Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/6957e759-f7da-3d90-bd6b-8c6b39d7665e.roa
File:                     6957e759-f7da-3d90-bd6b-8c6b39d7665e.roa (raw, json)
Hash identifier:          QExrW8AI++pIzIHHroraHyEbxRp8JEiKSOW7ks8tVZo=
Subject key identifier:   61:DE:F4:57:80:E4:56:1D:D5:3A:4D:BE:56:85:C5:F5:13:44:E2:C0
Certificate issuer:       /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Certificate serial:       010D0C9F4328584528BCAFEF0FB6476391CE3780
Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/6957e759-f7da-3d90-bd6b-8c6b39d7665e.roa
Signing time:             Sun 10 Mar 2024 07:58:35 +0000
ROA not before:           Sun 10 Mar 2024 07:58:35 +0000
ROA not after:            Sat 08 Jun 2024 07:58:35 +0000
asID:                     16512
IP address blocks:        149.112.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 12:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:bc:af:ef:0f:b6:47:63:91:ce:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
        Validity
            Not Before: Mar 10 07:58:35 2024 GMT
            Not After : Jun  8 07:58:35 2024 GMT
        Subject: CN=cd73059c-efde-4155-8403-076d7637fa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:20:65:ea:80:0e:4e:b5:9b:dc:f9:48:11:
                    7c:17:2b:30:95:f6:40:75:68:7e:40:d8:92:3a:a0:
                    e7:e4:c5:0f:cf:53:44:1c:6c:29:01:3d:06:84:01:
                    21:3b:15:70:ab:99:03:b0:5f:8e:ba:b1:4f:9f:94:
                    be:82:18:6f:f3:78:38:82:3d:e4:0c:49:02:c5:07:
                    38:36:fc:fc:67:8d:e2:b8:a0:7f:2a:f3:62:40:26:
                    f8:13:76:aa:36:f0:e8:41:bc:72:24:a9:37:a6:4d:
                    19:b1:0b:eb:4b:b7:0a:58:c6:e3:62:0b:3d:7c:4b:
                    d4:75:3d:cf:13:06:aa:9c:ee:c6:58:ba:3f:e0:f2:
                    c8:6f:3f:0b:74:78:a7:80:b9:f5:d7:28:09:8a:79:
                    fb:cd:f7:b0:ab:39:a0:d0:99:a6:e3:87:2f:e0:0d:
                    6d:cd:4b:07:1d:73:fd:07:ab:df:8c:77:c5:11:e1:
                    17:61:c2:5e:69:41:fe:4e:20:0f:0b:ee:27:19:10:
                    d0:72:d3:93:f9:12:fa:72:cf:71:2d:2d:3f:94:a7:
                    b7:ca:b5:66:c3:d7:99:7c:a7:69:41:9d:9b:03:73:
                    96:0d:68:a9:bc:ae:e1:22:fd:17:b3:a3:84:85:0b:
                    27:00:67:75:39:2a:33:3d:18:1a:10:1c:f5:ea:c5:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DE:F4:57:80:E4:56:1D:D5:3A:4D:BE:56:85:C5:F5:13:44:E2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/6957e759-f7da-3d90-bd6b-8c6b39d7665e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:c9:bb:ed:ec:9f:8c:47:c8:9c:bd:90:24:6a:3c:06:d7:
         f3:44:04:31:34:8d:b6:ba:73:ff:d5:2d:5a:a1:b3:1a:79:dc:
         1d:21:c8:1c:8e:59:6e:2c:9a:4f:59:20:e8:a9:b3:da:5a:77:
         9a:9d:37:b4:96:08:70:d5:96:1d:ad:9d:a8:7b:2f:8d:9e:c1:
         11:06:2b:ad:80:b4:43:5a:e3:2f:f0:35:16:34:bf:38:9f:31:
         0b:ba:c9:e2:52:0c:12:66:27:83:3b:d9:68:7c:e3:ea:e3:2a:
         ec:d8:90:65:00:cf:b0:6c:80:2d:b3:df:e8:35:ee:3e:06:ac:
         22:74:b1:45:42:a3:70:a8:4f:ab:9e:dc:20:0d:04:9b:52:6a:
         0d:7d:31:eb:56:01:34:a1:83:75:1c:dc:bd:61:ee:f4:09:a1:
         75:b4:6f:51:66:4d:61:3e:db:33:cb:bd:66:e7:0e:de:f2:5a:
         26:60:d6:cc:73:12:37:a8:89:ea:17:14:8a:ac:09:57:7c:28:
         bd:8a:81:4d:ae:51:8f:72:24:26:0a:d2:47:37:51:37:3b:40:
         28:d9:da:01:39:ad:41:bb:91:e3:2c:e8:8a:ea:d7:8f:54:47:
         a2:c2:86:29:19:ca:36:71:3d:4e:bb:2c:7e:67:ad:e5:70:38:
         b8:1a:e1:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUovK/vD7ZHY5HON4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM5ZDJhZWYtMmRkOS00Mzg3LWI0N2MtOThiYjkxMGU1
MmZlMB4XDTI0MDMxMDA3NTgzNVoXDTI0MDYwODA3NTgzNVowLzEtMCsGA1UEAxMk
Y2Q3MzA1OWMtZWZkZS00MTU1LTg0MDMtMDc2ZDc2MzdmYTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0gZeqADk61m9z5SBF8FyswlfZAdWh+QNiS
OqDn5MUPz1NEHGwpAT0GhAEhOxVwq5kDsF+OurFPn5S+ghhv83g4gj3kDEkCxQc4
Nvz8Z43iuKB/KvNiQCb4E3aqNvDoQbxyJKk3pk0ZsQvrS7cKWMbjYgs9fEvUdT3P
EwaqnO7GWLo/4PLIbz8LdHingLn11ygJinn7zfewqzmg0Jmm44cv4A1tzUsHHXP9
B6vfjHfFEeEXYcJeaUH+TiAPC+4nGRDQctOT+RL6cs9xLS0/lKe3yrVmw9eZfKdp
QZ2bA3OWDWipvK7hIv0Xs6OEhQsnAGd1OSozPRgaEBz16sXSjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHe9FeA5FYd1TpNvlaFxfUTROLAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzlk
MmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJiOTEwZTUyZmUvNjk1N2U3NTktZjdkYS0z
ZDkwLWJkNmItOGM2YjM5ZDc2NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM5ZDJhZWYtMmRkOS00Mzg3LWI0
N2MtOThiYjkxMGU1MmZlL2JjOWQyYWVmLTJkZDktNDM4Ny1iNDdjLTk4YmI5MTBl
NTJmZS5jcmwwHwYDVR0jBBgwFoAUXwy7Gy/tJSY7JZ7vyytJ4usJQNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iYzlkMmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJi
OTEwZTUyZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3Dybvt7J+MR8icvZAkajwG1/NEBDE0jba6c//VLVqhsxp53B0hyByO
WW4smk9ZIOips9pad5qdN7SWCHDVlh2tnah7L42ewREGK62AtENa4y/wNRY0vzif
MQu6yeJSDBJmJ4M72Wh84+rjKuzYkGUAz7BsgC2z3+g17j4GrCJ0sUVCo3CoT6ue
3CANBJtSag19MetWATShg3Uc3L1h7vQJoXW0b1FmTWE+2zPLvWbnDt7yWiZg1sxz
EjeoieoXFIqsCVd8KL2KgU2uUY9yJCYK0kc3UTc7QCjZ2gE5rUG7keMs6Irq149U
R6LChikZyjZxPU67LH5nreVwOLga4QA=
-----END CERTIFICATE-----
Generated at Wed Mar 20 16:58:35 2024 by rpki-client on console-fra.rpki-client.org