Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5388d1d-1bf4-3353-8a78-fe8a2dff0241.roa
File:                     d5388d1d-1bf4-3353-8a78-fe8a2dff0241.roa (raw, json)
Hash identifier:          6zRyRRAqnEE4SgU3vCCypAVBCePe4AYMWDe774Ip4rQ=
Subject key identifier:   F3:E2:5F:ED:6B:DE:C3:C1:99:E4:3D:45:C3:01:31:0E:B1:E1:F9:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A5653201995F0856CAC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5388d1d-1bf4-3353-8a78-fe8a2dff0241.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        34.101.64.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 02:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:56:53:20:19:95:f0:85:6c:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=b3653607-ff98-4be5-9d32-6eea92689754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:91:cc:cc:62:5b:0e:be:8a:1f:bb:6a:6e:
                    99:ac:1c:63:c2:ae:35:48:6f:24:7c:8b:2e:e6:ce:
                    b8:9a:a0:9e:ce:f8:dd:99:09:5e:c3:e8:c8:15:c7:
                    47:54:82:74:66:4f:ab:d7:ed:27:9d:09:54:58:8f:
                    e8:c4:ce:5f:b5:f0:dc:9a:df:2d:1a:3a:8e:2e:3c:
                    85:77:1e:fb:ab:69:cf:c7:fe:7c:18:b3:0b:7b:1d:
                    b5:b7:2c:1d:e9:23:80:27:60:6f:42:c3:54:2c:00:
                    e8:52:41:57:ad:4d:f6:42:d2:f2:ee:76:f1:76:fa:
                    f5:31:96:4e:a8:e3:35:cb:7c:d6:b8:fb:16:95:00:
                    9d:eb:ff:fe:12:0e:e1:8f:64:89:34:fb:e4:d9:62:
                    c6:a9:f5:4a:85:ae:47:31:4b:3b:ed:d2:99:14:49:
                    fe:0a:ed:b6:c0:b7:f7:3b:23:0c:3d:e8:b2:51:6f:
                    c6:2e:cf:18:6f:7e:18:09:87:f5:90:13:50:6f:d0:
                    0c:6b:da:1d:30:c7:44:62:e7:c7:80:3b:a3:9c:16:
                    76:fb:fb:31:47:46:98:42:ba:07:cb:a6:74:fa:17:
                    f5:bb:8b:bb:6d:6f:7d:c9:f7:2a:2f:91:c9:e1:38:
                    0d:2b:ea:40:94:b3:03:e4:ca:77:c5:59:d1:1b:8d:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:5F:ED:6B:DE:C3:C1:99:E4:3D:45:C3:01:31:0E:B1:E1:F9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5388d1d-1bf4-3353-8a78-fe8a2dff0241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.101.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:23:1d:04:3f:2f:b5:ee:d7:10:15:05:e3:7c:85:53:dd:ac:
         e3:18:5f:43:80:b5:e1:01:6c:19:ab:c6:37:c2:50:04:a6:8c:
         81:80:0e:e8:1a:1a:a7:52:6c:8f:72:d9:f7:04:c4:e4:c9:4a:
         3c:79:9f:9a:9d:b6:f1:17:19:f8:f5:51:d6:cf:63:7a:15:9c:
         aa:19:4f:14:a2:58:59:b5:4a:43:cd:2a:cc:ed:9e:c1:57:2b:
         47:9a:a8:ef:70:65:08:23:7f:6a:69:e3:b8:76:f8:1c:4c:46:
         8b:4e:68:46:9c:81:dc:3f:8f:02:82:5f:bd:c2:ca:d2:27:38:
         6b:13:bc:b9:2a:9f:1d:35:2c:23:94:84:8d:c9:e2:7c:b1:fe:
         fe:e6:f6:de:fa:d6:e8:2f:12:b0:49:1e:2e:b1:2a:bc:17:f9:
         1b:a0:c1:8f:37:5a:9d:3e:1e:5c:01:81:4e:8f:c1:75:d7:f9:
         1d:80:77:ae:80:8b:06:89:f7:5e:28:0b:de:be:4d:eb:e3:85:
         e6:3c:0f:b9:3d:d7:86:c9:1d:97:8c:a2:6a:3e:da:47:be:6a:
         d1:26:8c:97:06:80:4b:61:3b:ba:04:23:7c:b4:a8:f0:3b:6d:
         f5:7b:ac:2a:59:f0:99:d9:1f:e8:08:ff:51:94:aa:37:f6:bb:
         a1:b2:f0:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlZTIBmV8IVsrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YjM2NTM2MDctZmY5OC00YmU1LTlkMzItNmVlYTkyNjg5NzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz6RzMxiWw6+ih+7am6ZrBxjwq41SG8kfIsu
5s64mqCezvjdmQlew+jIFcdHVIJ0Zk+r1+0nnQlUWI/oxM5ftfDcmt8tGjqOLjyF
dx77q2nPx/58GLMLex21tywd6SOAJ2BvQsNULADoUkFXrU32QtLy7nbxdvr1MZZO
qOM1y3zWuPsWlQCd6//+Eg7hj2SJNPvk2WLGqfVKha5HMUs77dKZFEn+Cu22wLf3
OyMMPeiyUW/GLs8Yb34YCYf1kBNQb9AMa9odMMdEYufHgDujnBZ2+/sxR0aYQroH
y6Z0+hf1u4u7bW99yfcqL5HJ4TgNK+pAlLMD5Mp3xVnRG41U8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPiX+1r3sPBmeQ9RcMBMQ6x4fmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDUzODhkMWQtMWJmNC0z
MzUzLThhNzgtZmU4YTJkZmYwMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGImVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAjHQQ/L7Xu1xAVBeN8hVPdrOMYX0OAteEBbBmrxjfCUASmjIGADuga
GqdSbI9y2fcExOTJSjx5n5qdtvEXGfj1UdbPY3oVnKoZTxSiWFm1SkPNKsztnsFX
K0eaqO9wZQgjf2pp47h2+BxMRotOaEacgdw/jwKCX73CytInOGsTvLkqnx01LCOU
hI3J4nyx/v7m9t761ugvErBJHi6xKrwX+RugwY83Wp0+HlwBgU6PwXXX+R2Ad66A
iwaJ914oC96+TevjheY8D7k914bJHZeMomo+2ke+atEmjJcGgEthO7oEI3y0qPA7
bfV7rCpZ8JnZH+gI/1GUqjf2u6Gy8HA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:53 2025 by rpki-client