Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd7ab3b6-ccf1-39bc-82a9-60c8ff319450.roa
File:                     dd7ab3b6-ccf1-39bc-82a9-60c8ff319450.roa (raw, json)
Hash identifier:          GTQvOkftfvopBtd25wB8CGtNx0lZgq8H4noRTpwd0yQ=
Subject key identifier:   DB:9E:FC:E7:F8:2C:41:31:1A:F4:06:70:9B:42:C9:4F:38:75:6A:29
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E873CDF46726E3A3F5C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd7ab3b6-ccf1-39bc-82a9-60c8ff319450.roa
Signing time:             Fri 11 Oct 2024 21:09:58 +0000
ROA not before:           Fri 11 Oct 2024 21:09:58 +0000
ROA not after:            Thu 09 Jan 2025 22:09:58 +0000
asID:                     7385
IP address blocks:        23.27.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 18:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:87:3c:df:46:72:6e:3a:3f:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:09:58 2024 GMT
            Not After : Jan  9 22:09:58 2025 GMT
        Subject: CN=6b16fbbe-4854-49ce-b6e9-1906dce06164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e1:03:66:12:8c:86:7a:80:ec:42:c1:1d:26:
                    b0:eb:e1:7d:38:9f:d3:8f:eb:e0:63:cf:2b:c6:ec:
                    35:73:a8:46:cf:10:33:db:1f:c9:99:20:6b:8c:e1:
                    9b:15:dd:9e:a2:72:1a:82:51:42:b0:37:d0:41:1c:
                    69:e1:92:af:a0:d4:93:16:2a:c6:30:2c:ea:a7:18:
                    0d:60:6f:e8:25:8a:92:67:24:4d:ef:c0:ec:8a:90:
                    5d:d2:23:65:ec:89:f2:f0:b7:20:79:5e:29:65:dc:
                    94:57:44:02:e1:a5:3d:38:48:cc:7a:04:46:bc:05:
                    0c:f7:79:ec:f2:df:f9:69:f2:8a:5d:68:69:33:b5:
                    e4:41:1f:be:86:c9:1d:9a:c2:99:13:82:71:32:36:
                    40:15:0e:bd:4a:fb:8e:b7:4d:43:c4:5f:d7:99:ba:
                    90:02:ac:5d:bb:64:14:09:af:aa:7b:70:0e:36:f3:
                    fb:59:71:1d:26:24:5a:a2:ad:9a:05:e0:aa:43:d6:
                    55:7c:11:01:a5:e2:e8:b6:2e:22:49:05:83:d2:dd:
                    56:ad:ce:07:0f:37:92:b4:0f:b3:63:25:84:e5:94:
                    89:c1:b7:e3:df:9d:e1:71:89:fe:5f:7a:de:58:2a:
                    de:73:37:5f:b6:c4:75:14:03:08:78:4e:9f:54:b0:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9E:FC:E7:F8:2C:41:31:1A:F4:06:70:9B:42:C9:4F:38:75:6A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd7ab3b6-ccf1-39bc-82a9-60c8ff319450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:78:34:64:3b:49:66:d0:d4:0c:37:60:a5:1e:e3:6f:14:
         c9:7b:9c:27:82:44:6a:32:58:a8:5e:1b:ae:d9:ce:d3:31:91:
         e3:bf:cd:c1:f3:3e:f6:2a:8e:a8:1d:55:f3:99:76:b2:5e:93:
         28:45:82:7b:b5:64:b4:f1:3d:92:07:7d:7e:19:b1:c8:04:78:
         d9:b2:e1:85:50:45:94:1c:6e:49:b0:48:36:29:02:b7:e6:79:
         ae:e9:47:c0:a5:f2:85:8c:8a:41:03:a0:e7:54:b4:40:00:fe:
         e6:b7:a3:9b:55:4e:1b:d0:75:10:f7:e1:b8:75:0e:e4:ee:3a:
         bb:29:7e:c2:01:af:85:4b:84:18:86:39:33:2f:5b:ed:bc:44:
         4b:dd:17:ac:36:aa:a6:09:77:e3:71:61:9a:99:6c:a0:c4:28:
         b2:3f:94:a9:d5:4f:49:4c:42:05:c9:91:b5:9f:c0:8c:34:0f:
         5d:8f:8f:1a:05:e9:9d:f2:a5:6d:55:5d:fa:d2:81:41:46:28:
         ec:28:aa:8c:de:e8:fc:0d:88:d4:6b:3d:54:92:c7:66:88:9c:
         31:94:ab:b5:36:a7:50:c0:c9:93:40:a0:e1:77:8d:ef:a4:47:
         ff:69:f1:72:e9:b4:7c:46:26:41:70:ec:09:bd:38:61:a6:e8:
         be:f0:17:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeCfoc830Zybjo/XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTAxMTIxMDk1OFoXDTI1MDEwOTIyMDk1OFowLzEtMCsGA1UEAxMk
NmIxNmZiYmUtNDg1NC00OWNlLWI2ZTktMTkwNmRjZTA2MTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOEDZhKMhnqA7ELBHSaw6+F9OJ/Tj+vgY88r
xuw1c6hGzxAz2x/JmSBrjOGbFd2eonIaglFCsDfQQRxp4ZKvoNSTFirGMCzqpxgN
YG/oJYqSZyRN78DsipBd0iNl7Iny8LcgeV4pZdyUV0QC4aU9OEjMegRGvAUM93ns
8t/5afKKXWhpM7XkQR++hskdmsKZE4JxMjZAFQ69SvuOt01DxF/XmbqQAqxdu2QU
Ca+qe3AONvP7WXEdJiRaoq2aBeCqQ9ZVfBEBpeLoti4iSQWD0t1Wrc4HDzeStA+z
YyWE5ZSJwbfj353hcYn+X3reWCreczdftsR1FAMIeE6fVLByqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNue/Of4LEExGvQGcJtCyU84dWopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGQ3YWIzYjYtY2NmMS0z
OWJjLTgyYTktNjBjOGZmMzE5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlOeDRkO0lm0NQMN2ClHuNvFMl7nCeCRGoyWKheG67ZztMxkeO/zcHz
PvYqjqgdVfOZdrJekyhFgnu1ZLTxPZIHfX4ZscgEeNmy4YVQRZQcbkmwSDYpArfm
ea7pR8Cl8oWMikEDoOdUtEAA/ua3o5tVThvQdRD34bh1DuTuOrspfsIBr4VLhBiG
OTMvW+28REvdF6w2qqYJd+NxYZqZbKDEKLI/lKnVT0lMQgXJkbWfwIw0D12PjxoF
6Z3ypW1VXfrSgUFGKOwoqoze6PwNiNRrPVSSx2aInDGUq7U2p1DAyZNAoOF3je+k
R/9p8XLptHxGJkFw7Am9OGGm6L7wFwU=
-----END CERTIFICATE-----
Generated at Thu Oct 24 20:58:23 2024 by rpki-client on console-fra.rpki-client.org