Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/7e493645-6ec6-365a-b5fd-862975c112b7.roa
File:                     7e493645-6ec6-365a-b5fd-862975c112b7.roa (raw, json)
Hash identifier:          Rziz6mZTsut8em+p0AahcCtoDm8GKRYPcNJxu6WTQgc=
Subject key identifier:   07:70:5F:87:54:9F:B7:8E:92:87:64:A6:F9:26:C5:D1:5D:7B:EC:B5
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285845131AE4FD5ABE6E6518F63980
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/7e493645-6ec6-365a-b5fd-862975c112b7.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     19437
IP address blocks:        144.168.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e4:fd:5a:be:6e:65:18:f6:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=a0f8c5cc-2078-4037-8046-a5e89629dfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:36:6c:ea:4c:21:2c:23:32:bb:53:36:9f:
                    d5:83:54:bf:12:d2:0d:8e:27:18:2b:7f:dc:44:19:
                    25:da:e2:cc:49:25:d8:5e:0a:ed:73:c1:dc:b7:da:
                    82:49:ac:43:0b:3b:81:5d:ae:c1:68:b0:63:71:76:
                    3d:90:3d:b7:27:e7:49:d7:5c:82:b9:ef:29:58:d0:
                    9b:2b:be:c7:70:44:2e:fc:90:d4:ec:af:9a:67:de:
                    cf:13:92:71:8a:d1:66:46:b1:bc:2d:d7:a9:fc:da:
                    fa:e2:33:78:ad:1f:f8:42:92:8f:6f:83:00:be:97:
                    1e:49:d9:5c:58:46:5a:10:b1:64:c5:6e:a0:87:ea:
                    db:68:f3:3f:08:94:05:d6:c1:7b:f1:c1:21:97:0b:
                    d5:de:99:9e:41:6d:e8:a9:bb:8e:13:29:0d:d3:72:
                    54:13:45:eb:f9:1c:36:fc:b6:be:b0:0f:a0:b8:28:
                    e6:2c:e9:78:15:38:6e:e9:d1:3c:61:8a:4c:ec:ee:
                    0c:42:f5:4c:d3:4a:2a:52:48:40:ec:f7:e5:a0:29:
                    0f:a4:1f:5b:9a:55:94:3e:5a:be:dc:fe:ba:68:b7:
                    bc:2e:eb:a6:32:5e:ea:85:34:88:44:66:75:48:11:
                    b7:c0:4a:a2:15:3c:a6:9d:32:2c:02:b9:97:78:29:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:5F:87:54:9F:B7:8E:92:87:64:A6:F9:26:C5:D1:5D:7B:EC:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/7e493645-6ec6-365a-b5fd-862975c112b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:48:17:6f:bc:e8:b4:ec:41:ac:a9:58:3d:e8:34:00:2e:
         82:30:ee:f9:ba:66:8e:bb:16:c9:eb:12:c6:77:d5:d7:c2:c7:
         1d:49:de:5b:5b:5f:94:ff:6b:77:e5:82:79:7c:0c:52:1e:5c:
         be:fe:b1:ce:10:ff:76:1b:d1:fb:9f:82:d9:34:cd:cd:f9:55:
         b2:88:d5:68:b9:fb:f2:de:0e:5c:e5:07:cb:8b:e5:e4:1e:c2:
         5d:74:1e:0f:7a:b0:62:2c:04:0e:6e:c8:15:c1:d4:7b:6d:74:
         02:1a:39:8d:19:8e:ca:92:6a:87:e7:ab:c1:ec:5d:ed:b9:0d:
         9a:2b:6e:f3:75:cf:8c:94:be:3a:6d:ac:aa:87:bb:04:1d:cc:
         49:52:c1:ed:1e:06:55:bc:86:6d:82:f0:06:68:e1:88:04:21:
         04:5c:19:4f:f7:be:e1:86:14:e1:6b:da:a7:91:f3:4b:38:90:
         9f:5b:24:32:02:a1:5b:69:c6:d9:72:fd:d5:1c:18:22:ce:aa:
         85:59:1e:02:33:81:a6:8c:8c:28:bd:72:bc:83:d1:90:15:ec:
         a1:de:ba:09:83:7c:b7:6c:3d:ef:fd:be:9f:ca:d3:0a:95:fb:
         2c:a0:ff:09:6b:e8:76:39:74:0a:70:8a:f0:40:c5:c5:54:53:
         f9:71:6e:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUTGuT9Wr5uZRj2OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk
YTBmOGM1Y2MtMjA3OC00MDM3LTgwNDYtYTVlODk2MjlkZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEA2bOpMISwjMrtTNp/Vg1S/EtINjicYK3/c
RBkl2uLMSSXYXgrtc8Hct9qCSaxDCzuBXa7BaLBjcXY9kD23J+dJ11yCue8pWNCb
K77HcEQu/JDU7K+aZ97PE5JxitFmRrG8Ldep/Nr64jN4rR/4QpKPb4MAvpceSdlc
WEZaELFkxW6gh+rbaPM/CJQF1sF78cEhlwvV3pmeQW3oqbuOEykN03JUE0Xr+Rw2
/La+sA+guCjmLOl4FThu6dE8YYpM7O4MQvVM00oqUkhA7PfloCkPpB9bmlWUPlq+
3P66aLe8LuumMl7qhTSIRGZ1SBG3wEqiFTymnTIsArmXeCk11QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdwX4dUn7eOkodkpvkmxdFde+y1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvN2U0OTM2NDUtNmVjNi0z
NjVhLWI1ZmQtODYyOTc1YzExMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn3SBdvvOi07EGsqVg96DQALoIw7vm6Zo67FsnrEsZ31dfCxx1J3ltb
X5T/a3flgnl8DFIeXL7+sc4Q/3Yb0fufgtk0zc35VbKI1Wi5+/LeDlzlB8uL5eQe
wl10Hg96sGIsBA5uyBXB1HttdAIaOY0ZjsqSaofnq8HsXe25DZorbvN1z4yUvjpt
rKqHuwQdzElSwe0eBlW8hm2C8AZo4YgEIQRcGU/3vuGGFOFr2qeR80s4kJ9bJDIC
oVtpxtly/dUcGCLOqoVZHgIzgaaMjCi9cryD0ZAV7KHeugmDfLdsPe/9vp/K0wqV
+yyg/wlr6HY5dApwivBAxcVUU/lxbr8=
-----END CERTIFICATE-----
Generated at Fri Mar 15 10:43:00 2024 by rpki-client on console-ams.rpki-client.org