Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3891847-6d85-32e7-8d3b-1b2a792dc84a.roa
File:                     e3891847-6d85-32e7-8d3b-1b2a792dc84a.roa (raw, json)
Hash identifier:          1bhP9vvv6cMMUSEwQnv53+lozxvBpgJJv8jBB90N2T8=
Subject key identifier:   81:6A:C3:DE:D1:91:CC:CB:E4:CC:2A:8D:F1:34:28:5F:03:B2:64:41
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA36AEB29AC38153C292D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3891847-6d85-32e7-8d3b-1b2a792dc84a.roa
Signing time:             Wed 04 Sep 2024 16:20:14 +0000
ROA not before:           Wed 04 Sep 2024 16:20:14 +0000
ROA not after:            Tue 03 Dec 2024 17:20:14 +0000
asID:                     11798
IP address blocks:        142.111.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 21:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:6a:eb:29:ac:38:15:3c:29:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:14 2024 GMT
            Not After : Dec  3 17:20:14 2024 GMT
        Subject: CN=33f56f3b-21c3-44dd-a585-bbdf10c52a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:ae:55:6c:3e:34:bb:ea:a0:b0:89:a9:75:
                    f9:ea:96:4b:8b:4b:1f:cc:7d:ab:ac:fe:45:31:76:
                    1b:f8:8c:8e:20:13:c8:cd:ca:70:01:ef:a5:05:ce:
                    1d:0f:77:ed:10:4a:83:6a:43:9f:79:e3:b7:2f:1d:
                    48:66:f2:48:0f:5a:b0:a1:0c:1f:61:bf:20:8c:30:
                    14:de:9f:7a:4c:48:b6:9c:27:67:0c:b6:40:95:48:
                    b7:4c:92:5a:9d:02:8c:6d:b7:a9:25:4a:85:ac:fd:
                    35:8c:73:b3:25:77:86:f8:4e:3a:41:f5:c3:77:85:
                    e0:62:70:b3:89:15:69:22:88:55:f2:a7:bc:f7:5e:
                    38:fa:4f:09:39:b6:97:c3:85:02:5d:76:cf:9e:b2:
                    43:05:05:80:1e:5e:08:0a:22:e3:ac:2d:59:42:b2:
                    3f:f1:ab:49:4b:ac:a1:ee:65:80:8b:39:ab:58:84:
                    19:42:eb:dc:47:53:5b:2f:b8:6e:49:b9:ab:6f:a7:
                    b7:9a:48:3b:36:0e:33:4c:02:b4:6a:0b:0a:f5:47:
                    0e:0a:e5:6b:93:a8:c5:ca:3c:61:5a:5b:e9:2b:91:
                    b5:54:f5:d0:6f:90:b2:9a:bc:f7:4d:d6:22:be:98:
                    70:8d:2e:ba:c9:08:cc:23:55:be:86:7f:b5:66:40:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:C3:DE:D1:91:CC:CB:E4:CC:2A:8D:F1:34:28:5F:03:B2:64:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3891847-6d85-32e7-8d3b-1b2a792dc84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:12:5f:59:db:0b:87:76:4d:53:d6:a9:88:e3:e5:bd:53:
         36:bb:7e:97:26:f4:39:26:c3:03:3c:ea:88:10:f2:14:77:72:
         cb:f4:04:5f:26:9f:c3:68:49:fc:20:59:d3:46:dc:e9:25:48:
         9d:bd:d1:00:44:cc:46:cc:e4:36:62:95:0a:8e:c6:8e:44:a3:
         d8:20:ce:de:d1:93:3b:8f:18:ea:1d:1a:2d:76:81:79:ee:b4:
         a3:6f:6e:be:61:52:9a:11:a7:f2:5b:ad:af:be:b4:a1:8f:60:
         f1:7a:56:1b:0a:0f:80:f3:00:09:03:15:9e:74:34:0d:52:23:
         9b:dd:38:d2:a1:68:01:30:89:52:cf:95:f9:8b:35:f6:23:33:
         2a:0c:0a:b3:ff:29:4f:1c:60:21:9e:07:79:0f:41:30:9a:90:
         88:6c:a6:5c:b8:0d:f8:ae:eb:a6:3f:fc:26:fa:b7:2c:65:11:
         58:ab:72:21:98:d1:24:09:44:24:7a:09:c1:57:80:61:20:d6:
         ed:48:aa:b4:74:68:1b:4a:7b:32:4d:87:46:ad:b1:5e:06:10:
         9c:5b:e5:b6:85:48:ec:f6:9e:0b:36:6e:23:2f:16:c5:83:96:
         da:fc:30:20:57:81:68:40:eb:e1:a5:e9:17:f0:fd:c8:a0:12:
         8b:13:e4:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcao2rrKaw4FTwpLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDkwNDE2MjAxNFoXDTI0MTIwMzE3MjAxNFowLzEtMCsGA1UEAxMk
MzNmNTZmM2ItMjFjMy00NGRkLWE1ODUtYmJkZjEwYzUyYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqauVWw+NLvqoLCJqXX56pZLi0sfzH2rrP5F
MXYb+IyOIBPIzcpwAe+lBc4dD3ftEEqDakOfeeO3Lx1IZvJID1qwoQwfYb8gjDAU
3p96TEi2nCdnDLZAlUi3TJJanQKMbbepJUqFrP01jHOzJXeG+E46QfXDd4XgYnCz
iRVpIohV8qe89144+k8JObaXw4UCXXbPnrJDBQWAHl4ICiLjrC1ZQrI/8atJS6yh
7mWAizmrWIQZQuvcR1NbL7huSbmrb6e3mkg7Ng4zTAK0agsK9UcOCuVrk6jFyjxh
WlvpK5G1VPXQb5Cymrz3TdYivphwjS66yQjMI1W+hn+1ZkDQZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFqw97RkczL5MwqjfE0KF8DsmRBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTM4OTE4NDctNmQ4NS0z
MmU3LThkM2ItMWIyYTc5MmRjODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJvEl9Z2wuHdk1T1qmI4+W9Uza7fpcm9DkmwwM86ogQ8hR3csv0BF8m
n8NoSfwgWdNG3OklSJ290QBEzEbM5DZilQqOxo5Eo9ggzt7RkzuPGOodGi12gXnu
tKNvbr5hUpoRp/Jbra++tKGPYPF6VhsKD4DzAAkDFZ50NA1SI5vdONKhaAEwiVLP
lfmLNfYjMyoMCrP/KU8cYCGeB3kPQTCakIhsply4Dfiu66Y//Cb6tyxlEVirciGY
0SQJRCR6CcFXgGEg1u1IqrR0aBtKezJNh0atsV4GEJxb5baFSOz2ngs2biMvFsWD
ltr8MCBXgWhA6+Gl6Rfw/cigEosT5Lw=
-----END CERTIFICATE-----
Generated at Fri Oct 11 22:31:16 2024 by rpki-client on console-fra.rpki-client.org