Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/85fa5464-e6b6-3dd5-a08b-f0bb301fa19c.roa
File:                     85fa5464-e6b6-3dd5-a08b-f0bb301fa19c.roa (raw, json)
Hash identifier:          d+Srw3ebARxqrdC5UKKl5MXnbVQzyl1rtp/pmf0/rC0=
Subject key identifier:   98:27:A6:2B:C0:5E:79:89:F6:94:E0:9B:9E:27:3F:7A:AB:43:23:57
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858447209FF71456EC878561575C0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/85fa5464-e6b6-3dd5-a08b-f0bb301fa19c.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:09:ff:71:45:6e:c8:78:56:15:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=179fad2e-0228-48af-9810-41b41c2fec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:5d:40:68:6f:20:57:4b:bc:d9:bc:1e:b3:
                    65:13:25:24:6c:f1:d0:39:8f:e4:f3:ee:fc:ed:01:
                    fd:51:c8:16:2d:9b:25:16:33:8b:48:0a:c6:83:ef:
                    55:d2:af:c5:40:72:3d:ce:1d:d0:f3:ef:66:1d:05:
                    ac:a7:c2:2a:79:7c:58:01:76:37:0b:45:61:95:1a:
                    24:1d:8d:3c:c6:39:0d:8e:f9:2c:24:c4:bb:03:a0:
                    70:70:aa:07:27:23:f0:de:95:85:c2:a9:f9:72:c6:
                    a3:d1:19:5d:20:94:a2:7b:56:9c:57:e2:1e:13:2e:
                    e2:7a:75:0c:a6:e5:68:34:aa:89:af:a5:c6:87:91:
                    cd:bc:5f:97:24:6e:b3:06:12:53:c2:07:f6:01:44:
                    18:d6:c0:45:6e:e9:54:35:0b:ae:eb:1d:80:e2:4f:
                    70:34:b3:13:1f:d7:d6:05:d6:be:95:c8:dd:8c:40:
                    33:b2:6a:8f:bf:6e:fb:f3:58:c9:97:39:32:2b:3e:
                    5e:84:c1:6c:1e:bd:e4:d8:5f:76:91:29:96:15:d1:
                    72:d3:4a:76:3a:d2:02:78:df:87:5a:1d:e4:9e:fd:
                    02:f0:7c:1b:38:1d:53:75:21:be:72:1d:58:04:a3:
                    b6:ff:8d:d7:0a:7f:26:89:ff:38:28:89:5a:9d:60:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:A6:2B:C0:5E:79:89:F6:94:E0:9B:9E:27:3F:7A:AB:43:23:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/85fa5464-e6b6-3dd5-a08b-f0bb301fa19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:20:91:6f:90:d8:d9:51:6a:ee:f1:50:65:4e:3e:9a:6e:
         31:79:d3:db:5b:1e:5a:94:6b:a2:f9:2c:76:ce:b4:6b:b5:50:
         ef:a5:94:e6:df:b4:ed:2c:b0:91:0c:b2:d2:4e:61:5b:2a:07:
         6a:e1:16:8c:e4:cc:ae:50:ae:47:43:48:c4:10:94:7b:ce:fc:
         f1:09:d6:7f:3e:74:ef:6f:f7:cb:bf:6d:85:ac:78:d8:11:58:
         4c:1e:c5:5a:53:39:82:6d:2e:5d:c3:fa:7e:63:3f:6d:fb:9c:
         b4:77:e9:34:65:90:b4:c2:2d:10:10:87:a6:be:f3:ec:12:45:
         71:c5:34:51:85:0e:10:c4:ec:f1:b2:cc:34:6b:60:8f:83:32:
         b8:f2:ff:1e:2c:18:12:6d:35:82:25:7d:e5:c5:df:cb:2a:e8:
         94:01:8e:f5:ad:9e:ff:1c:d1:36:c0:10:5e:ca:39:fa:e7:87:
         29:0b:15:9e:2b:f0:0c:b6:e4:84:64:bf:37:89:0b:f0:a9:8d:
         ce:39:35:f8:4e:b8:7d:0c:91:3d:76:78:c4:bd:a3:34:17:74:
         a1:17:9f:07:11:89:89:3f:3a:23:e0:6f:f3:72:50:a4:13:23:
         9b:1e:8c:40:0a:0f:e1:ec:be:7b:93:67:05:81:22:32:87:88:
         ca:d2:1c:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCf9xRW7IeFYVdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
MTc5ZmFkMmUtMDIyOC00OGFmLTk4MTAtNDFiNDFjMmZlYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMFdQGhvIFdLvNm8HrNlEyUkbPHQOY/k8+78
7QH9UcgWLZslFjOLSArGg+9V0q/FQHI9zh3Q8+9mHQWsp8IqeXxYAXY3C0VhlRok
HY08xjkNjvksJMS7A6BwcKoHJyPw3pWFwqn5csaj0RldIJSie1acV+IeEy7ienUM
puVoNKqJr6XGh5HNvF+XJG6zBhJTwgf2AUQY1sBFbulUNQuu6x2A4k9wNLMTH9fW
Bda+lcjdjEAzsmqPv27781jJlzkyKz5ehMFsHr3k2F92kSmWFdFy00p2OtICeN+H
Wh3knv0C8HwbOB1TdSG+ch1YBKO2/43XCn8mif84KIlanWDEFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgnpivAXnmJ9pTgm54nP3qrQyNXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvODVmYTU0NjQtZTZiNi0z
ZGQ1LWEwOGItZjBiYjMwMWZhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByGIJFvkNjZUWru8VBlTj6abjF509tbHlqUa6L5LHbOtGu1UO+llObf
tO0ssJEMstJOYVsqB2rhFozkzK5QrkdDSMQQlHvO/PEJ1n8+dO9v98u/bYWseNgR
WEwexVpTOYJtLl3D+n5jP237nLR36TRlkLTCLRAQh6a+8+wSRXHFNFGFDhDE7PGy
zDRrYI+DMrjy/x4sGBJtNYIlfeXF38sq6JQBjvWtnv8c0TbAEF7KOfrnhykLFZ4r
8Ay25IRkvzeJC/Cpjc45NfhOuH0MkT12eMS9ozQXdKEXnwcRiYk/OiPgb/NyUKQT
I5sejEAKD+HsvnuTZwWBIjKHiMrSHEg=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:42 2024 by rpki-client on console-fra.rpki-client.org