Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/22f10fb9-f17b-3419-a0c1-38738b659f2b.roa
File:                     22f10fb9-f17b-3419-a0c1-38738b659f2b.roa (raw, json)
Hash identifier:          wypnsFyTTzpkpUOGDxnjE9Cm7Br/l0xxIwlSINoe+Jc=
Subject key identifier:   F3:A9:25:F6:2F:35:E8:46:BC:E4:39:7D:29:8F:06:D7:B1:7A:A0:22
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720AFE0760B161D0F1055C80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/22f10fb9-f17b-3419-a0c1-38738b659f2b.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:fe:07:60:b1:61:d0:f1:05:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=647661f9-5183-4ed5-ab1d-655ee482ce31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:5f:8d:07:b0:05:c8:d0:74:db:44:1e:06:
                    16:60:13:67:60:dc:07:b0:62:6f:12:b8:b3:b5:3e:
                    ab:77:1c:4b:35:0f:26:fa:21:33:5f:95:6a:9f:1e:
                    9c:c2:51:09:6a:f5:33:f7:b7:39:2c:09:38:7f:49:
                    8a:d4:b5:3d:89:0a:14:e0:c8:42:63:42:b4:d7:27:
                    ed:29:a2:55:3a:fe:b2:4e:08:6c:74:ef:c9:c9:11:
                    c5:80:bf:fd:81:a7:d8:1b:e4:09:e4:a9:47:bd:98:
                    b3:86:2a:17:de:60:fa:08:aa:0a:79:c8:db:19:b2:
                    a6:f3:04:c7:37:ca:6f:c2:22:bc:31:d9:08:b5:ae:
                    81:e8:dd:a9:12:56:f3:28:cd:fe:83:97:25:2f:e7:
                    1f:db:07:a9:ee:1b:c4:31:7a:7d:58:0c:a4:eb:ca:
                    5c:fd:f7:c5:18:37:28:bc:7f:99:d6:cb:ea:4f:8d:
                    26:d0:b6:ca:1d:09:5f:48:8f:bb:5b:66:e9:58:44:
                    36:da:76:16:a7:74:a7:9e:ab:da:07:a9:ed:58:40:
                    56:b8:b8:e2:f7:91:57:5d:40:eb:ff:70:3f:26:bd:
                    9a:97:24:a3:05:41:08:35:b2:ee:fc:58:59:3e:c7:
                    14:43:d3:e9:b2:cd:70:53:6e:6a:89:b4:05:7d:9d:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:25:F6:2F:35:E8:46:BC:E4:39:7D:29:8F:06:D7:B1:7A:A0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/22f10fb9-f17b-3419-a0c1-38738b659f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:c3:6c:1b:f9:85:64:5c:87:27:d7:62:f6:f8:d4:f9:ce:
         50:7b:be:46:16:50:35:59:03:39:1b:59:15:27:95:45:f9:98:
         73:2e:08:7d:fd:0b:65:cb:c8:5a:51:e4:3c:e6:0b:6e:34:8e:
         12:8e:5b:1b:49:3f:6f:de:79:d1:25:90:d0:8b:9d:5e:3d:2a:
         ba:97:81:7b:8d:15:87:22:13:31:a9:08:c0:9f:00:00:a4:5f:
         63:8c:cc:c4:16:97:2d:29:1a:ca:4a:19:23:e1:b3:d4:80:41:
         1d:fe:10:b6:35:e5:db:28:02:77:e3:8e:85:1c:1c:45:de:78:
         96:55:8e:17:29:02:a1:96:d6:0e:7c:59:56:b5:52:06:20:8b:
         3c:81:cf:f9:a8:d5:f5:3e:ed:13:c7:6c:59:d9:f1:80:ee:a6:
         8e:42:84:90:73:e1:68:80:ed:e6:d7:37:6a:88:9b:0b:5e:06:
         0a:90:10:35:3c:d7:c2:4b:60:3d:d1:1d:70:03:1f:65:24:c5:
         d4:54:87:0a:15:81:5d:16:6a:76:84:4c:95:89:e7:bc:fd:c6:
         61:75:be:87:81:ac:20:71:ca:98:f2:4c:c8:82:40:03:8c:c4:
         bf:22:96:73:cf:f9:26:7d:ac:68:a9:a6:b1:fd:4e:b8:f6:dd:
         e7:f5:c6:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCv4HYLFh0PEFXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
NjQ3NjYxZjktNTE4My00ZWQ1LWFiMWQtNjU1ZWU0ODJjZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg91fjQewBcjQdNtEHgYWYBNnYNwHsGJvEriz
tT6rdxxLNQ8m+iEzX5Vqnx6cwlEJavUz97c5LAk4f0mK1LU9iQoU4MhCY0K01yft
KaJVOv6yTghsdO/JyRHFgL/9gafYG+QJ5KlHvZizhioX3mD6CKoKecjbGbKm8wTH
N8pvwiK8MdkIta6B6N2pElbzKM3+g5clL+cf2wep7hvEMXp9WAyk68pc/ffFGDco
vH+Z1svqT40m0LbKHQlfSI+7W2bpWEQ22nYWp3SnnqvaB6ntWEBWuLji95FXXUDr
/3A/Jr2alySjBUEINbLu/FhZPscUQ9Ppss1wU25qibQFfZ1cnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOpJfYvNehGvOQ5fSmPBtexeqAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvMjJmMTBmYjktZjE3Yi0z
NDE5LWEwYzEtMzg3MzhiNjU5ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbYw2wb+YVkXIcn12L2+NT5zlB7vkYWUDVZAzkbWRUnlUX5mHMuCH39
C2XLyFpR5DzmC240jhKOWxtJP2/eedElkNCLnV49KrqXgXuNFYciEzGpCMCfAACk
X2OMzMQWly0pGspKGSPhs9SAQR3+ELY15dsoAnfjjoUcHEXeeJZVjhcpAqGW1g58
WVa1UgYgizyBz/mo1fU+7RPHbFnZ8YDupo5ChJBz4WiA7ebXN2qImwteBgqQEDU8
18JLYD3RHXADH2UkxdRUhwoVgV0WanaETJWJ57z9xmF1voeBrCBxypjyTMiCQAOM
xL8ilnPP+SZ9rGipprH9Trj23ef1xvA=
-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org