Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80d59161-58b9-3f90-905c-afb3e66b3bed.roa
File:                     80d59161-58b9-3f90-905c-afb3e66b3bed.roa (raw, json)
Hash identifier:          KtV84VWj5NeykErWw4e+oiOez2pAOPKSpGSnSGnm+r0=
Subject key identifier:   EF:89:6B:D6:97:7A:0C:D1:9F:9A:6C:98:22:AD:E1:43:12:BE:97:B5
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858466BC48B0A1590EB48A1C5CBC0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80d59161-58b9-3f90-905c-afb3e66b3bed.roa
Signing time:             Thu 04 Jul 2024 01:00:26 +0000
ROA not before:           Thu 04 Jul 2024 01:00:26 +0000
ROA not after:            Wed 02 Oct 2024 01:00:26 +0000
asID:                     134365
IP address blocks:        107.151.242.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 08:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:c4:8b:0a:15:90:eb:48:a1:c5:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul  4 01:00:26 2024 GMT
            Not After : Oct  2 01:00:26 2024 GMT
        Subject: CN=6d346e92-dbf7-4872-be3d-3e0b95d48d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:8c:6f:7a:1d:2d:32:36:43:99:68:95:3b:
                    6c:f8:8c:b2:60:55:6d:93:08:94:84:74:76:1a:5c:
                    7a:0f:44:1b:97:76:c1:92:09:df:2c:f1:9d:e8:66:
                    cb:56:56:91:79:c2:df:62:33:77:d3:fa:e5:8e:18:
                    3a:76:57:d0:be:7d:06:28:d0:f3:f0:08:4d:9b:5d:
                    c0:50:8b:0b:26:17:28:4b:50:93:85:a4:ca:73:c9:
                    1e:01:ae:c7:98:42:35:8c:1a:94:09:3f:60:ab:f0:
                    51:3f:7d:91:5c:9b:fb:8c:71:a8:54:1f:e2:d7:98:
                    0c:ff:ce:03:77:c2:5b:45:93:3f:d4:43:4c:20:ca:
                    8f:18:df:47:d6:92:f1:0d:ae:b4:37:88:f7:77:3a:
                    8e:08:3f:28:e1:0f:f5:35:fa:9c:2e:1f:83:51:57:
                    04:64:0a:ed:4f:95:65:08:6b:cb:a3:52:17:8a:48:
                    30:79:67:b7:6c:07:7d:e1:9e:46:9e:5d:ef:2f:81:
                    32:49:f6:d3:d8:ce:18:3c:51:c8:e6:f1:55:2a:9a:
                    9c:3d:5a:2c:82:10:ce:ac:7b:c8:ba:96:ac:9b:ed:
                    9a:14:d8:ec:63:2d:5d:94:f0:7f:a0:43:dd:c4:b2:
                    17:dc:9a:05:8d:36:2a:a1:94:9e:33:64:c7:06:5c:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:6B:D6:97:7A:0C:D1:9F:9A:6C:98:22:AD:E1:43:12:BE:97:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80d59161-58b9-3f90-905c-afb3e66b3bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:27:72:cf:06:ba:c4:8a:c4:16:5c:d8:c9:54:36:66:02:
         e1:db:35:58:b5:32:de:5b:63:44:8e:ad:7a:d3:fe:71:9f:bb:
         5f:81:bb:81:77:77:d5:7c:bb:4d:0a:3d:77:f2:39:4c:9b:03:
         bf:4a:10:da:85:cb:75:02:b7:d1:8b:a9:39:29:67:0b:35:93:
         be:82:2c:f8:e5:6d:74:f4:1b:59:d3:39:e8:f3:a4:22:52:57:
         00:da:2d:57:55:c6:cb:de:70:85:e6:73:f7:ef:01:ed:6d:6e:
         dc:50:52:05:f1:2e:21:e4:18:69:eb:16:79:ea:11:ec:9d:c4:
         1c:c5:79:84:25:95:b1:09:e6:4d:b1:5d:2c:96:46:72:a1:eb:
         85:7d:5c:fa:ad:a9:0f:db:99:05:35:ac:7c:5f:cd:1e:3b:d0:
         e2:15:c6:f7:8d:29:84:fc:d6:9c:0d:61:b4:f8:6a:bc:12:57:
         cc:8a:6f:3a:25:ff:65:b2:f4:81:ff:df:59:08:20:67:d8:38:
         97:df:63:0c:b6:3d:71:3b:6c:e4:14:d7:9c:67:69:14:e2:38:
         36:8a:f3:d9:94:d0:25:5c:69:2d:5b:86:5c:0d:3f:eb:69:f8:
         dc:f1:1f:f2:50:86:a6:17:2c:df:48:39:93:06:02:03:3a:b3:
         59:23:e1:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZrxIsKFZDrSKHFy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MDcwNDAxMDAyNloXDTI0MTAwMjAxMDAyNlowLzEtMCsGA1UEAxMk
NmQzNDZlOTItZGJmNy00ODcyLWJlM2QtM2UwYjk1ZDQ4ZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8mMb3odLTI2Q5lolTts+IyyYFVtkwiUhHR2
Glx6D0Qbl3bBkgnfLPGd6GbLVlaRecLfYjN30/rljhg6dlfQvn0GKNDz8AhNm13A
UIsLJhcoS1CThaTKc8keAa7HmEI1jBqUCT9gq/BRP32RXJv7jHGoVB/i15gM/84D
d8JbRZM/1ENMIMqPGN9H1pLxDa60N4j3dzqOCD8o4Q/1NfqcLh+DUVcEZArtT5Vl
CGvLo1IXikgweWe3bAd94Z5Gnl3vL4EySfbT2M4YPFHI5vFVKpqcPVosghDOrHvI
upasm+2aFNjsYy1dlPB/oEPdxLIX3JoFjTYqoZSeM2THBlzL5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+Ja9aXegzRn5psmCKt4UMSvpe1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODBkNTkxNjEtNThiOS0z
ZjkwLTkwNWMtYWZiM2U2NmIzYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBcJ3LPBrrEisQWXNjJVDZmAuHbNVi1Mt5bY0SOrXrT/nGfu1+Bu4F3
d9V8u00KPXfyOUybA79KENqFy3UCt9GLqTkpZws1k76CLPjlbXT0G1nTOejzpCJS
VwDaLVdVxsvecIXmc/fvAe1tbtxQUgXxLiHkGGnrFnnqEeydxBzFeYQllbEJ5k2x
XSyWRnKh64V9XPqtqQ/bmQU1rHxfzR470OIVxveNKYT81pwNYbT4arwSV8yKbzol
/2Wy9IH/31kIIGfYOJffYwy2PXE7bOQU15xnaRTiODaK89mU0CVcaS1bhlwNP+tp
+NzxH/JQhqYXLN9IOZMGAgM6s1kj4aI=
-----END CERTIFICATE-----
Generated at Sat Sep 7 09:50:25 2024 by rpki-client on console-ams.rpki-client.org