Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/185f7f41-d6ae-3b3b-8963-36aac88aef23.roa
File:                     185f7f41-d6ae-3b3b-8963-36aac88aef23.roa (raw, json)
Hash identifier:          oc7ln+//ZD9YTKExwA4LCdOkJ4vZ2+74eU6efsrvaCg=
Subject key identifier:   E3:46:FA:6B:60:D3:88:AE:D5:5B:69:45:B7:9C:45:3D:6F:65:5E:C6
Certificate issuer:       /CN=1701ecde-5b4d-441b-badd-359ef0fbe0da
Certificate serial:       010D0C9F432858465409D437BACD2606D8DAB280
Authority key identifier: EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/185f7f41-d6ae-3b3b-8963-36aac88aef23.roa
Signing time:             Tue 25 Jun 2024 13:00:33 +0000
ROA not before:           Tue 25 Jun 2024 13:00:33 +0000
ROA not after:            Mon 23 Sep 2024 13:00:33 +0000
asID:                     395194
IP address blocks:        147.92.48.0/22 maxlen: 24
                          149.19.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 21:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:54:09:d4:37:ba:cd:26:06:d8:da:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1701ecde-5b4d-441b-badd-359ef0fbe0da
        Validity
            Not Before: Jun 25 13:00:33 2024 GMT
            Not After : Sep 23 13:00:33 2024 GMT
        Subject: CN=96501d41-1f02-4b8a-a63a-d04f36a10e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:9a:2c:a1:d5:a0:45:80:bb:8a:09:c5:07:
                    cb:83:2c:69:0b:80:d3:b2:d9:bf:d5:15:e0:f0:fe:
                    34:5d:e3:bb:b0:63:50:93:b4:d7:2e:54:e0:0f:5e:
                    53:c2:df:38:07:56:42:db:3d:6d:2b:aa:a4:f2:47:
                    e5:d0:25:aa:d6:5c:76:77:8d:5f:36:ca:8b:ad:fa:
                    00:60:8d:f3:58:be:21:aa:92:d9:49:28:d9:98:25:
                    a6:40:1e:97:b5:93:9f:28:af:b5:77:3f:9b:45:16:
                    15:ad:90:e3:79:44:e4:66:89:a7:bc:7a:8c:a6:b3:
                    92:77:19:d4:02:59:d3:16:72:4e:22:39:f1:75:69:
                    67:04:ba:fb:77:df:fb:de:c4:d5:2f:30:a0:b4:88:
                    f6:78:e1:fa:ca:3a:59:f0:ae:94:21:1e:86:2e:05:
                    f2:38:b8:26:0d:08:19:7f:52:ad:d1:cf:9c:86:26:
                    35:35:c6:d6:d9:b9:1c:07:7a:bd:87:f6:f0:ae:57:
                    25:ac:45:d9:c5:53:54:e6:15:6a:76:e1:a1:cd:ef:
                    ea:e3:6f:1d:74:f7:1d:72:f0:b8:4d:9e:79:9d:5a:
                    1f:8e:d7:80:2f:da:2b:c1:85:07:b4:90:65:de:6c:
                    68:87:8a:91:28:4e:84:de:42:e3:10:ed:71:74:ea:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:FA:6B:60:D3:88:AE:D5:5B:69:45:B7:9C:45:3D:6F:65:5E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/185f7f41-d6ae-3b3b-8963-36aac88aef23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.crl

            X509v3 Authority Key Identifier:
                keyid:EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.48.0/22
                  149.19.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:b3:e2:1d:77:44:3f:27:fa:7b:9a:9b:df:17:53:21:48:
         44:c7:99:e5:3e:d5:f7:4e:d1:36:2a:6f:38:31:85:27:25:2e:
         e1:0a:e4:ad:8e:04:2d:9c:f8:e3:e9:2a:81:42:c5:ff:e0:cf:
         7d:e4:9a:80:c7:e3:af:3c:c9:73:d5:48:66:38:ac:26:db:e5:
         19:7c:fe:84:a7:78:ac:b1:60:7c:e9:ef:65:92:98:63:1e:2c:
         14:71:bd:32:44:d0:02:9d:6c:30:91:4f:3a:7e:06:08:9b:8b:
         59:9f:ba:f8:d5:7d:64:34:d5:9a:55:f8:50:12:43:a1:0b:c9:
         b8:63:f2:6b:6b:20:15:b1:44:74:5b:69:69:60:63:8f:12:73:
         91:b1:5d:37:46:b0:64:6a:9d:f4:1e:b6:69:2a:ee:51:1e:f7:
         09:fe:a4:23:44:89:df:54:ef:71:df:60:93:67:ad:ae:bf:4c:
         a1:7e:a0:c5:17:89:47:54:95:d1:47:8b:2e:1a:41:cd:28:bb:
         42:b4:2f:5e:41:ce:4b:93:5d:0e:8e:35:61:ac:e5:dd:c4:71:
         7b:0f:cc:0b:18:4f:f5:2c:4e:47:84:dd:90:6a:5f:4c:7d:77:
         7d:f4:a0:81:a2:48:e1:de:40:81:4d:54:3f:21:4f:a4:09:a5:
         42:0f:ad:ea
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEZUCdQ3us0mBtjasoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcwMWVjZGUtNWI0ZC00NDFiLWJhZGQtMzU5ZWYwZmJl
MGRhMB4XDTI0MDYyNTEzMDAzM1oXDTI0MDkyMzEzMDAzM1owLzEtMCsGA1UEAxMk
OTY1MDFkNDEtMWYwMi00YjhhLWE2M2EtZDA0ZjM2YTEwZTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNqaLKHVoEWAu4oJxQfLgyxpC4DTstm/1RXg
8P40XeO7sGNQk7TXLlTgD15Twt84B1ZC2z1tK6qk8kfl0CWq1lx2d41fNsqLrfoA
YI3zWL4hqpLZSSjZmCWmQB6XtZOfKK+1dz+bRRYVrZDjeUTkZomnvHqMprOSdxnU
AlnTFnJOIjnxdWlnBLr7d9/73sTVLzCgtIj2eOH6yjpZ8K6UIR6GLgXyOLgmDQgZ
f1Kt0c+chiY1NcbW2bkcB3q9h/bwrlclrEXZxVNU5hVqduGhze/q428ddPcdcvC4
TZ55nVofjteAL9orwYUHtJBl3mxoh4qRKE6E3kLjEO1xdOq8fQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFONG+mtg04iu1VtpRbecRT1vZV7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNzAx
ZWNkZS01YjRkLTQ0MWItYmFkZC0zNTllZjBmYmUwZGEvMTg1ZjdmNDEtZDZhZS0z
YjNiLTg5NjMtMzZhYWM4OGFlZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTcwMWVjZGUtNWI0ZC00NDFiLWJh
ZGQtMzU5ZWYwZmJlMGRhLzE3MDFlY2RlLTViNGQtNDQxYi1iYWRkLTM1OWVmMGZi
ZTBkYS5jcmwwHwYDVR0jBBgwFoAU6hZfFbueeZnxRbdnhgBsCJ/GVTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNzAxZWNkZS01YjRkLTQ0MWItYmFkZC0zNTll
ZjBmYmUwZGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCk1wwAwQC
lRNoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJbus+Idd0Q/J/p7mpvfF1MhSETHmeU+1fdO0TYqbzgxhScl
LuEK5K2OBC2c+OPpKoFCxf/gz33kmoDH4688yXPVSGY4rCbb5Rl8/oSneKyxYHzp
72WSmGMeLBRxvTJE0AKdbDCRTzp+Bgibi1mfuvjVfWQ01ZpV+FASQ6ELybhj8mtr
IBWxRHRbaWlgY48Sc5GxXTdGsGRqnfQetmkq7lEe9wn+pCNEid9U73HfYJNnra6/
TKF+oMUXiUdUldFHiy4aQc0ou0K0L15BzkuTXQ6ONWGs5d3EcXsPzAsYT/UsTkeE
3ZBqX0x9d330oIGiSOHeQIFNVD8hT6QJpUIPreo=
-----END CERTIFICATE-----
Generated at Thu Sep 5 23:32:26 2024 by rpki-client on console-fra.rpki-client.org