Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b93c4eaf-e5df-3ae9-9c0c-c52d0b949ba2.roa
File:                     b93c4eaf-e5df-3ae9-9c0c-c52d0b949ba2.roa (raw, json)
Hash identifier:          Xj+jHbn7s0Rc6pYSjx4mLVmpZScZXqFMRGyARjLm4vs=
Subject key identifier:   09:1A:B2:FD:25:11:B4:E3:7C:8E:43:0D:86:BC:B8:A9:A4:D8:88:8D
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285846758A0ED5A2B02E1487D30390
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b93c4eaf-e5df-3ae9-9c0c-c52d0b949ba2.roa
Signing time:             Sun 07 Jul 2024 13:00:33 +0000
ROA not before:           Sun 07 Jul 2024 13:00:33 +0000
ROA not after:            Sat 05 Oct 2024 13:00:33 +0000
asID:                     1239
IP address blocks:        134.202.26.0/23 maxlen: 24
                          134.202.40.0/21 maxlen: 24
                          134.202.48.0/22 maxlen: 24
                          134.202.248.0/23 maxlen: 24
                          134.202.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 16:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:75:8a:0e:d5:a2:b0:2e:14:87:d3:03:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jul  7 13:00:33 2024 GMT
            Not After : Oct  5 13:00:33 2024 GMT
        Subject: CN=a82149bc-aa1b-4347-995d-fe2068ca4eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:84:68:fc:34:84:0b:6b:b8:2c:27:82:28:
                    cc:52:bc:02:81:58:27:d8:03:22:54:83:7a:f7:2a:
                    00:a7:3f:f0:58:eb:f9:4a:3f:28:bf:ba:fc:ce:1f:
                    ff:d4:08:44:a6:ff:53:c4:32:b0:46:53:42:52:86:
                    cf:fc:8d:9b:9d:90:34:9c:d0:41:90:c7:fe:51:83:
                    f1:83:0a:44:9e:6d:30:89:1d:aa:2a:2b:9d:b4:89:
                    09:a1:67:f6:77:a5:8e:1c:2d:f2:c3:6f:e0:fa:77:
                    43:fd:94:77:25:05:19:8c:fe:16:cd:7e:31:a8:f8:
                    d7:96:cd:88:87:bf:ce:29:5f:bb:f3:ba:08:65:78:
                    a3:2a:c8:5b:96:96:f5:b1:02:6e:f4:3d:61:b7:63:
                    73:71:a8:ed:4e:be:92:c7:a0:35:3f:96:8b:75:a9:
                    3a:b4:75:de:51:b4:40:29:c6:65:fc:42:a6:71:80:
                    b9:8b:ab:24:ca:8d:ff:bf:b8:50:40:38:43:ff:80:
                    f7:c5:3d:6b:54:e4:1f:8c:55:c8:ee:3f:40:16:06:
                    94:c7:d0:3b:b0:b6:fc:3e:4b:f1:9b:cd:4e:8c:a2:
                    dd:af:f9:4a:57:7c:70:c9:6d:d2:97:86:0e:f9:53:
                    b9:fa:b0:04:06:15:b1:b2:7e:d9:6b:26:fa:3c:14:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:B2:FD:25:11:B4:E3:7C:8E:43:0D:86:BC:B8:A9:A4:D8:88:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b93c4eaf-e5df-3ae9-9c0c-c52d0b949ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.26.0/23
                  134.202.40.0-134.202.51.255
                  134.202.248.0/23
                  134.202.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:5e:25:0d:e6:da:93:49:09:6c:06:ec:44:64:06:9a:6d:
         65:d8:30:c2:f3:2b:48:16:37:c1:ed:72:c2:64:04:04:42:17:
         4c:d0:2b:be:f0:37:0b:86:41:66:db:64:e4:7c:73:0a:a6:c0:
         86:9f:29:5c:4b:2e:8c:f6:ad:66:5e:73:08:68:b9:e2:49:6d:
         5e:90:d2:2f:3d:39:e1:9b:e1:87:c4:a8:d6:5a:f4:41:39:04:
         e4:48:2c:39:1a:4c:31:89:fd:1b:3b:6e:26:2c:ad:a3:f0:f6:
         c0:bc:4a:97:6b:e8:32:83:bd:69:fb:fa:08:ae:67:f0:84:f8:
         0d:fe:24:37:bd:43:1c:7b:2b:69:d1:f2:6a:7c:4a:80:9c:82:
         e3:97:6b:2d:a7:7d:7f:e4:85:14:ff:f5:fe:62:46:8c:d8:a1:
         40:9a:25:e0:b7:ca:68:bf:a8:5a:25:1d:67:97:b6:d7:d2:7a:
         3a:e2:e5:9d:a6:c5:79:6c:92:db:d9:bb:3b:66:e5:2d:87:d7:
         09:eb:ca:68:31:6b:ad:b2:ea:c8:09:88:19:b0:7f:0c:37:cb:
         5e:bc:3c:cc:51:70:c8:ae:a2:b3:e8:2c:81:1b:32:e0:ce:68:
         ba:fd:f8:6e:73:84:a0:b4:79:cb:e2:8f:40:2d:22:1a:c9:1f:
         25:51:d6:74
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEZ1ig7VorAuFIfTA5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI0MDcwNzEzMDAzM1oXDTI0MTAwNTEzMDAzM1owLzEtMCsGA1UEAxMk
YTgyMTQ5YmMtYWExYi00MzQ3LTk5NWQtZmUyMDY4Y2E0ZWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGyEaPw0hAtruCwngijMUrwCgVgn2AMiVIN6
9yoApz/wWOv5Sj8ov7r8zh//1AhEpv9TxDKwRlNCUobP/I2bnZA0nNBBkMf+UYPx
gwpEnm0wiR2qKiudtIkJoWf2d6WOHC3yw2/g+ndD/ZR3JQUZjP4WzX4xqPjXls2I
h7/OKV+787oIZXijKshblpb1sQJu9D1ht2NzcajtTr6Sx6A1P5aLdak6tHXeUbRA
KcZl/EKmcYC5i6skyo3/v7hQQDhD/4D3xT1rVOQfjFXI7j9AFgaUx9A7sLb8Pkvx
m81OjKLdr/lKV3xwyW3Sl4YO+VO5+rAEBhWxsn7Zayb6PBTCiwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFAkasv0lEbTjfI5DDYa8uKmk2IiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvYjkzYzRlYWYtZTVkZi0z
YWU5LTljMGMtYzUyZDBiOTQ5YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBhsoaMAwD
BAOGyigDBAKGyjADBAGGyvgDBAKGyvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZy1eJQ3m2pNJCWwG7ERk
BpptZdgwwvMrSBY3we1ywmQEBEIXTNArvvA3C4ZBZttk5HxzCqbAhp8pXEsujPat
Zl5zCGi54kltXpDSLz054Zvhh8So1lr0QTkE5EgsORpMMYn9GztuJiyto/D2wLxK
l2voMoO9afv6CK5n8IT4Df4kN71DHHsradHyanxKgJyC45drLad9f+SFFP/1/mJG
jNihQJol4LfKaL+oWiUdZ5e219J6OuLlnabFeWyS29m7O2blLYfXCevKaDFrrbLq
yAmIGbB/DDfLXrw8zFFwyK6is+gsgRsy4M5ouv34bnOEoLR5y+KPQC0iGskfJVHW
dA==
-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:09 2024 by rpki-client on console-ams.rpki-client.org