Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1f5cbe35-c9ad-331f-b24d-5c850c97bc24.roa
File:                     1f5cbe35-c9ad-331f-b24d-5c850c97bc24.roa (raw, json)
Hash identifier:          vbjZ+YTuhe2+am0YSUAXcSSaB32AuBDjjpQkr4YmHOY=
Subject key identifier:   CA:3C:32:E2:9B:C5:48:3D:22:02:16:EF:06:21:8D:ED:6D:E5:22:75
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285846C7E52219661C5153100246C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1f5cbe35-c9ad-331f-b24d-5c850c97bc24.roa
Signing time:             Tue 06 Aug 2024 01:00:28 +0000
ROA not before:           Tue 06 Aug 2024 01:00:28 +0000
ROA not after:            Mon 04 Nov 2024 02:00:28 +0000
asID:                     20266
IP address blocks:        139.177.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 15:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:e5:22:19:66:1c:51:53:10:02:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug  6 01:00:28 2024 GMT
            Not After : Nov  4 02:00:28 2024 GMT
        Subject: CN=abab9e3b-1482-4389-8f6e-46b02a41e8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:ca:64:db:90:b2:f9:e1:f0:14:16:eb:83:
                    e4:c9:7a:d6:aa:8a:8a:e6:34:78:22:53:fe:14:f1:
                    7c:f5:3b:a5:05:10:ba:22:d5:8a:92:97:b3:4b:af:
                    14:16:ec:e6:9e:d9:ab:51:85:93:d5:20:0c:17:58:
                    e7:ac:0d:b5:e7:56:e8:88:95:11:f4:ab:ac:17:1e:
                    c6:9a:87:14:5d:17:16:cf:d9:19:42:0d:28:95:8c:
                    0b:23:21:84:8d:95:b0:f6:b2:22:c7:2e:a6:29:a2:
                    0e:ef:49:6a:96:e3:e7:aa:0b:d9:db:dd:95:11:b3:
                    1a:22:cc:a5:e5:8e:b7:d6:65:36:f3:b8:ea:31:4f:
                    1e:8c:8e:d9:e6:b8:7d:5a:1b:56:e3:38:1a:78:21:
                    67:4f:31:5b:6e:fe:1c:f8:54:ed:f8:0e:a8:08:1a:
                    27:aa:db:c8:54:ff:b9:14:a1:6e:8a:5c:a0:4e:fc:
                    30:46:b2:34:73:c2:79:5d:bf:f4:9f:cb:ba:c2:e9:
                    92:b6:d2:82:7b:7f:7b:8a:a6:30:f6:88:b9:58:15:
                    b3:93:99:dc:97:72:71:c3:a8:3d:e2:89:3d:2d:56:
                    b1:0a:57:f3:ed:e8:39:9f:50:db:b5:57:d0:1e:8b:
                    85:d7:8f:d5:45:45:9b:cf:bf:95:9c:47:1d:23:ff:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:32:E2:9B:C5:48:3D:22:02:16:EF:06:21:8D:ED:6D:E5:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1f5cbe35-c9ad-331f-b24d-5c850c97bc24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:17:71:cc:57:0a:19:2c:1e:71:57:5f:f5:01:43:64:23:67:
         24:46:61:12:83:ef:ea:64:93:7b:4c:48:07:75:23:01:67:f9:
         40:46:6f:2d:27:f6:18:40:9a:7d:cb:21:4b:9f:6b:38:23:5a:
         73:e5:f5:8e:02:de:81:a5:fe:ea:bc:56:0f:13:b3:73:d6:64:
         e8:5b:73:76:ef:7c:0d:a7:fc:9a:d1:13:b9:df:56:b2:09:9d:
         01:c9:86:78:73:ee:78:a2:fb:91:f4:a1:47:fd:53:e2:ed:78:
         38:0b:9a:70:83:dc:e4:ee:25:e2:13:80:4b:d6:f7:e7:6a:7c:
         15:70:fe:34:5a:21:5c:8a:73:84:54:75:e9:30:26:9e:da:f3:
         23:8f:7d:e0:7c:83:16:85:51:11:e5:36:f7:e6:2f:51:23:69:
         72:6d:52:a4:7c:fb:27:27:7f:ce:62:42:10:f5:e6:72:a9:7e:
         03:b6:b6:ee:74:42:2f:a4:b4:be:9a:4b:d2:e8:38:f6:5f:8d:
         c9:2e:52:f8:f0:5c:56:3f:4f:91:7a:d6:65:93:6f:04:0d:06:
         e7:08:d1:9c:b9:6e:51:74:e7:c6:7c:22:49:91:e0:86:fd:8b:
         70:c5:52:b4:6e:75:43:89:c5:77:03:28:27:49:98:14:bf:8b:
         ae:07:04:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbH5SIZZhxRUxACRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDgwNjAxMDAyOFoXDTI0MTEwNDAyMDAyOFowLzEtMCsGA1UEAxMk
YWJhYjllM2ItMTQ4Mi00Mzg5LThmNmUtNDZiMDJhNDFlOGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo/KZNuQsvnh8BQW64PkyXrWqoqK5jR4IlP+
FPF89TulBRC6ItWKkpezS68UFuzmntmrUYWT1SAMF1jnrA2151boiJUR9KusFx7G
mocUXRcWz9kZQg0olYwLIyGEjZWw9rIixy6mKaIO70lqluPnqgvZ292VEbMaIsyl
5Y631mU287jqMU8ejI7Z5rh9WhtW4zgaeCFnTzFbbv4c+FTt+A6oCBonqtvIVP+5
FKFuilygTvwwRrI0c8J5Xb/0n8u6wumSttKCe397iqYw9oi5WBWzk5ncl3Jxw6g9
4ok9LVaxClfz7eg5n1DbtVfQHouF14/VRUWbz7+VnEcdI/9dMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMo8MuKbxUg9IgIW7wYhje1t5SJ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMWY1Y2JlMzUtYzlhZC0z
MzFmLWIyNGQtNWM4NTBjOTdiYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIXccxXChksHnFXX/UBQ2QjZyRGYRKD7+pkk3tMSAd1IwFn+UBGby0n
9hhAmn3LIUufazgjWnPl9Y4C3oGl/uq8Vg8Ts3PWZOhbc3bvfA2n/JrRE7nfVrIJ
nQHJhnhz7nii+5H0oUf9U+LteDgLmnCD3OTuJeITgEvW9+dqfBVw/jRaIVyKc4RU
dekwJp7a8yOPfeB8gxaFURHlNvfmL1EjaXJtUqR8+ycnf85iQhD15nKpfgO2tu50
Qi+ktL6aS9LoOPZfjckuUvjwXFY/T5F61mWTbwQNBucI0Zy5blF058Z8IkmR4Ib9
i3DFUrRudUOJxXcDKCdJmBS/i64HBOc=
-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:14 2024 by rpki-client on console-fra.rpki-client.org