wed 03 Jan 2024 14:00:21 +0000
ROA not after:            Tue 02 Apr 2024 13:00:21 +0000
asID:                     61317
IP address blocks:        108.165.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 18:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6e:64:6b:5f:ec:57:3a:8c:4d:9c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  3 14:00:21 2024 GMT
            Not After : Apr  2 13:00:21 2024 GMT
        Subject: CN=81424097-d4f6-4d6b-82aa-1e2dc5fea0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:13:a1:59:a8:f9:de:7f:d3:d0:3b:d3:8c:
                    0b:14:f5:70:07:a6:36:e7:60:78:7b:d5:8a:64:db:
                    5f:78:5a:73:e7:7a:5b:ec:10:09:5b:d0:63:e7:a6:
                    8f:2c:d6:ae:34:31:f8:2e:a9:ae:97:1c:f6:c2:11:
                    36:89:d9:34:6a:f5:e5:f6:58:b7:e7:60:37:a4:55:
                    c2:7a:f4:52:70:d4:33:16:fb:a0:f7:39:e7:7c:f7:
                    48:07:55:7c:e7:ec:bf:36:ba:fb:cb:63:7c:a1:e7:
                    7d:7c:a5:0c:1b:6f:f0:ce:be:c1:dd:58:18:fa:eb:
                    91:6a:1d:d7:6a:cf:35:2f:1d:1f:c1:8b:2b:ba:cb:
                    b8:7f:61:a0:19:83:2a:f0:4e:50:87:24:14:cf:a6:
                    65:2a:00:42:20:27:be:7c:58:25:2c:bf:7e:e8:f8:
                    a4:70:00:96:d7:2d:52:e2:1c:dd:71:f9:26:ed:5b:
                    41:d4:4c:f2:59:31:34:97:e8:26:39:ed:4e:09:40:
                    de:a4:ac:de:0d:5f:18:08:c9:e7:dd:6f:e0:75:46:
                    8f:2d:e5:27:1f:c8:f9:81:5e:66:07:ca:32:ba:7d:
                    a9:22:e4:b3:06:b4:51:09:3e:27:b5:3c:33:bb:d7:
                    b7:e4:e5:d7:9d:8e:57:3f:fd:ea:49:2b:1e:e7:97:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:90:E5:C2:EE:46:56:92:82:97:BD:4D:4E:5E:E9:84:8E:EE:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:61:da:c7:fc:ff:be:b2:0a:9a:07:61:01:54:dd:fe:00:6a:
         51:5c:40:da:ee:fc:09:66:ae:4e:a3:21:cd:3b:d1:b6:22:07:
         d1:32:d8:77:bb:59:de:b4:8a:60:b0:e1:e1:8b:66:23:93:58:
         fc:6b:52:98:d3:bd:02:b5:cb:87:1b:72:bf:7f:c5:29:e9:04:
         14:06:2e:28:6b:97:2b:8f:e4:2c:f8:a0:76:cb:95:71:8b:d3:
         8f:ff:03:9f:b6:93:2e:f3:6f:e3:f6:ad:98:a0:db:65:b8:f5:
         c4:57:2c:ef:70:82:31:c5:a1:5d:89:55:ce:13:d9:5d:26:2a:
         f9:88:d3:f3:8f:2a:7f:8f:98:06:7a:e4:e1:9a:35:d0:3e:d2:
         e4:f4:cd:8d:f1:9c:b8:93:a2:2f:6d:01:61:db:0a:69:eb:e4:
         f2:64:1d:ff:64:68:c5:bf:f2:de:d3:bf:c5:8c:96:c9:4b:64:
         67:1c:a4:7b:e3:71:7a:02:7d:88:1a:7f:6e:9f:ff:0f:fd:21:
         02:f9:34:a0:75:43:90:c3:6e:b5:66:ed:47:2b:0b:c4:7f:62:
         8e:98:c1:3f:92:79:17:af:d6:62:33:fe:ab:b8:59:54:10:df:
         65:e1:01:48:a9:66:5a:ca:b8:80:6a:2a:e2:94:d1:59:12:80:
         61:d9:1e:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERuZGtf7Fc6jE2c4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDEwMzE0MDAyMVoXDTI0MDQwMjEzMDAyMVowLzEtMCsGA1UEAxMk
ODE0MjQwOTctZDRmNi00ZDZiLTgyYWEtMWUyZGM1ZmVhMGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2MToVmo+d5/09A704wLFPVwB6Y252B4e9WK
ZNtfeFpz53pb7BAJW9Bj56aPLNauNDH4Lqmulxz2whE2idk0avXl9li352A3pFXC
evRScNQzFvug9znnfPdIB1V85+y/Nrr7y2N8oed9fKUMG2/wzr7B3VgY+uuRah3X
as81Lx0fwYsrusu4f2GgGYMq8E5QhyQUz6ZlKgBCICe+fFglLL9+6PikcACW1y1S
4hzdcfkm7VtB1EzyWTE0l+gmOe1OCUDepKzeDV8YCMnn3W/gdUaPLeUnH8j5gV5m
B8oyun2pIuSzBrRRCT4ntTwzu9e35OXXnY5XP/3qSSse55cWKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbDkOXC7kZWkoKXvU1OXumEju6tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODJhYjk0MjUtOWYwNS0z
YTUxLTllZDktMzZkZWY0NzU2OWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFh2sf8/76yCpoHYQFU3f4AalFcQNru/Almrk6jIc070bYiB9Ey2He7
Wd60imCw4eGLZiOTWPxrUpjTvQK1y4cbcr9/xSnpBBQGLihrlyuP5Cz4oHbLlXGL
04//A5+2ky7zb+P2rZig22W49cRXLO9wgjHFoV2JVc4T2V0mKvmI0/OPKn+PmAZ6
5OGaNdA+0uT0zY3xnLiToi9tAWHbCmnr5PJkHf9kaMW/8t7Tv8WMlslLZGccpHvj
cXoCfYgaf26f/w/9IQL5NKB1Q5DDbrVm7UcrC8R/Yo6YwT+SeRev1mIz/qu4WVQQ
32XhAUipZlrKuIBqKuKU0VkSgGHZHq0=
-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:48 2024 by rpki-client on console-fra.rpki-client.org