Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8f0bfba-3044-3b94-b614-afd6eee4f67a.roa
File:                     c8f0bfba-3044-3b94-b614-afd6eee4f67a.roa (raw, json)
Hash identifier:          UKD2u3EtrDDquN8teYGN77xurrmdY6XY6d/ck+kW8HU=
Subject key identifier:   A9:C9:36:83:F3:21:C8:E6:47:62:21:B4:0E:BC:C3:99:F4:CE:D9:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840EC0E49A9A92372FEF9EC8750
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8f0bfba-3044-3b94-b614-afd6eee4f67a.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 20 May 2025 04:00:00 +0000
asID:                     834
IP address blocks:        166.0.0.0/17 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Feb 2023 22:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ec:0e:49:a9:a9:23:72:fe:f9:ec:87:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 20 04:00:00 2025 GMT
        Subject: CN=eb9fe3a4-8a49-426d-bda2-15e5d62cf4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:39:e5:0b:15:2d:4e:59:b5:19:49:10:5c:
                    35:90:73:6e:93:16:ba:4f:0c:cb:0f:03:f0:b9:3b:
                    ba:b6:2f:85:3f:7e:28:4a:fa:07:f6:88:36:d3:a2:
                    8f:b5:5d:f0:41:d0:23:bd:2a:95:25:47:72:0b:bb:
                    22:89:91:d0:73:dc:43:32:97:2a:7c:80:1b:6d:22:
                    3d:3f:ac:d7:61:4d:58:29:ce:4c:9d:97:32:51:c1:
                    ef:bc:69:77:15:ee:fa:62:26:bd:71:ac:8e:48:d0:
                    ff:eb:59:b4:8c:c0:e0:0d:95:68:e2:68:86:8c:95:
                    7d:6e:15:ed:07:02:94:bb:ab:e6:5f:3e:d9:69:e1:
                    b6:71:d2:42:4a:7e:ed:40:7a:c1:9b:34:e1:42:d6:
                    57:2b:89:0d:ac:64:be:99:e3:63:9b:61:68:d0:3d:
                    97:b3:c6:dd:f5:16:83:46:4c:c7:5e:6a:6a:1a:4b:
                    92:cd:60:f7:49:7a:d1:eb:13:ca:71:8d:dd:77:7e:
                    a8:39:da:6f:1d:70:6d:61:d2:7d:d5:eb:c8:ec:4e:
                    6f:fd:8e:5b:b6:52:46:57:20:8c:89:65:93:7d:5a:
                    6c:e2:f5:f4:ab:a6:bd:53:ca:58:c1:87:eb:6c:c9:
                    ff:b3:95:10:34:36:c9:85:37:74:7f:67:33:1c:89:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C9:36:83:F3:21:C8:E6:47:62:21:B4:0E:BC:C3:99:F4:CE:D9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c8f0bfba-3044-3b94-b614-afd6eee4f67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:df:3a:4f:37:8e:6e:9c:6c:f3:61:b5:41:3e:c2:47:c0:
         7a:bc:7a:7f:21:2f:3e:dd:44:bf:1d:e1:a7:71:eb:ae:cd:38:
         da:2f:08:76:b8:81:f6:ea:84:63:a7:4f:d1:10:ae:5d:8a:15:
         ef:75:98:f4:1f:4e:c2:da:af:70:ee:63:7b:b0:97:47:25:4b:
         cf:ad:fc:ba:23:27:8a:a2:8a:42:57:d4:c4:22:16:6c:d9:46:
         61:04:46:98:18:85:db:35:85:07:43:13:7e:bc:95:76:ac:35:
         54:e3:01:da:dc:e1:2f:fd:1d:1a:13:b4:0b:de:ae:12:08:c3:
         cb:ad:f9:9a:10:24:2c:70:be:f3:87:7a:b1:45:aa:cc:cf:5f:
         d5:ad:38:15:88:3a:65:e3:39:18:cd:28:16:82:6a:a2:20:97:
         90:1e:74:4a:ac:99:5f:2b:2e:43:0b:c8:72:31:88:55:54:1c:
         b9:d4:22:1e:a4:7e:f8:68:c6:ef:73:88:d1:d9:4a:03:f1:43:
         4f:9b:c0:18:a3:c2:21:b9:46:c5:54:ab:3a:a5:77:c1:0d:04:
         4b:d4:0b:5d:74:81:26:72:29:db:d7:7d:7d:74:95:94:cb:db:
         d2:f6:f9:58:fe:97:44:f1:96:46:49:6d:7d:d9:5e:ae:ce:28:
         3e:d0:71:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDsDkmpqSNy/vnsh1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZWI5ZmUzYTQtOGE0OS00MjZkLWJkYTItMTVlNWQ2MmNmNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArek55QsVLU5ZtRlJEFw1kHNukxa6TwzLDwPw
uTu6ti+FP34oSvoH9og206KPtV3wQdAjvSqVJUdyC7siiZHQc9xDMpcqfIAbbSI9
P6zXYU1YKc5MnZcyUcHvvGl3Fe76Yia9cayOSND/61m0jMDgDZVo4miGjJV9bhXt
BwKUu6vmXz7ZaeG2cdJCSn7tQHrBmzThQtZXK4kNrGS+meNjm2Fo0D2Xs8bd9RaD
RkzHXmpqGkuSzWD3SXrR6xPKcY3dd36oOdpvHXBtYdJ91evI7E5v/Y5btlJGVyCM
iWWTfVps4vX0q6a9U8pYwYfrbMn/s5UQNDbJhTd0f2czHInygwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnJNoPzIcjmR2IhtA68w5n0ztnoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzhmMGJmYmEtMzA0NC0z
Yjk0LWI2MTQtYWZkNmVlZTRmNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpgAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRt3zpPN45unGzzYbVBPsJHwHq8en8hLz7dRL8d4adx667NONovCHa4
gfbqhGOnT9EQrl2KFe91mPQfTsLar3DuY3uwl0clS8+t/LojJ4qiikJX1MQiFmzZ
RmEERpgYhds1hQdDE368lXasNVTjAdrc4S/9HRoTtAverhIIw8ut+ZoQJCxwvvOH
erFFqszPX9WtOBWIOmXjORjNKBaCaqIgl5AedEqsmV8rLkMLyHIxiFVUHLnUIh6k
fvhoxu9ziNHZSgPxQ0+bwBijwiG5RsVUqzqld8ENBEvUC110gSZyKdvXfX10lZTL
29L2+Vj+l0TxlkZJbX3ZXq7OKD7QcdU=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:32 2025 by rpki-client