Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a216edad-5f1b-36b9-b173-837761bd1058.roa
File:                     a216edad-5f1b-36b9-b173-837761bd1058.roa (raw, json)
Hash identifier:          bGgGn//kB7A3qIhkHqHIrBuMrLuwDPNcQ+C77Ntcihc=
Subject key identifier:   26:17:58:ED:32:8A:9C:7C:7B:35:DB:98:25:5C:0A:41:12:1F:96:62
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642157143
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a216edad-5f1b-36b9-b173-837761bd1058.roa
Signing time:             Fri 05 Oct 2018 02:36:33 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     29788
IP address blocks:        204.2.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:15:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=799d47b9-b138-4dcb-a3f1-e7f2bad0ddc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:ac:64:a5:16:91:26:9b:13:27:d6:61:74:
                    a3:a6:c4:d2:79:f5:3c:db:27:83:57:05:6c:00:7c:
                    1b:d4:9c:f7:a1:b4:bd:43:fe:8a:88:dd:74:4a:9e:
                    70:63:3a:dc:f9:b2:5d:b8:6e:7a:e2:88:e3:c9:12:
                    fb:8c:42:d5:a2:c6:f6:cf:d1:31:f6:71:8e:f3:44:
                    b6:14:65:d6:49:8e:c4:65:1a:c3:bf:b6:3b:15:03:
                    24:c5:b3:4f:d2:88:4e:4b:d3:1b:d8:0e:03:04:7d:
                    1d:8d:6c:4b:8a:fc:3c:ff:8d:39:43:a8:3c:e4:00:
                    76:90:5a:55:75:7b:3e:0f:f6:94:d3:89:f2:0e:7d:
                    ae:27:0d:99:21:9b:4d:50:f2:ef:44:a6:81:0d:1f:
                    c9:36:b1:a1:a4:ff:9a:49:23:48:fb:51:b6:4d:b8:
                    96:2d:95:8d:76:38:e6:81:93:41:7e:22:ed:4d:68:
                    de:e3:e6:f0:89:0f:03:30:38:c8:9d:90:ee:d2:8c:
                    bc:99:e5:79:db:a5:de:9c:99:2e:88:27:5d:bf:5b:
                    3e:92:e3:66:8d:55:fc:34:af:12:00:62:58:3c:72:
                    40:6a:c1:66:64:7f:10:20:57:6d:e0:07:d1:ec:4c:
                    3c:14:35:58:83:c3:55:cc:6d:aa:5b:67:c4:1a:ed:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:58:ED:32:8A:9C:7C:7B:35:DB:98:25:5C:0A:41:12:1F:96:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a216edad-5f1b-36b9-b173-837761bd1058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:e2:d2:dc:ff:6f:18:e1:cf:3f:7e:11:ea:3f:19:5b:49:
         b8:83:a2:d8:71:ea:f5:55:de:c8:74:fb:e0:bd:34:84:7b:9a:
         be:70:09:93:91:72:af:49:a8:ec:c1:80:ee:d8:05:4f:49:a2:
         79:49:5b:44:2b:c0:65:2e:8c:49:31:fa:23:be:11:32:ed:8b:
         4d:e9:07:91:70:5a:a5:bf:aa:20:80:87:26:fe:74:b0:20:50:
         0e:71:a9:ef:18:67:01:db:22:d3:fa:f8:3a:68:a9:71:71:b4:
         65:45:ba:61:09:90:a5:a9:bf:25:fa:c5:ce:53:c7:d6:00:45:
         9a:c1:fd:67:a7:0e:f3:24:f5:d8:a8:10:ea:43:02:b8:ef:c8:
         b2:58:69:68:ab:72:2b:86:60:25:96:a8:ed:1c:dc:c0:ad:0a:
         06:62:ca:7a:e9:91:24:66:c9:7f:a8:93:56:88:a4:fb:4b:d5:
         fe:61:16:92:6b:2d:fb:ed:96:1f:aa:77:41:be:f1:d5:83:70:
         60:fe:04:02:0f:c1:b3:ec:70:81:fe:c7:30:cf:04:85:48:3b:
         9f:83:0c:a2:c2:79:1f:48:b7:a0:fe:af:fd:27:0b:34:82:de:
         07:32:2f:fb:60:08:f7:79:36:ae:3d:0f:de:fb:09:5c:b5:cd:
         26:94:d0:a5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkIVcUMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDc5
OWQ0N2I5LWIxMzgtNGRjYi1hM2YxLWU3ZjJiYWQwZGRjNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKvIrGSlFpEmmxMn1mF0o6bE0nn1PNsng1cFbAB8
G9Sc96G0vUP+iojddEqecGM63PmyXbhueuKI48kS+4xC1aLG9s/RMfZxjvNEthRl
1kmOxGUaw7+2OxUDJMWzT9KITkvTG9gOAwR9HY1sS4r8PP+NOUOoPOQAdpBaVXV7
Pg/2lNOJ8g59ricNmSGbTVDy70SmgQ0fyTaxoaT/mkkjSPtRtk24li2VjXY45oGT
QX4i7U1o3uPm8IkPAzA4yJ2Q7tKMvJnledul3pyZLognXb9bPpLjZo1V/DSvEgBi
WDxyQGrBZmR/ECBXbeAH0exMPBQ1WIPDVcxtqltnxBrtjd0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQmF1jtMoqcfHs125glXApBEh+WYjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2EyMTZlZGFkLTVmMWItMzZi
OS1iMTczLTgzNzc2MWJkMTA1OC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcwCyjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEALVDi0tz/bxjhzz9+Eeo/GVtJuIOi2HHq9VXeyHT74L00hHuavnAJk5Fyr0mo
7MGA7tgFT0mieUlbRCvAZS6MSTH6I74RMu2LTekHkXBapb+qIICHJv50sCBQDnGp
7xhnAdsi0/r4OmipcXG0ZUW6YQmQpam/JfrFzlPH1gBFmsH9Z6cO8yT12KgQ6kMC
uO/IslhpaKtyK4ZgJZao7RzcwK0KBmLKeumRJGbJf6iTVoik+0vV/mEWkmst++2W
H6p3Qb7x1YNwYP4EAg/Bs+xwgf7HMM8EhUg7n4MMosJ5H0i3oP6v/ScLNILeBzIv
+2AI93k2rj0P3vsJXLXNJpTQpQ==
-----END CERTIFICATE-----
Generated at Fri Jan 19 21:14:42 2024 by rpki-client on console-fra.rpki-client.org