Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/7e5a93b6-2f94-310b-ac17-4483461d2004.roa
File:                     7e5a93b6-2f94-310b-ac17-4483461d2004.roa (raw, json)
Hash identifier:          HWUXCo/hMo/QaK4gk0ii2wDY7jdX0c2XwZxWRgT+M6g=
Subject key identifier:   A7:38:02:37:7C:7D:F7:27:23:8A:67:25:E9:32:11:46:58:3A:14:88
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F43285846943F97221D2D5EF9FB235680
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/7e5a93b6-2f94-310b-ac17-4483461d2004.roa
Signing time:             Thu 18 Jul 2024 13:00:33 +0000
ROA not before:           Thu 18 Jul 2024 13:00:33 +0000
ROA not after:            Wed 16 Oct 2024 13:00:33 +0000
asID:                     833
IP address blocks:        165.140.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 18:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:3f:97:22:1d:2d:5e:f9:fb:23:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Jul 18 13:00:33 2024 GMT
            Not After : Oct 16 13:00:33 2024 GMT
        Subject: CN=a6517e91-1ff4-4a46-8eff-7df69e505614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:ef:3f:a8:4f:44:f4:47:f0:86:38:24:11:
                    fd:e7:a7:23:74:68:96:07:a2:37:48:81:17:7b:1b:
                    8d:d4:40:70:d3:b3:00:14:56:46:65:b2:72:6f:46:
                    a3:0c:d9:90:e4:1d:9a:3d:1a:d9:f8:22:20:e0:5f:
                    6e:d3:a9:60:83:82:50:68:04:7b:19:a3:9d:a8:75:
                    45:62:4e:17:74:bc:c2:a0:68:8f:ed:2b:b3:4b:28:
                    d3:70:07:9f:b2:68:7e:96:9d:c6:f5:e7:b8:70:6c:
                    ae:50:f9:e5:c2:ea:f1:ce:26:50:12:50:9d:2e:d8:
                    9a:48:4c:53:d2:85:af:5b:b0:59:19:97:d4:ea:40:
                    af:f8:ea:69:db:35:f0:cc:7f:69:d7:f5:79:b2:f8:
                    28:01:bc:67:cf:02:27:d8:de:0d:3e:71:f2:d2:1d:
                    b9:2f:4a:a2:7d:6f:79:e0:e4:65:6e:76:2d:30:5c:
                    7f:65:79:e1:4c:82:35:87:7c:2b:fd:98:48:91:2f:
                    77:dd:99:63:fd:39:db:5a:b2:3a:8a:67:e6:62:68:
                    16:33:c7:bb:ac:95:f8:ee:16:eb:14:0f:7c:22:b2:
                    3c:d8:37:46:b8:f2:15:a4:6b:2a:02:86:38:99:a4:
                    a7:87:61:b2:ca:f5:95:cb:0e:c5:0b:75:7e:14:2b:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:02:37:7C:7D:F7:27:23:8A:67:25:E9:32:11:46:58:3A:14:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/7e5a93b6-2f94-310b-ac17-4483461d2004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:09:23:b2:b2:74:e5:5f:3e:84:45:66:63:39:50:c0:84:16:
         70:05:91:d4:7e:3e:cf:c7:12:1e:fd:8d:53:20:00:2f:65:80:
         c9:30:0f:df:e2:83:ea:cd:66:3f:e4:7d:b8:2e:84:37:09:38:
         cb:45:5e:50:fe:3b:40:ae:28:aa:f8:b2:a0:77:25:53:c2:db:
         fa:17:f9:66:e6:da:89:f1:f0:33:00:74:00:31:e6:0b:04:d9:
         77:19:4e:38:d5:40:c1:67:5a:1b:c7:a4:9f:0c:6c:dc:1d:6c:
         25:cf:7e:7d:0b:ff:29:e9:82:a0:b0:f1:59:00:11:24:b2:b4:
         a6:31:a3:88:76:7b:69:1e:53:d6:0c:75:31:a3:d6:93:81:94:
         a2:ca:db:95:5e:38:68:39:bc:34:1e:67:46:3c:46:39:3c:f1:
         5d:4f:93:8c:98:6d:67:ea:00:bf:02:51:a6:a7:ac:91:89:45:
         47:e6:7f:7d:f4:91:83:e5:57:b4:56:9f:58:2a:e7:b7:fd:fc:
         ff:fb:b6:99:29:28:db:10:6a:37:75:44:19:6e:04:d5:cc:d3:
         d8:1e:a6:89:74:cd:4c:4a:3a:87:bc:61:fb:fc:d7:18:3a:96:
         b2:48:5e:fd:90:b3:a9:b0:83:d8:de:ee:fe:fc:23:01:10:e3:
         7b:1d:2d:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaUP5ciHS1e+fsjVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4
YzUwMB4XDTI0MDcxODEzMDAzM1oXDTI0MTAxNjEzMDAzM1owLzEtMCsGA1UEAxMk
YTY1MTdlOTEtMWZmNC00YTQ2LThlZmYtN2RmNjllNTA1NjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SbvP6hPRPRH8IY4JBH956cjdGiWB6I3SIEX
exuN1EBw07MAFFZGZbJyb0ajDNmQ5B2aPRrZ+CIg4F9u06lgg4JQaAR7GaOdqHVF
Yk4XdLzCoGiP7SuzSyjTcAefsmh+lp3G9ee4cGyuUPnlwurxziZQElCdLtiaSExT
0oWvW7BZGZfU6kCv+Opp2zXwzH9p1/V5svgoAbxnzwIn2N4NPnHy0h25L0qifW95
4ORlbnYtMFx/ZXnhTII1h3wr/ZhIkS933Zlj/TnbWrI6imfmYmgWM8e7rJX47hbr
FA98IrI82DdGuPIVpGsqAoY4maSnh2GyyvWVyw7FC3V+FCurHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKc4Ajd8ffcnI4pnJekyEUZYOhSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4
ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvN2U1YTkzYjYtMmY5NC0z
MTBiLWFjMTctNDQ4MzQ2MWQyMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk
ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy
OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh
ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIJI7KydOVfPoRFZmM5UMCEFnAFkdR+Ps/HEh79jVMgAC9lgMkwD9/i
g+rNZj/kfbguhDcJOMtFXlD+O0CuKKr4sqB3JVPC2/oX+Wbm2onx8DMAdAAx5gsE
2XcZTjjVQMFnWhvHpJ8MbNwdbCXPfn0L/ynpgqCw8VkAESSytKYxo4h2e2keU9YM
dTGj1pOBlKLK25VeOGg5vDQeZ0Y8Rjk88V1Pk4yYbWfqAL8CUaanrJGJRUfmf330
kYPlV7RWn1gq57f9/P/7tpkpKNsQajd1RBluBNXM09gepol0zUxKOoe8Yfv81xg6
lrJIXv2Qs6mwg9je7v78IwEQ43sdLcw=
-----END CERTIFICATE-----
Generated at Thu Sep 12 20:43:35 2024 by rpki-client on console-ams.rpki-client.org