Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ceec67bc-f0f7-3db3-b8ae-9c857d04633f.roa
File:                     ceec67bc-f0f7-3db3-b8ae-9c857d04633f.roa (raw, json)
Hash identifier:          1On+OMi+yEz5VGkFysmZ6f0bgNi/8JE8gSL+NUGCNJE=
Subject key identifier:   7C:04:96:DE:71:CC:00:F5:B7:62:56:57:A6:CD:A9:2D:4D:39:B3:33
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A413D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ceec67bc-f0f7-3db3-b8ae-9c857d04633f.roa
Signing time:             Fri 30 Nov 2018 01:09:55 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 09:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:41:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ac1c4607-456a-485d-8874-0e40d960744c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:fd:6f:0c:e4:21:eb:dd:ad:2e:d4:9d:fb:
                    ca:e7:64:b2:d8:6b:8e:cc:a2:67:04:bb:ca:9b:6c:
                    08:25:f1:b9:6e:86:92:a6:c1:cb:8d:79:03:fd:fa:
                    af:88:89:41:1a:8e:d5:0c:36:40:2a:6e:1d:0d:d5:
                    41:c7:38:78:aa:3e:26:ea:97:e3:44:3a:b6:8a:92:
                    20:cb:5b:d4:f8:41:c0:e0:7c:8d:6d:4a:25:60:53:
                    f6:84:e0:92:50:17:1a:7b:10:d9:ee:d8:e1:0c:4b:
                    87:c9:eb:dc:a2:7f:d9:20:e7:2d:23:92:03:34:2a:
                    56:d1:70:54:ef:dc:e4:ee:c1:d0:23:62:97:98:65:
                    49:c9:4c:84:a7:ad:01:1b:19:a4:ad:91:f4:d8:e4:
                    21:05:f6:1d:79:5b:ea:2b:e0:97:a9:5c:5a:c6:a8:
                    2f:fe:c7:a1:7f:fd:fa:7c:da:ec:7f:46:d3:1d:cd:
                    75:46:ee:9c:95:ea:61:c4:19:df:6e:05:71:1a:3c:
                    22:cd:83:f2:28:55:98:18:b0:d9:47:4a:07:40:2e:
                    0b:96:87:9b:77:fd:88:78:83:d7:0f:f3:4b:4e:3f:
                    63:45:c0:93:1f:d5:1c:70:46:0a:23:c0:11:cf:9c:
                    0f:95:0a:2a:0f:69:67:5a:bc:91:dc:44:5b:8c:dc:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:96:DE:71:CC:00:F5:B7:62:56:57:A6:CD:A9:2D:4D:39:B3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ceec67bc-f0f7-3db3-b8ae-9c857d04633f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f1:3f:7f:27:60:1f:3c:b9:0e:21:02:34:71:87:ed:f4:d2:
         f2:ce:78:fe:55:5f:99:40:c8:1a:13:2d:eb:84:4a:55:84:ce:
         be:54:9e:83:37:70:87:fe:cb:b7:49:12:7f:32:57:00:f9:cc:
         f1:46:bc:da:a4:d9:b1:ab:56:b6:17:65:a5:88:5c:87:97:e7:
         c3:ba:1a:45:81:f2:a2:5d:82:20:f7:97:c9:f5:17:f8:3e:7e:
         4b:97:33:05:74:29:a9:33:ea:27:36:7c:39:70:2e:92:9c:53:
         28:ca:7d:c7:87:af:d2:28:6e:7c:b9:19:d0:35:3e:99:bf:fa:
         65:c0:09:ab:d8:6c:80:97:28:28:08:e6:9f:b3:5b:d5:64:70:
         19:e3:54:0e:10:e5:03:1a:e6:7e:76:77:12:0f:da:11:32:3a:
         db:22:46:2e:a6:42:b1:98:1d:72:21:c0:9a:a2:5b:09:60:83:
         ef:c2:da:d9:5a:e6:17:c2:61:b2:92:fe:f8:2c:7b:08:81:38:
         1a:8f:37:ba:f4:e5:4f:cf:f3:d2:24:65:51:b9:b0:0c:8e:14:
         a4:4c:fe:84:d9:bf:ce:6b:1a:b4:f4:67:59:15:df:3b:64:ad:
         dc:00:b2:30:f3:af:cd:f3:50:68:af:63:ae:d5:2c:fe:78:1b:
         89:81:51:b2
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IqQT0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGFj
MWM0NjA3LTQ1NmEtNDg1ZC04ODc0LTBlNDBkOTYwNzQ0YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOiT/W8M5CHr3a0u1J37yudksthrjsyiZwS7ypts
CCXxuW6GkqbBy415A/36r4iJQRqO1Qw2QCpuHQ3VQcc4eKo+JuqX40Q6toqSIMtb
1PhBwOB8jW1KJWBT9oTgklAXGnsQ2e7Y4QxLh8nr3KJ/2SDnLSOSAzQqVtFwVO/c
5O7B0CNil5hlSclMhKetARsZpK2R9NjkIQX2HXlb6ivgl6lcWsaoL/7HoX/9+nza
7H9G0x3NdUbunJXqYcQZ324FcRo8Is2D8ihVmBiw2UdKB0AuC5aHm3f9iHiD1w/z
S04/Y0XAkx/VHHBGCiPAEc+cD5UKKg9pZ1q8kdxEW4zcr38CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR8BJbeccwA9bdiVlemzaktTTmzMzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2NlZWM2N2JjLWYwZjctM2Ri
My1iOGFlLTljODU3ZDA0NjMzZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxFbDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAo/E/fydgHzy5DiECNHGH7fTS8s54/lVfmUDIGhMt64RKVYTOvlSegzdwh/7L
t0kSfzJXAPnM8Ua82qTZsatWthdlpYhch5fnw7oaRYHyol2CIPeXyfUX+D5+S5cz
BXQpqTPqJzZ8OXAukpxTKMp9x4ev0ihufLkZ0DU+mb/6ZcAJq9hsgJcoKAjmn7Nb
1WRwGeNUDhDlAxrmfnZ3Eg/aETI62yJGLqZCsZgdciHAmqJbCWCD78La2VrmF8Jh
spL++Cx7CIE4Go83uvTlT8/z0iRlUbmwDI4UpEz+hNm/zmsatPRnWRXfO2St3ACy
MPOvzfNQaK9jrtUs/ngbiYFRsg==
-----END CERTIFICATE-----