Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3032f29e-2ddf-31c4-8df2-6a52deed5bcd.roa
File:                     3032f29e-2ddf-31c4-8df2-6a52deed5bcd.roa (raw, json)
Hash identifier:          13ZKYDdp6d8dlhfwlCqrDGMlZVklfy/9RZYoFnEdvFU=
Subject key identifier:   5D:B7:52:BB:7B:08:72:9B:CF:BD:05:82:1C:8B:6E:D0:8C:B6:4D:98
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584726B7DB230A17EA31DD862B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3032f29e-2ddf-31c4-8df2-6a52deed5bcd.roa
Signing time:             Mon 09 Sep 2024 00:11:07 +0000
ROA not before:           Mon 09 Sep 2024 00:11:07 +0000
ROA not after:            Sun 08 Dec 2024 01:11:07 +0000
asID:                     11798
IP address blocks:        166.88.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 14:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:b7:db:23:0a:17:ea:31:dd:86:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  9 00:11:07 2024 GMT
            Not After : Dec  8 01:11:07 2024 GMT
        Subject: CN=8f250507-8ccb-4a4f-9a0d-35d179bdf9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:2e:f0:67:84:19:9e:3d:db:1c:2e:44:0c:
                    59:0f:84:bf:c8:54:f6:ec:49:3e:ae:ee:64:be:33:
                    20:82:3e:3d:c9:a6:97:2d:9b:84:5b:39:0a:06:fd:
                    1b:17:e7:d7:f7:76:9d:5e:cd:04:39:ae:81:6c:7b:
                    59:ea:c0:73:70:35:4f:3a:59:75:63:4c:bc:e1:30:
                    2b:44:d1:24:ca:79:cd:80:c5:5c:1d:61:6d:8c:9d:
                    e5:b6:71:7e:aa:1b:bb:32:45:39:a0:3c:ae:c1:65:
                    68:66:f9:c5:17:39:b1:df:92:f1:02:1d:45:37:85:
                    f1:dc:b8:b0:14:b8:63:27:22:92:42:1a:26:ae:b9:
                    02:8a:6d:ce:d8:e7:1c:a7:56:ae:8a:8b:34:a2:f1:
                    b5:7e:e0:3a:6a:9e:ae:81:24:ac:30:7d:55:99:b9:
                    ea:4b:fb:1c:19:ae:2e:d0:c3:52:51:fb:f6:df:aa:
                    29:14:5b:28:0b:dd:70:62:13:b9:84:47:e7:49:0d:
                    47:5c:69:48:9c:79:89:75:ba:78:ea:76:cc:e6:5b:
                    71:af:9d:ff:8e:fe:0b:bc:95:98:54:0e:4e:06:8f:
                    ce:91:e3:4e:c9:50:a4:7c:af:71:59:54:e0:52:31:
                    b7:aa:99:c6:f9:10:0f:38:bc:5a:75:a1:16:fa:27:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:52:BB:7B:08:72:9B:CF:BD:05:82:1C:8B:6E:D0:8C:B6:4D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3032f29e-2ddf-31c4-8df2-6a52deed5bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:10:05:1d:7e:2e:17:31:11:42:47:0c:12:61:d2:be:56:
         72:33:cf:25:3e:38:71:dc:bd:51:c6:25:bf:58:56:fb:36:34:
         bb:29:77:a8:f6:5c:61:4f:81:9b:6d:e8:d2:83:8c:65:b1:79:
         39:64:3d:d4:82:7b:ca:a9:56:09:cb:4d:54:83:78:4b:f7:59:
         41:81:2c:df:bf:05:b6:4d:eb:52:50:e2:65:9b:59:ae:0f:72:
         46:17:ed:ce:36:87:20:c8:7c:e4:5e:79:57:cc:8a:5f:14:ce:
         48:ab:85:40:3a:d3:22:9b:40:83:84:d0:40:d7:e0:2a:33:fa:
         d2:48:72:a9:7f:35:d5:09:83:4d:01:b5:78:3a:b1:6b:58:65:
         ed:53:2c:56:d8:48:7f:fd:54:72:8a:8c:70:b9:d1:41:c6:70:
         e6:6d:38:90:ac:e7:f6:59:af:d8:b0:41:11:c8:82:28:33:41:
         73:56:30:bf:d7:63:d3:5a:bf:64:3a:e6:c8:65:48:d9:c3:8d:
         c3:96:c9:98:d0:00:8e:e1:d8:05:ef:25:7f:92:04:4a:26:95:
         1d:6c:11:6e:0e:5d:91:a1:dd:23:72:fd:49:8e:3b:a3:d6:fa:
         89:4d:e3:89:b0:68:a7:30:df:e4:57:e4:52:06:5b:77:6a:64:
         dc:01:f8:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcmt9sjChfqMd2GKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDkwOTAwMTEwN1oXDTI0MTIwODAxMTEwN1owLzEtMCsGA1UEAxMk
OGYyNTA1MDctOGNjYi00YTRmLTlhMGQtMzVkMTc5YmRmOWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTku8GeEGZ492xwuRAxZD4S/yFT27Ek+ru5k
vjMggj49yaaXLZuEWzkKBv0bF+fX93adXs0EOa6BbHtZ6sBzcDVPOll1Y0y84TAr
RNEkynnNgMVcHWFtjJ3ltnF+qhu7MkU5oDyuwWVoZvnFFzmx35LxAh1FN4Xx3Liw
FLhjJyKSQhomrrkCim3O2Occp1auios0ovG1fuA6ap6ugSSsMH1VmbnqS/scGa4u
0MNSUfv236opFFsoC91wYhO5hEfnSQ1HXGlInHmJdbp46nbM5ltxr53/jv4LvJWY
VA5OBo/OkeNOyVCkfK9xWVTgUjG3qpnG+RAPOLxadaEW+icWbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF23Urt7CHKbz70FghyLbtCMtk2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzAzMmYyOWUtMmRkZi0z
MWM0LThkZjItNmE1MmRlZWQ1YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9lEAUdfi4XMRFCRwwSYdK+VnIzzyU+OHHcvVHGJb9YVvs2NLspd6j2
XGFPgZtt6NKDjGWxeTlkPdSCe8qpVgnLTVSDeEv3WUGBLN+/BbZN61JQ4mWbWa4P
ckYX7c42hyDIfOReeVfMil8UzkirhUA60yKbQIOE0EDX4Coz+tJIcql/NdUJg00B
tXg6sWtYZe1TLFbYSH/9VHKKjHC50UHGcOZtOJCs5/ZZr9iwQRHIgigzQXNWML/X
Y9Nav2Q65shlSNnDjcOWyZjQAI7h2AXvJX+SBEomlR1sEW4OXZGh3SNy/UmOO6PW
+olN44mwaKcw3+RX5FIGW3dqZNwB+Po=
-----END CERTIFICATE-----
Generated at Fri Sep 20 17:44:38 2024 by rpki-client on console-fra.rpki-client.org