Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/c6b99452-2ac7-38c0-81a6-0031f6b15e54.roa
File:                     c6b99452-2ac7-38c0-81a6-0031f6b15e54.roa (raw, json)
Hash identifier:          7P7pk1K4ksg6y1Fpr/Sm5ymfA7Yaovd/USamx0pqE4c=
Subject key identifier:   86:D7:54:70:4D:87:B4:A9:83:6C:EC:5D:86:D1:7A:3F:60:95:86:08
Certificate issuer:       /CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
Certificate serial:       010D0C9F432858467E90C3DCA43081D05A532180
Authority key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/c6b99452-2ac7-38c0-81a6-0031f6b15e54.roa
Signing time:             Wed 10 Jul 2024 18:36:33 +0000
ROA not before:           Wed 10 Jul 2024 18:36:33 +0000
ROA not after:            Tue 08 Oct 2024 18:36:33 +0000
asID:                     3356
IP address blocks:        159.212.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 17:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:90:c3:dc:a4:30:81:d0:5a:53:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
        Validity
            Not Before: Jul 10 18:36:33 2024 GMT
            Not After : Oct  8 18:36:33 2024 GMT
        Subject: CN=adaf1367-a8c3-4f63-a66e-c63839857593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:d8:80:57:e1:60:56:57:a3:e6:02:35:79:
                    50:06:5b:85:1e:1c:fd:7f:21:8e:2b:ec:c6:d9:28:
                    84:78:47:e0:4d:84:6a:4f:1b:e1:83:06:24:3b:5c:
                    e7:53:43:be:0b:4c:61:c1:9b:db:9e:18:74:0f:c2:
                    82:3f:01:2f:af:c9:05:e7:4a:43:49:b9:dd:5d:47:
                    24:b3:e7:a8:ea:ae:bd:c1:5f:df:62:d6:a2:d5:fa:
                    fa:d1:50:35:6d:06:8d:85:50:ab:93:d5:ba:17:18:
                    53:fa:09:f5:e8:9b:fd:0a:7c:5a:48:76:d4:37:83:
                    87:e7:d2:d0:75:73:6a:19:1b:15:c0:d5:aa:a7:f0:
                    49:52:1f:5d:cb:90:d1:0f:f2:bb:0a:3a:ff:19:93:
                    9e:2d:8b:97:c2:b6:0f:eb:3c:10:ec:c8:7e:be:17:
                    9e:35:fb:59:fe:93:7b:cc:39:3d:13:ec:ad:44:bf:
                    fb:0f:b1:dc:1b:e7:7d:61:e2:17:58:a3:c4:f9:5f:
                    7a:0b:94:c5:04:81:6a:f7:37:c9:dc:63:77:4a:4a:
                    13:1b:f6:cc:32:a3:6d:d9:26:10:fd:dc:be:04:fe:
                    96:60:c4:d2:eb:ae:f4:d8:60:76:a0:c3:31:d1:34:
                    65:27:e6:94:2f:70:45:e6:96:75:0f:66:5d:50:60:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:54:70:4D:87:B4:A9:83:6C:EC:5D:86:D1:7A:3F:60:95:86:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/c6b99452-2ac7-38c0-81a6-0031f6b15e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl

            X509v3 Authority Key Identifier:
                keyid:FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.212.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:04:8b:a3:b6:e0:0d:db:b7:12:44:68:d3:28:93:53:fe:95:
         4d:cb:68:f6:45:c2:a0:0d:e1:7b:3f:44:8b:c1:8c:18:81:9e:
         fd:e8:f7:f9:31:96:63:cf:57:f4:c0:9c:dd:63:26:39:39:70:
         a5:00:30:0e:dd:a5:19:9b:b5:ba:eb:c8:8d:a4:28:12:9c:f5:
         49:51:3b:54:20:50:01:b5:0f:a7:21:33:8a:a4:9b:6e:0c:34:
         32:71:a3:bb:d8:3c:fd:6b:1d:e2:2a:ba:c4:61:66:e7:eb:5a:
         3c:a0:0a:0c:94:0e:2b:bb:3d:3b:13:2d:58:25:25:24:75:00:
         a3:24:3d:57:6d:6f:82:00:ea:6b:0c:03:de:da:6a:5f:e2:8f:
         c2:87:8f:67:45:b0:36:e3:39:b5:52:75:00:48:d4:f7:43:09:
         ca:11:e2:7b:ac:65:df:f7:f2:84:14:d8:6c:a6:b5:4c:0e:ea:
         fd:07:ae:23:42:2c:1a:19:31:27:cc:a5:12:ec:54:9e:bd:ef:
         8e:3c:64:78:df:34:60:36:11:a3:a8:eb:f0:dc:01:6f:b5:3f:
         45:64:36:a7:67:2d:98:3b:0a:78:fd:41:96:a6:77:60:8d:8c:
         a3:e6:8c:ea:42:f9:9f:43:d6:44:04:a7:1b:06:9a:67:47:d8:
         39:7c:53:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZ+kMPcpDCB0FpTIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhhYmM3ZWQtMGNmNC00NzM1LWI1OGYtZDZlODZmZGEw
ZDk3MB4XDTI0MDcxMDE4MzYzM1oXDTI0MTAwODE4MzYzM1owLzEtMCsGA1UEAxMk
YWRhZjEzNjctYThjMy00ZjYzLWE2NmUtYzYzODM5ODU3NTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ3YgFfhYFZXo+YCNXlQBluFHhz9fyGOK+zG
2SiEeEfgTYRqTxvhgwYkO1znU0O+C0xhwZvbnhh0D8KCPwEvr8kF50pDSbndXUck
s+eo6q69wV/fYtai1fr60VA1bQaNhVCrk9W6FxhT+gn16Jv9CnxaSHbUN4OH59LQ
dXNqGRsVwNWqp/BJUh9dy5DRD/K7Cjr/GZOeLYuXwrYP6zwQ7Mh+vheeNftZ/pN7
zDk9E+ytRL/7D7HcG+d9YeIXWKPE+V96C5TFBIFq9zfJ3GN3SkoTG/bMMqNt2SYQ
/dy+BP6WYMTS66702GB2oMMx0TRlJ+aUL3BF5pZ1D2ZdUGDNpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbXVHBNh7Spg2zsXYbRej9glYYIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80OGFi
YzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZkYTBkOTcvYzZiOTk0NTItMmFjNy0z
OGMwLTgxYTYtMDAzMWY2YjE1ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDhhYmM3ZWQtMGNmNC00NzM1LWI1
OGYtZDZlODZmZGEwZDk3LzQ4YWJjN2VkLTBjZjQtNDczNS1iNThmLWQ2ZTg2ZmRh
MGQ5Ny5jcmwwHwYDVR0jBBgwFoAU/D6E9h//jBvTcrXNsnH2Y3kttkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4
NmZkYTBkOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn9RGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkEi6O24A3btxJEaNMok1P+lU3LaPZFwqAN4Xs/RIvBjBiBnv3o9/kx
lmPPV/TAnN1jJjk5cKUAMA7dpRmbtbrryI2kKBKc9UlRO1QgUAG1D6chM4qkm24M
NDJxo7vYPP1rHeIqusRhZufrWjygCgyUDiu7PTsTLVglJSR1AKMkPVdtb4IA6msM
A97aal/ij8KHj2dFsDbjObVSdQBI1PdDCcoR4nusZd/38oQU2GymtUwO6v0HriNC
LBoZMSfMpRLsVJ697448ZHjfNGA2EaOo6/DcAW+1P0VkNqdnLZg7Cnj9QZamd2CN
jKPmjOpC+Z9D1kQEpxsGmmdH2Dl8U48=
-----END CERTIFICATE-----
Generated at Thu Jul 11 18:51:24 2024 by rpki-client on console-fra.rpki-client.org