Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74b1d7bf-341a-3501-8091-5c7d9f2b520a.roa
File:                     74b1d7bf-341a-3501-8091-5c7d9f2b520a.roa (raw, json)
Hash identifier:          /6KTQ4HrJV5CKqBBOO+zpDVjqJTyRMsghEBpex73pes=
Subject key identifier:   E2:DF:CB:6B:C9:32:D4:C8:6A:7B:E9:E3:64:D8:69:3A:25:AB:32:A5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB6342494796A59F3AFBC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74b1d7bf-341a-3501-8091-5c7d9f2b520a.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     394976
IP address blocks:        209.133.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 15:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:63:42:49:47:96:a5:9f:3a:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=37c2a25a-0471-4c34-b0b8-6a0d6dffff44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:8d:72:cf:fd:c4:cd:1c:b5:ad:61:b1:77:
                    60:4a:89:81:46:84:bc:17:96:aa:a9:ae:c4:e6:ea:
                    11:78:2d:94:dc:ea:e8:b3:cc:9b:11:6b:28:94:2d:
                    45:97:6f:be:36:33:17:1b:27:94:37:0e:d5:6e:f9:
                    6a:ac:8f:e2:89:9b:85:12:c9:dd:52:d6:a7:ea:72:
                    de:73:e9:47:10:d5:0f:a6:c1:23:d3:df:7f:1a:0c:
                    87:e1:85:39:f0:f4:aa:22:84:25:21:80:a4:40:2b:
                    4b:df:5a:30:bc:df:26:89:16:f0:d2:37:df:ad:64:
                    b0:89:d6:ef:1e:59:51:2d:0a:ec:15:ff:0d:70:f8:
                    4a:68:76:c9:e8:5d:81:47:c4:8a:da:d7:a0:e8:a4:
                    21:fc:5e:5c:72:c6:37:73:b2:59:30:9f:44:f0:17:
                    f3:a6:46:34:e9:f9:ee:7f:33:ec:d3:18:49:8f:20:
                    2f:90:32:a7:af:21:56:f7:34:79:5e:4e:86:74:68:
                    eb:44:31:ed:0c:be:22:f4:07:a5:54:4a:e4:c2:a1:
                    db:6f:4a:4a:ec:d6:a0:e4:56:3e:3e:12:76:a9:ce:
                    34:e0:05:60:dc:20:fd:2c:ff:df:ab:73:7c:b5:47:
                    2a:dd:f8:4c:cc:8d:c7:55:f0:e5:60:12:0b:d8:42:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:CB:6B:C9:32:D4:C8:6A:7B:E9:E3:64:D8:69:3A:25:AB:32:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74b1d7bf-341a-3501-8091-5c7d9f2b520a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:dc:f1:5d:82:8d:57:b0:84:6f:85:59:e9:8b:06:26:31:
         1f:ea:03:69:61:af:d6:33:c5:26:cd:08:0c:19:9e:9b:95:ea:
         f2:2b:29:e9:55:62:6a:1e:13:19:69:7d:05:d4:a8:9a:17:fa:
         bf:9f:68:03:fb:d5:97:b3:24:86:25:38:67:2c:fe:05:12:34:
         ac:80:b0:16:87:a4:22:f5:9f:04:61:1f:55:fa:1b:69:62:da:
         46:c0:7e:1c:a2:f2:e4:79:e5:d4:a5:e5:f3:7f:79:07:3e:44:
         9b:17:cb:d4:e5:dc:4e:cf:1b:a1:c2:57:8e:0d:79:1d:35:86:
         c2:fc:88:eb:ae:e1:3d:0b:50:93:27:f9:12:8a:f3:cb:a5:31:
         59:73:b6:82:01:7c:54:ff:7f:3d:3b:5b:a4:67:cd:30:6e:25:
         f8:94:07:9b:66:33:8e:85:9a:92:83:ad:cd:43:be:51:f0:39:
         32:20:9d:f7:86:b2:a2:8b:0e:b2:a6:6d:95:76:0e:33:1d:d4:
         5e:37:85:1b:2e:b1:75:20:94:c4:f7:b9:f4:5a:67:ef:27:02:
         3d:16:b3:13:6c:43:c4:5c:79:81:30:76:c1:90:49:e6:68:27:
         d1:af:90:db:f1:97:c3:08:8b:97:af:b9:d9:7a:b3:93:26:0a:
         6b:50:6f:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdG62NCSUeWpZ86+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk
MzdjMmEyNWEtMDQ3MS00YzM0LWIwYjgtNmEwZDZkZmZmZjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zyNcs/9xM0cta1hsXdgSomBRoS8F5aqqa7E
5uoReC2U3Oros8ybEWsolC1Fl2++NjMXGyeUNw7VbvlqrI/iiZuFEsndUtan6nLe
c+lHENUPpsEj099/GgyH4YU58PSqIoQlIYCkQCtL31owvN8miRbw0jffrWSwidbv
HllRLQrsFf8NcPhKaHbJ6F2BR8SK2teg6KQh/F5ccsY3c7JZMJ9E8BfzpkY06fnu
fzPs0xhJjyAvkDKnryFW9zR5Xk6GdGjrRDHtDL4i9AelVErkwqHbb0pK7Nag5FY+
PhJ2qc404AVg3CD9LP/fq3N8tUcq3fhMzI3HVfDlYBIL2EJZ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLfy2vJMtTIanvp42TYaTolqzKlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNzRiMWQ3YmYtMzQxYS0z
NTAxLTgwOTEtNWM3ZDlmMmI1MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YV0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBb3PFdgo1XsIRvhVnpiwYmMR/qA2lhr9YzxSbNCAwZnpuV6vIrKelV
YmoeExlpfQXUqJoX+r+faAP71ZezJIYlOGcs/gUSNKyAsBaHpCL1nwRhH1X6G2li
2kbAfhyi8uR55dSl5fN/eQc+RJsXy9Tl3E7PG6HCV44NeR01hsL8iOuu4T0LUJMn
+RKK88ulMVlztoIBfFT/fz07W6RnzTBuJfiUB5tmM46FmpKDrc1DvlHwOTIgnfeG
sqKLDrKmbZV2DjMd1F43hRsusXUglMT3ufRaZ+8nAj0WsxNsQ8RceYEwdsGQSeZo
J9GvkNvxl8MIi5evudl6s5MmCmtQb5A=
-----END CERTIFICATE-----
Generated at Fri Nov 1 17:59:44 2024 by rpki-client on console-fra.rpki-client.org