Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ee2102fa-cd51-3895-972d-08a14dfc2699.roa
File:                     ee2102fa-cd51-3895-972d-08a14dfc2699.roa (raw, json)
Hash identifier:          74v8wFJV+dzfyxoSQhtUwns/mHBF3oB26yJdYpDVw4Y=
Subject key identifier:   1B:27:EB:FF:3D:68:7E:8E:76:65:FE:4B:4A:53:BB:0D:D5:AD:E7:CD
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328583D7403292D126069EED1AC7480
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ee2102fa-cd51-3895-972d-08a14dfc2699.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     46261
IP address blocks:        172.102.198.0/24 maxlen: 24
                          172.102.199.0/24 maxlen: 24
                          172.102.195.0/24 maxlen: 24
                          172.102.192.0/24 maxlen: 24
                          172.102.193.0/24 maxlen: 24
                          172.102.194.0/24 maxlen: 24
                          172.102.196.0/24 maxlen: 24
                          172.102.197.0/24 maxlen: 24
                          172.102.202.0/24 maxlen: 24
                          172.102.204.0/24 maxlen: 24
                          172.102.208.0/24 maxlen: 24
                          172.102.209.0/24 maxlen: 24
                          172.102.212.0/24 maxlen: 24
                          172.102.213.0/24 maxlen: 24
                          172.102.214.0/24 maxlen: 24
                          172.102.217.0/24 maxlen: 24
                          172.102.220.0/24 maxlen: 24
                          172.102.221.0/24 maxlen: 24
                          172.102.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 Jun 2022 06:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:74:03:29:2d:12:60:69:ee:d1:ac:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 15 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=60a6fbf8-8734-497e-b408-09f2873a96aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:5b:05:4d:7b:41:22:f6:df:04:d4:49:81:
                    2d:2b:11:21:fe:82:ec:47:42:1f:c8:2b:61:f2:18:
                    61:9e:85:a2:d8:bf:01:1c:f1:5a:74:ac:72:25:15:
                    cd:71:e9:cf:cd:e2:50:d8:11:3d:80:46:6a:32:42:
                    60:74:de:e3:26:b5:b5:6e:46:c9:8e:13:5b:0e:5d:
                    7a:64:ef:f8:99:3b:c3:d0:e9:6c:16:49:69:e9:67:
                    b9:01:c7:30:54:7f:3e:bf:21:a4:e1:c8:b0:43:b6:
                    c9:35:8a:52:0f:22:b0:58:8d:51:97:f4:7b:8a:e7:
                    24:a3:ab:cc:9e:e4:11:36:92:77:e2:d4:3f:7d:9e:
                    ee:61:0c:21:49:14:c9:af:bf:4c:2a:92:56:52:45:
                    f3:21:90:6e:d2:92:1a:7e:d9:73:05:d2:ea:32:4b:
                    19:76:70:bc:56:da:1e:fa:71:26:4a:52:de:77:51:
                    c4:7b:ff:01:e5:f1:e5:bf:c1:98:45:61:e7:7d:62:
                    e9:de:91:1d:ff:d8:22:ea:53:0a:f5:0a:b1:7b:64:
                    2a:fc:29:7b:b2:c5:62:0a:8d:63:2e:ac:7e:af:be:
                    b2:f0:cf:aa:08:76:52:9b:fe:8f:14:a2:e8:6f:48:
                    f3:fa:c0:12:1e:e1:bd:e6:3f:f1:9b:d4:27:2a:a1:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:27:EB:FF:3D:68:7E:8E:76:65:FE:4B:4A:53:BB:0D:D5:AD:E7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ee2102fa-cd51-3895-972d-08a14dfc2699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.192.0/21
                  172.102.202.0/24
                  172.102.204.0/24
                  172.102.208.0/23
                  172.102.212.0-172.102.214.255
                  172.102.217.0/24
                  172.102.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:05:88:58:da:a2:37:f4:96:68:b9:b2:d2:b6:c5:83:80:1f:
         76:f2:c4:1d:93:e0:94:a0:74:f7:6d:20:f4:35:ce:49:29:a3:
         6b:b3:c7:1e:4c:1c:a4:60:5a:d8:80:59:d0:bb:3c:16:59:b0:
         cd:c7:01:c7:f3:2c:a5:43:31:5b:66:c5:b3:fd:4b:da:4c:3e:
         1a:0f:39:e0:49:10:89:ac:2f:0a:f8:b2:f6:a3:1d:49:02:46:
         87:2e:87:c7:a8:5c:5b:98:81:17:49:fb:38:8f:76:3e:65:1b:
         f3:56:01:24:a2:81:6d:11:55:15:1e:f3:30:9f:f4:9d:4e:52:
         71:f8:41:6c:6f:a2:30:b2:fa:67:83:62:56:17:39:88:21:57:
         16:93:f0:d4:6c:d5:b1:21:b7:db:31:6a:5c:06:de:e4:39:37:
         d0:1b:0c:c1:fe:2a:b5:ef:c6:f5:0d:ba:09:29:81:51:47:83:
         eb:a1:2c:31:cc:99:c8:58:eb:15:ab:62:f8:5b:2b:01:b0:2b:
         37:11:c1:b9:2d:20:a9:7c:1b:e9:46:93:07:a5:63:09:eb:2f:
         d4:8c:80:ea:7a:b2:73:a8:00:09:80:76:10:56:fe:09:09:a0:
         ee:c3:d9:92:a6:52:ea:38:e5:46:53:35:39:b1:17:5a:07:cd:
         51:70:af:f2
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWD10AyktEmBp7tGsdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTIxMTAxNTA0MDAwMFoXDTMwMDcwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjBhNmZiZjgtODczNC00OTdlLWI0MDgtMDlmMjg3M2E5NmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMFbBU17QSL23wTUSYEtKxEh/oLsR0IfyCth
8hhhnoWi2L8BHPFadKxyJRXNcenPzeJQ2BE9gEZqMkJgdN7jJrW1bkbJjhNbDl16
ZO/4mTvD0OlsFklp6We5AccwVH8+vyGk4ciwQ7bJNYpSDyKwWI1Rl/R7iucko6vM
nuQRNpJ34tQ/fZ7uYQwhSRTJr79MKpJWUkXzIZBu0pIaftlzBdLqMksZdnC8Vtoe
+nEmSlLed1HEe/8B5fHlv8GYRWHnfWLp3pEd/9gi6lMK9Qqxe2Qq/Cl7ssViCo1j
Lqx+r76y8M+qCHZSm/6PFKLob0jz+sASHuG95j/xm9QnKqHoQwIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFBsn6/89aH6OdmX+S0pTuw3VrefNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZWUyMTAyZmEtY2Q1MS0z
ODk1LTk3MmQtMDhhMTRkZmMyNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQDrGbAAwQA
rGbKAwQArGbMAwQBrGbQMAwDBAKsZtQDBACsZtYDBACsZtkDBAKsZtwwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAhwWIWNqiN/SWaLmy0rbFg4AfdvLEHZPglKB0920g9DXOSSmja7PHHkwcpGBa
2IBZ0Ls8FlmwzccBx/MspUMxW2bFs/1L2kw+Gg854EkQiawvCviy9qMdSQJGhy6H
x6hcW5iBF0n7OI92PmUb81YBJKKBbRFVFR7zMJ/0nU5ScfhBbG+iMLL6Z4NiVhc5
iCFXFpPw1GzVsSG32zFqXAbe5Dk30BsMwf4qte/G9Q26CSmBUUeD66EsMcyZyFjr
Fati+FsrAbArNxHBuS0gqXwb6UaTB6VjCesv1IyA6nqyc6gACYB2EFb+CQmg7sPZ
kqZS6jjlRlM1ObEXWgfNUXCv8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:10 2024 by rpki-client on console-ams.rpki-client.org