Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8fc3df7c-ae8d-3d39-a7d6-624f927f0447.roa
File:                     8fc3df7c-ae8d-3d39-a7d6-624f927f0447.roa (raw, json)
Hash identifier:          6E5eilceG5r6PtRvjUiygKdTVMaaCasEO3swW4WoGmI=
Subject key identifier:   9E:10:7F:DA:91:D4:64:6F:8D:BE:78:54:C5:35:98:47:C8:02:58:5B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841CB50B952FCC1BD09766C6340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8fc3df7c-ae8d-3d39-a7d6-624f927f0447.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Fri 08 Aug 2025 04:00:00 +0000
asID:                     18530
IP address blocks:        142.252.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 02:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:cb:50:b9:52:fc:c1:bd:09:76:6c:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug  8 04:00:00 2025 GMT
        Subject: CN=6dab39f1-7cd2-45fa-bc2d-651f7480bf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:2e:a4:af:a8:1a:91:fb:26:61:86:01:b7:
                    ae:56:94:f2:28:c8:93:db:bb:fb:c8:94:da:16:3b:
                    ea:94:30:46:d0:d8:9e:0a:d6:b7:b5:bb:53:0a:b1:
                    38:76:34:a4:46:ee:e7:9d:0f:60:4e:3d:50:44:27:
                    88:25:0d:26:c3:5e:1a:f0:48:09:d8:78:b3:26:4a:
                    aa:c0:d0:b4:78:ec:bf:2b:42:8f:0f:f5:83:c0:fc:
                    eb:8d:d8:e7:3e:30:23:16:e4:64:e1:a8:47:b7:cf:
                    88:7e:5b:3f:2e:77:8f:e3:ef:65:9b:9a:8b:91:32:
                    a8:14:11:5c:59:99:78:8b:dd:ab:ad:a5:62:7c:86:
                    58:c7:2c:45:0a:b0:01:8b:a8:f7:22:af:9e:93:6c:
                    65:6f:33:14:73:27:79:a6:10:c8:fe:52:1b:25:c7:
                    0e:f3:89:eb:0d:b3:f1:7c:82:ff:c3:40:97:24:7f:
                    8c:9f:f7:cc:f1:a8:67:cf:32:b4:ce:ef:81:86:64:
                    c9:9a:ab:2c:25:47:13:0f:fc:7b:24:c0:6b:86:dc:
                    ba:38:96:5b:48:ab:c6:62:d0:6d:c2:64:01:cc:b3:
                    fe:31:59:94:57:51:d0:57:90:76:c9:cb:08:84:c5:
                    61:e6:10:d0:f0:15:a6:1e:46:fa:00:19:b8:7c:d1:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:7F:DA:91:D4:64:6F:8D:BE:78:54:C5:35:98:47:C8:02:58:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8fc3df7c-ae8d-3d39-a7d6-624f927f0447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:13:3a:eb:05:dd:b5:99:46:62:e4:d6:80:f9:b4:14:69:
         03:bf:b0:49:73:29:c3:c2:03:05:7a:97:b7:f0:da:8c:2d:c3:
         4f:91:c0:2a:2a:b0:8d:f1:65:7b:0e:9e:24:31:66:6f:85:d4:
         3c:b2:63:b3:cc:45:14:1a:98:24:14:78:ed:30:a1:42:d4:cb:
         fa:4f:78:e2:b1:8f:12:2c:b3:38:b8:9b:4a:bd:fb:7d:03:e5:
         2e:55:ca:2e:b1:35:cc:d2:22:c1:93:27:33:1a:59:26:9b:e7:
         d4:dc:ab:3a:b1:9c:51:c6:39:67:1b:70:92:8a:2d:93:29:0f:
         31:84:27:85:ed:2a:0e:21:12:b2:e3:31:c0:57:19:a6:79:b2:
         46:99:38:c8:06:34:30:19:0a:f0:f9:0e:0b:58:13:fc:d4:6e:
         77:25:1b:15:ad:ca:6b:3d:78:85:d0:c4:b7:58:b9:3f:ec:0c:
         4e:b3:66:d8:89:c1:31:35:de:8d:7a:07:d3:b3:93:48:66:84:
         32:ec:a0:42:59:1b:68:44:31:ef:dc:6a:74:2b:1f:81:79:25:
         1d:ba:d8:49:56:5b:5a:aa:1a:73:6f:78:09:76:97:d1:e7:a8:
         cf:9b:b9:14:97:f7:7e:91:b0:86:ce:79:f7:25:d3:4b:42:e0:
         4a:f4:a4:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHLULlS/MG9CXZsY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDgwODA0MDAwMFowLzEtMCsGA1UEAxMk
NmRhYjM5ZjEtN2NkMi00NWZhLWJjMmQtNjUxZjc0ODBiZjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl90upK+oGpH7JmGGAbeuVpTyKMiT27v7yJTa
FjvqlDBG0NieCta3tbtTCrE4djSkRu7nnQ9gTj1QRCeIJQ0mw14a8EgJ2HizJkqq
wNC0eOy/K0KPD/WDwPzrjdjnPjAjFuRk4ahHt8+Ifls/LneP4+9lm5qLkTKoFBFc
WZl4i92rraVifIZYxyxFCrABi6j3Iq+ek2xlbzMUcyd5phDI/lIbJccO84nrDbPx
fIL/w0CXJH+Mn/fM8ahnzzK0zu+BhmTJmqssJUcTD/x7JMBrhty6OJZbSKvGYtBt
wmQBzLP+MVmUV1HQV5B2ycsIhMVh5hDQ8BWmHkb6ABm4fNGx9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4Qf9qR1GRvjb54VMU1mEfIAlhbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGZjM2RmN2MtYWU4ZC0z
ZDM5LWE3ZDYtNjI0ZjkyN2YwNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAI+EzrrBd21mUZi5NaA+bQUaQO/sElzKcPCAwV6l7fw2owtw0+RwCoq
sI3xZXsOniQxZm+F1DyyY7PMRRQamCQUeO0woULUy/pPeOKxjxIsszi4m0q9+30D
5S5Vyi6xNczSIsGTJzMaWSab59TcqzqxnFHGOWcbcJKKLZMpDzGEJ4XtKg4hErLj
McBXGaZ5skaZOMgGNDAZCvD5DgtYE/zUbnclGxWtyms9eIXQxLdYuT/sDE6zZtiJ
wTE13o16B9Ozk0hmhDLsoEJZG2hEMe/canQrH4F5JR262ElWW1qqGnNveAl2l9Hn
qM+buRSX936RsIbOefcl00tC4Er0pJg=
-----END CERTIFICATE-----
Generated at Sat Apr 13 03:02:33 2024 by rpki-client on console-fra.rpki-client.org