Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e0b6b3d4-94b2-3ae5-b56f-5aaa1d36b407.roa
File:                     e0b6b3d4-94b2-3ae5-b56f-5aaa1d36b407.roa (raw, json)
Hash identifier:          rIHSXO4sjkrnFjTdFWSXIK/Kob8/DgecLpqj1SyrcOE=
Subject key identifier:   8A:BE:C6:4F:0A:25:00:5B:3A:73:08:3E:16:C2:2F:2C:49:BE:E8:DF
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285846E4F20AD3BBE351D4A9682B00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e0b6b3d4-94b2-3ae5-b56f-5aaa1d36b407.roa
Signing time:             Fri 16 Aug 2024 10:45:00 +0000
ROA not before:           Fri 16 Aug 2024 10:45:00 +0000
ROA not after:            Thu 14 Nov 2024 11:45:00 +0000
asID:                     834
IP address blocks:        216.185.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 12:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e4:f2:0a:d3:bb:e3:51:d4:a9:68:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 16 10:45:00 2024 GMT
            Not After : Nov 14 11:45:00 2024 GMT
        Subject: CN=1d9715ab-673a-4633-8a56-d6980e1720eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:aa:48:7e:14:8a:d4:2a:ed:03:3d:ab:28:
                    9f:2d:92:52:e3:bf:de:e8:c3:99:46:95:7c:ea:d8:
                    b4:ae:69:14:78:46:f9:25:7a:c2:fb:42:f6:ec:94:
                    e8:9f:44:f7:b5:9b:03:39:8e:18:9c:20:e3:a2:6f:
                    57:8e:a4:bd:d2:34:d8:ea:78:d6:1e:c1:ee:2c:14:
                    1f:e3:ec:3e:0e:39:f4:b0:ba:0a:9b:e3:a9:92:17:
                    10:8d:c0:10:70:43:de:fa:85:5e:c1:76:3d:b6:97:
                    2e:f7:e0:66:4b:3d:27:09:d0:9e:9b:47:cc:bd:8c:
                    c8:d5:84:b0:a9:b4:36:c8:60:59:52:8e:83:d3:81:
                    d2:00:17:9a:b9:24:04:ae:27:b9:a0:69:e8:86:25:
                    bf:c9:f9:82:6d:6b:a9:3f:8b:6f:3c:5b:d6:72:6f:
                    8f:66:94:b7:c2:35:2e:04:e3:ec:5e:b4:97:4b:6b:
                    5b:b3:d3:ae:9b:0b:0c:97:6d:7e:57:12:50:4b:ce:
                    38:05:ab:b2:d7:03:cf:51:ea:a3:b6:47:fd:d9:99:
                    f0:28:20:66:5a:f0:dc:55:bc:d2:ba:49:1d:4c:ab:
                    70:47:97:43:4b:b0:ad:0a:33:58:88:51:a8:be:b2:
                    f2:fb:3c:67:9e:0a:cd:c2:b4:ba:3b:42:fb:d8:29:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:C6:4F:0A:25:00:5B:3A:73:08:3E:16:C2:2F:2C:49:BE:E8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e0b6b3d4-94b2-3ae5-b56f-5aaa1d36b407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:db:72:a1:f0:38:5f:46:eb:6f:f7:e7:67:df:92:f9:91:
         b2:8f:66:6d:c1:29:96:a8:7c:fc:f2:e1:d0:0a:47:f9:91:64:
         d2:42:f2:a9:53:96:44:43:2e:29:fd:27:8b:d9:96:e6:62:b9:
         09:68:9a:22:5f:6a:ac:ba:ab:b0:a1:0e:6c:d3:c8:d3:7f:be:
         12:38:98:0f:7f:e1:a6:22:0f:eb:84:5b:10:54:1d:03:17:a3:
         e3:d2:30:30:6a:20:a4:91:9f:de:53:37:b8:a0:27:1e:bf:be:
         73:68:35:86:0f:66:86:2a:24:2e:8a:12:f3:ca:df:89:ed:f8:
         30:c4:b2:af:76:3e:d3:50:7e:59:e3:32:26:25:0a:37:d3:77:
         90:24:67:95:88:49:83:85:cc:8d:fe:04:c4:d8:d7:62:05:49:
         44:df:f7:71:75:47:c9:42:e7:e5:2f:f9:65:17:6e:2b:4d:ac:
         1f:58:7f:47:1a:45:63:7d:e6:6b:4a:4a:78:72:b8:6c:b2:fe:
         96:78:ff:8d:5b:aa:35:9f:8c:64:b4:e0:2c:c8:9f:f0:bd:16:
         cf:a5:60:f9:82:fc:2c:09:0a:8a:93:b8:45:bb:6a:84:6f:8c:
         d0:64:cb:97:81:2d:54:21:34:cf:f6:77:6e:06:f2:e1:af:d6:
         13:30:ab:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbk8grTu+NR1KloKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI0MDgxNjEwNDUwMFoXDTI0MTExNDExNDUwMFowLzEtMCsGA1UEAxMk
MWQ5NzE1YWItNjczYS00NjMzLThhNTYtZDY5ODBlMTcyMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV6qSH4UitQq7QM9qyifLZJS47/e6MOZRpV8
6ti0rmkUeEb5JXrC+0L27JTon0T3tZsDOY4YnCDjom9XjqS90jTY6njWHsHuLBQf
4+w+Djn0sLoKm+OpkhcQjcAQcEPe+oVewXY9tpcu9+BmSz0nCdCem0fMvYzI1YSw
qbQ2yGBZUo6D04HSABeauSQErie5oGnohiW/yfmCbWupP4tvPFvWcm+PZpS3wjUu
BOPsXrSXS2tbs9OumwsMl21+VxJQS844Bauy1wPPUeqjtkf92ZnwKCBmWvDcVbzS
ukkdTKtwR5dDS7CtCjNYiFGovrLy+zxnngrNwrS6O0L72CmWJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIq+xk8KJQBbOnMIPhbCLyxJvujfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZTBiNmIzZDQtOTRiMi0z
YWU1LWI1NmYtNWFhYTFkMzZiNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LkhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtd23Kh8DhfRutv9+dn35L5kbKPZm3BKZaofPzy4dAKR/mRZNJC8qlT
lkRDLin9J4vZluZiuQlomiJfaqy6q7ChDmzTyNN/vhI4mA9/4aYiD+uEWxBUHQMX
o+PSMDBqIKSRn95TN7igJx6/vnNoNYYPZoYqJC6KEvPK34nt+DDEsq92PtNQflnj
MiYlCjfTd5AkZ5WISYOFzI3+BMTY12IFSUTf93F1R8lC5+Uv+WUXbitNrB9Yf0ca
RWN95mtKSnhyuGyy/pZ4/41bqjWfjGS04CzIn/C9Fs+lYPmC/CwJCoqTuEW7aoRv
jNBky5eBLVQhNM/2d24G8uGv1hMwq9A=
-----END CERTIFICATE-----
Generated at Wed Oct 30 16:32:39 2024 by rpki-client on console-fra.rpki-client.org