Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/81a6d626-277e-3007-abae-886f76080198.roa
File:                     81a6d626-277e-3007-abae-886f76080198.roa (raw, json)
Hash identifier:          5OhVSsF51mMilT3aA6bE57oHiPCWcNNQMa+YLmQTfQc=
Subject key identifier:   8E:8F:B3:E3:F2:F6:E0:AF:78:64:9E:CE:EB:36:97:DF:B0:9E:F6:BE
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F432858470472AC328A32D348BD0706E0
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/81a6d626-277e-3007-abae-886f76080198.roa
Signing time:             Tue 27 Aug 2024 17:34:14 +0000
ROA not before:           Tue 27 Aug 2024 17:34:14 +0000
ROA not after:            Mon 25 Nov 2024 18:34:14 +0000
asID:                     16611
IP address blocks:        23.131.184.0/24 maxlen: 24
                          23.131.185.0/24 maxlen: 24
                          149.112.101.0/24 maxlen: 24
                          2606:ae40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 02:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:72:ac:32:8a:32:d3:48:bd:07:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Aug 27 17:34:14 2024 GMT
            Not After : Nov 25 18:34:14 2024 GMT
        Subject: CN=aa0ae99e-412e-44ff-862c-78c3ef832919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:77:16:08:7a:81:a7:08:fd:37:0f:e4:00:
                    35:c1:64:b1:20:4e:0d:13:2d:2f:47:b1:85:bf:3a:
                    22:0f:80:41:5f:ea:9e:78:f5:3d:53:83:f0:7f:a9:
                    97:40:dc:0b:33:9c:b7:a1:66:90:bf:a6:89:d2:62:
                    ae:37:56:df:79:d0:92:69:61:9a:ed:ea:f0:72:1f:
                    54:26:e5:1b:01:23:8e:33:6b:1c:f1:35:d0:10:fb:
                    ee:29:89:cc:0d:27:3b:0f:09:2d:07:9b:11:e3:65:
                    f5:68:52:66:a2:37:b7:c2:41:8d:97:af:a8:7d:7c:
                    de:c3:fe:8b:c4:18:5a:b2:af:9a:da:21:27:1c:62:
                    76:f2:ac:c4:5c:f3:56:00:a2:dd:a6:23:b3:4b:73:
                    47:45:d3:14:e7:3e:0c:35:59:b4:ac:7c:f6:5c:25:
                    28:b7:69:ad:49:40:11:90:4b:88:1b:73:5d:a0:89:
                    42:03:cd:7c:08:b9:98:d0:c3:db:37:e6:4f:b7:b3:
                    ae:31:1d:85:a3:79:1a:71:dd:2a:ce:0c:b6:90:b0:
                    f6:79:4f:2f:eb:50:cb:ea:6e:47:93:3a:be:d9:dc:
                    09:3e:42:46:21:52:c4:9f:59:3f:b2:b8:76:83:a1:
                    43:94:0d:63:ac:4d:44:76:a4:32:34:ff:13:5e:1e:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:B3:E3:F2:F6:E0:AF:78:64:9E:CE:EB:36:97:DF:B0:9E:F6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/81a6d626-277e-3007-abae-886f76080198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.184.0/23
                  149.112.101.0/24
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:aa:a9:8a:19:d0:99:0d:96:f4:5c:50:fc:e9:f8:b7:5b:
         2c:21:cd:d9:52:7f:5e:a1:22:4d:d9:9a:1e:45:8b:55:50:ae:
         94:e9:cb:0a:b8:ca:e2:7c:19:6f:93:d3:30:70:15:2e:82:c2:
         65:15:91:bb:ab:96:06:dd:68:48:a1:62:99:d7:1f:70:2d:50:
         92:33:37:c0:9d:82:0a:7f:1c:72:59:c7:13:37:77:01:b4:d7:
         c8:6c:1e:5f:8b:b4:7e:e5:65:d3:09:ad:c7:ca:cf:38:13:03:
         90:b5:b9:a8:9d:ec:a8:18:36:61:c9:d9:bc:67:4b:a2:c7:63:
         bd:77:a0:2f:16:6f:35:74:6d:f0:2c:b3:e2:47:f2:e8:e9:00:
         f7:98:3a:bf:d1:7f:cd:d2:87:62:e6:a0:34:1f:5a:fa:9b:f2:
         da:6f:8d:11:99:d2:41:6c:3b:62:20:63:e6:a6:61:d0:dd:53:
         b7:ec:b1:80:78:d4:6f:7e:68:b5:ec:ea:a3:ff:74:25:0d:4d:
         da:77:f7:88:6b:48:e7:b6:d3:f2:ad:e2:8d:0f:3b:a8:45:6c:
         71:5c:61:f3:fd:b2:51:78:49:d5:ec:05:e9:1b:af:cb:93:80:
         dc:66:49:f0:42:9c:7c:60:ab:7a:7d:b4:03:85:c8:e3:e1:99:
         cc:19:d7:17
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEcEcqwyijLTSL0HBuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI0MDgyNzE3MzQxNFoXDTI0MTEyNTE4MzQxNFowLzEtMCsGA1UEAxMk
YWEwYWU5OWUtNDEyZS00NGZmLTg2MmMtNzhjM2VmODMyOTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigp3Fgh6gacI/TcP5AA1wWSxIE4NEy0vR7GF
vzoiD4BBX+qeePU9U4Pwf6mXQNwLM5y3oWaQv6aJ0mKuN1bfedCSaWGa7erwch9U
JuUbASOOM2sc8TXQEPvuKYnMDSc7DwktB5sR42X1aFJmoje3wkGNl6+ofXzew/6L
xBhasq+a2iEnHGJ28qzEXPNWAKLdpiOzS3NHRdMU5z4MNVm0rHz2XCUot2mtSUAR
kEuIG3NdoIlCA818CLmY0MPbN+ZPt7OuMR2Fo3kacd0qzgy2kLD2eU8v61DL6m5H
kzq+2dwJPkJGIVLEn1k/srh2g6FDlA1jrE1EdqQyNP8TXh608wIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFI6Ps+Py9uCveGSezus2l9+wnva+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvODFhNmQ2MjYtMjc3ZS0z
MDA3LWFiYWUtODg2Zjc2MDgwMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBF4O4AwQA
lXBlMA0EAgACMAcDBQAmBq5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAFsqqmKGdCZDZb0XFD86fi3Wywh
zdlSf16hIk3Zmh5Fi1VQrpTpywq4yuJ8GW+T0zBwFS6CwmUVkburlgbdaEihYpnX
H3AtUJIzN8Cdggp/HHJZxxM3dwG018hsHl+LtH7lZdMJrcfKzzgTA5C1uaid7KgY
NmHJ2bxnS6LHY713oC8WbzV0bfAss+JH8ujpAPeYOr/Rf83Sh2LmoDQfWvqb8tpv
jRGZ0kFsO2IgY+amYdDdU7fssYB41G9+aLXs6qP/dCUNTdp394hrSOe20/Kt4o0P
O6hFbHFcYfP9slF4SdXsBekbr8uTgNxmSfBCnHxgq3p9tAOFyOPhmcwZ1xc=
Generated at Sat Nov 2 03:41:12 2024 by rpki-client on console-fra.rpki-client.org