Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa
File:                     f50de566-08ba-3fb6-a774-fa9efedc0f88.roa (raw, json)
Hash identifier:          UZbihBcy4wl+yuM7KeMJfvTvOwN1l/24BBZ7aFp0Jm4=
Subject key identifier:   68:3D:4A:D3:90:A8:00:86:C1:DC:34:1F:80:65:A1:9E:F7:48:45:A9
Certificate issuer:       /CN=2e377161-8215-4a85-9659-ebe2f78f6029
Certificate serial:       010D0C9F432858473393568EBA8F5211B0843F00
Authority key identifier: 01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa
Signing time:             Fri 13 Sep 2024 14:43:03 +0000
ROA not before:           Fri 13 Sep 2024 14:43:03 +0000
ROA not after:            Thu 12 Dec 2024 15:43:03 +0000
asID:                     26873
IP address blocks:        69.89.160.0/20 maxlen: 20
                          69.164.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 15:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:93:56:8e:ba:8f:52:11:b0:84:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e377161-8215-4a85-9659-ebe2f78f6029
        Validity
            Not Before: Sep 13 14:43:03 2024 GMT
            Not After : Dec 12 15:43:03 2024 GMT
        Subject: CN=1abfac4e-73aa-4c56-97ca-11120bd89bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:7e:c5:7b:41:33:71:49:a3:f2:2c:af:27:
                    61:f7:e5:98:37:2d:69:3d:aa:0c:51:2c:17:62:b8:
                    80:da:fe:3b:79:af:9c:01:7b:7b:73:0e:bc:18:1b:
                    1e:8e:3e:67:e8:a8:15:f4:19:bb:18:06:ad:06:47:
                    39:4a:a6:e6:86:20:6b:03:a3:64:93:2f:b7:40:87:
                    6f:27:4c:ab:23:39:f4:51:3b:a4:a5:81:8f:aa:17:
                    01:1b:a4:3a:78:5f:cf:97:e5:ee:9e:ec:4a:87:cb:
                    27:42:94:09:03:e4:c1:1a:d9:72:3d:d0:0a:d7:a6:
                    77:1f:3a:4b:90:77:25:2f:0f:20:4b:a3:60:c8:35:
                    17:34:52:b7:65:54:ae:e1:2b:48:9b:fd:86:17:10:
                    00:87:1a:11:d1:5a:52:22:2e:8b:0a:fc:3c:39:d6:
                    6e:21:b5:05:4c:c7:87:e5:88:44:69:26:20:65:b6:
                    22:3a:a7:51:0b:a8:16:78:74:9f:80:22:63:10:d7:
                    3b:d8:13:be:4d:d8:c6:d6:62:22:32:7b:57:41:97:
                    3a:35:18:b9:e2:01:46:70:4a:6e:39:fe:fc:68:66:
                    a6:a7:04:dc:94:4d:ea:ca:21:de:13:de:dc:97:2a:
                    6c:42:63:32:fa:5e:5f:47:8d:53:c8:bb:e9:6b:83:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:4A:D3:90:A8:00:86:C1:DC:34:1F:80:65:A1:9E:F7:48:45:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/2e377161-8215-4a85-9659-ebe2f78f6029.crl

            X509v3 Authority Key Identifier:
                keyid:01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.160.0/20
                  69.164.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:e3:5f:5b:5e:dd:19:46:16:db:75:c7:4f:07:08:74:ef:
         9a:21:26:da:df:81:b4:b9:fb:5d:80:22:a8:8c:5e:70:00:7d:
         ac:00:e8:65:be:84:70:60:35:cc:f5:5b:cc:d8:2e:85:d8:dc:
         7d:72:9f:51:6b:23:f5:bd:43:58:15:5a:03:03:35:e7:3d:50:
         7d:11:fc:e5:be:83:62:d9:f8:2a:4c:d7:78:38:98:db:f5:b6:
         37:08:1f:03:b4:df:ca:7c:ff:30:de:49:83:e3:af:d3:4b:ff:
         4a:f1:f3:b5:56:77:64:2b:e6:02:02:f7:1e:dc:6b:91:58:53:
         93:12:29:95:78:69:ae:37:90:35:f4:7e:98:7a:f2:4b:7b:82:
         ba:e2:f1:85:2d:b6:d0:96:59:de:a1:ad:e8:ab:67:90:b1:18:
         87:ba:60:6f:9e:2b:c6:3b:bd:95:dd:95:1d:7e:e1:6e:08:32:
         72:4e:64:5a:e1:1b:2e:42:c6:47:19:0d:5b:16:59:57:fc:f4:
         88:5d:62:51:d7:8f:5e:f2:57:71:d1:2b:82:a0:82:f4:fc:80:
         05:87:ab:b0:0f:55:c8:4b:c8:86:0a:6c:7a:69:df:b7:c3:a4:
         b1:c7:ee:c3:8d:3a:9b:95:1e:c9:06:da:c0:bb:aa:06:98:91:
         cd:9c:90:07
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEczk1aOuo9SEbCEPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmUzNzcxNjEtODIxNS00YTg1LTk2NTktZWJlMmY3OGY2
MDI5MB4XDTI0MDkxMzE0NDMwM1oXDTI0MTIxMjE1NDMwM1owLzEtMCsGA1UEAxMk
MWFiZmFjNGUtNzNhYS00YzU2LTk3Y2EtMTExMjBiZDg5YmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocx+xXtBM3FJo/Isrydh9+WYNy1pPaoMUSwX
YriA2v47ea+cAXt7cw68GBsejj5n6KgV9Bm7GAatBkc5SqbmhiBrA6Nkky+3QIdv
J0yrIzn0UTukpYGPqhcBG6Q6eF/Pl+XunuxKh8snQpQJA+TBGtlyPdAK16Z3HzpL
kHclLw8gS6NgyDUXNFK3ZVSu4StIm/2GFxAAhxoR0VpSIi6LCvw8OdZuIbUFTMeH
5YhEaSYgZbYiOqdRC6gWeHSfgCJjENc72BO+TdjG1mIiMntXQZc6NRi54gFGcEpu
Of78aGampwTclE3qyiHeE97clypsQmMy+l5fR41TyLvpa4N5YQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGg9StOQqACGwdw0H4BloZ73SEWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTM3
NzE2MS04MjE1LTRhODUtOTY1OS1lYmUyZjc4ZjYwMjkvZjUwZGU1NjYtMDhiYS0z
ZmI2LWE3NzQtZmE5ZWZlZGMwZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmUzNzcxNjEtODIxNS00YTg1LTk2
NTktZWJlMmY3OGY2MDI5LzJlMzc3MTYxLTgyMTUtNGE4NS05NjU5LWViZTJmNzhm
NjAyOS5jcmwwHwYDVR0jBBgwFoAUAW5m0ycXgU6/7enZPdxqsqkX9kowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTM3NzE2MS04MjE1LTRhODUtOTY1OS1lYmUy
Zjc4ZjYwMjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERVmgAwQE
RaTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABwP419bXt0ZRhbbdcdPBwh075ohJtrfgbS5+12AIqiMXnAA
fawA6GW+hHBgNcz1W8zYLoXY3H1yn1FrI/W9Q1gVWgMDNec9UH0R/OW+g2LZ+CpM
13g4mNv1tjcIHwO038p8/zDeSYPjr9NL/0rx87VWd2Qr5gIC9x7ca5FYU5MSKZV4
aa43kDX0fph68kt7grri8YUtttCWWd6hreirZ5CxGIe6YG+eK8Y7vZXdlR1+4W4I
MnJOZFrhGy5CxkcZDVsWWVf89IhdYlHXj17yV3HRK4KggvT8gAWHq7APVchLyIYK
bHpp37fDpLHH7sONOpuVHskG2sC7qgaYkc2ckAc=
-----END CERTIFICATE-----
Generated at Fri Sep 13 18:17:53 2024 by rpki-client on console-ams.rpki-client.org