Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c44d2bb5-c956-3fd4-b008-00f80148b8eb.roa
File:                     c44d2bb5-c956-3fd4-b008-00f80148b8eb.roa (raw, json)
Hash identifier:          o1XQlRQPG8DsCQQSXbqa/OVcQJvOwqb0tZ3pVKOFPvA=
Subject key identifier:   18:7D:B2:61:C5:58:08:A0:6C:7D:57:6F:47:0B:28:FA:7F:59:06:E4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285846FFBADCA54E39195BCDF64780
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c44d2bb5-c956-3fd4-b008-00f80148b8eb.roa
Signing time:             Mon 26 Aug 2024 01:00:32 +0000
ROA not before:           Mon 26 Aug 2024 01:00:32 +0000
ROA not after:            Sun 24 Nov 2024 02:00:32 +0000
asID:                     47890
IP address blocks:        149.19.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 15:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:ba:dc:a5:4e:39:19:5b:cd:f6:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 26 01:00:32 2024 GMT
            Not After : Nov 24 02:00:32 2024 GMT
        Subject: CN=533fa023-46a0-44de-9d21-0ca0a606b3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:56:d7:8f:6c:d7:26:46:b1:71:e9:37:d7:
                    89:22:59:e8:cd:04:ed:82:9d:76:3c:42:f3:01:0e:
                    6a:62:e2:fa:42:d4:df:d6:c8:d2:00:f6:1f:f8:5e:
                    97:67:f2:49:1e:b3:b1:9f:65:a2:8b:99:79:5f:2c:
                    c9:21:9d:8f:15:61:b6:cf:2c:d3:d9:f1:f9:93:3c:
                    e0:8b:1a:2b:5d:59:e1:d7:42:b7:96:a7:9c:de:d0:
                    9b:a3:04:fb:45:20:53:bd:ea:7a:4d:06:70:be:bb:
                    b0:6c:e9:cf:21:d4:c3:4c:e6:12:a2:24:b8:a2:2a:
                    5f:f3:2e:cc:14:bc:3a:8b:3d:02:17:49:e1:4c:f0:
                    8a:8f:5a:0a:52:34:4c:5f:d7:ec:86:2e:2e:c4:f1:
                    05:09:0f:8c:fa:64:23:55:2e:35:ab:e5:a7:e1:e6:
                    ef:5c:d3:e7:e4:22:5f:d1:55:a8:1b:07:85:21:d5:
                    e7:17:b7:3e:f8:b9:de:93:6f:46:9e:1b:8d:8a:67:
                    5d:21:20:ea:2f:48:c3:e5:b4:5d:db:f1:51:af:b5:
                    af:d2:93:bc:c6:a0:38:dd:2f:cb:ff:0c:5f:6b:c3:
                    f9:73:b5:9d:8a:ff:f2:01:a5:9d:0b:7c:04:b9:8c:
                    db:0f:41:c2:67:aa:cf:1e:91:e5:5b:5f:e1:02:b0:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:B2:61:C5:58:08:A0:6C:7D:57:6F:47:0B:28:FA:7F:59:06:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c44d2bb5-c956-3fd4-b008-00f80148b8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:dd:e4:12:f4:4f:75:e2:c5:44:ce:f7:53:ce:da:c8:1b:
         36:3c:f3:98:8f:89:e9:f1:6a:4c:48:16:9a:75:73:9a:eb:13:
         b8:f1:8e:08:cd:d2:55:56:a6:88:cb:d1:76:27:8c:04:48:c2:
         3c:04:10:b9:0d:d3:33:cf:4e:5d:80:ed:ee:02:ec:61:6e:cd:
         0f:23:f9:78:85:be:5d:6c:9d:b3:a7:07:a6:99:ee:ef:56:f8:
         32:d2:1b:00:4e:66:6e:97:8b:1b:34:e5:ce:dc:cd:d5:e3:1e:
         cc:30:f2:ea:3e:f2:60:83:4b:61:41:f2:e3:45:3b:e3:e0:12:
         5e:e8:60:81:1c:4e:1d:aa:85:2e:60:22:41:aa:96:e2:ac:ef:
         64:ca:fb:03:eb:3b:5b:d9:41:f9:0b:db:a5:d9:ec:63:d4:16:
         2c:9d:3b:20:33:c0:ff:4f:66:d3:b6:31:fe:73:de:ec:8b:8a:
         25:9e:73:2e:57:c8:0b:fb:28:33:f8:65:04:56:92:75:8e:47:
         87:41:9c:d1:96:ed:e3:a9:cd:40:31:b0:94:8f:4c:2c:72:ac:
         41:8f:af:66:ee:62:12:9b:3e:e6:eb:11:d0:dd:d5:2c:96:2f:
         41:5c:d9:f2:8e:ff:ab:8c:a9:33:4f:a1:d0:46:c3:90:49:0a:
         b5:52:a4:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb/utylTjkZW832R4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDgyNjAxMDAzMloXDTI0MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
NTMzZmEwMjMtNDZhMC00NGRlLTlkMjEtMGNhMGE2MDZiM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvylW149s1yZGsXHpN9eJIlnozQTtgp12PELz
AQ5qYuL6QtTf1sjSAPYf+F6XZ/JJHrOxn2Wii5l5XyzJIZ2PFWG2zyzT2fH5kzzg
ixorXVnh10K3lqec3tCbowT7RSBTvep6TQZwvruwbOnPIdTDTOYSoiS4oipf8y7M
FLw6iz0CF0nhTPCKj1oKUjRMX9fshi4uxPEFCQ+M+mQjVS41q+Wn4ebvXNPn5CJf
0VWoGweFIdXnF7c++Lnek29GnhuNimddISDqL0jD5bRd2/FRr7Wv0pO8xqA43S/L
/wxfa8P5c7Wdiv/yAaWdC3wEuYzbD0HCZ6rPHpHlW1/hArCpDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBh9smHFWAigbH1Xb0cLKPp/WQbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYzQ0ZDJiYjUtYzk1Ni0z
ZmQ0LWIwMDgtMDBmODAxNDhiOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2+3eQS9E914sVEzvdTztrIGzY885iPienxakxIFpp1c5rrE7jxjgjN
0lVWpojL0XYnjARIwjwEELkN0zPPTl2A7e4C7GFuzQ8j+XiFvl1snbOnB6aZ7u9W
+DLSGwBOZm6Xixs05c7czdXjHsww8uo+8mCDS2FB8uNFO+PgEl7oYIEcTh2qhS5g
IkGqluKs72TK+wPrO1vZQfkL26XZ7GPUFiydOyAzwP9PZtO2Mf5z3uyLiiWecy5X
yAv7KDP4ZQRWknWOR4dBnNGW7eOpzUAxsJSPTCxyrEGPr2buYhKbPubrEdDd1SyW
L0Fc2fKO/6uMqTNPodBGw5BJCrVSpN4=
-----END CERTIFICATE-----
Generated at Wed Oct 9 20:37:44 2024 by rpki-client on console-fra.rpki-client.org