Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa
File:                     86d4d616-3c7a-32f8-821c-cad16b66158b.roa (raw, json)
Hash identifier:          +SbYuSpUiW++QrsmdmlOEj8EVh/e6xtnX95M9YHFZaM=
Subject key identifier:   66:9D:53:AD:B6:3B:68:A6:CE:A2:37:C9:65:FC:98:33:5D:E7:80:04
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847FF4A69AAB17DC5E61C63E280
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     36040
IP address blocks:        207.126.152.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 15 Jan 2025 02:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:69:aa:b1:7d:c5:e6:1c:63:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=f276490d-6f9c-452d-a992-6f339088ffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:f5:e1:fa:f5:2c:67:ee:22:32:72:e7:19:
                    28:56:2b:7c:2f:c6:fe:61:13:75:94:81:e1:ff:00:
                    06:8c:5b:db:01:38:48:e4:94:e6:51:21:b0:18:c3:
                    8e:17:a4:b1:ae:cb:9b:68:ac:f8:d7:63:a9:d8:2a:
                    69:82:67:e8:54:e9:9e:f2:b5:df:0d:98:2a:77:15:
                    87:6f:c1:84:b5:3f:25:9d:f7:3b:d3:f2:c7:17:f2:
                    ee:a8:b2:a5:cd:a4:e9:05:07:6d:14:43:54:89:04:
                    25:e2:6d:b2:6f:7c:da:57:16:9a:7b:ed:f0:38:8d:
                    a3:ab:42:3d:d6:04:0f:8a:4c:5f:b2:a5:06:0b:be:
                    8f:46:06:9e:bd:f5:d7:f1:96:51:21:ab:1c:7d:e5:
                    a4:75:9c:92:7c:e2:d4:b5:87:e7:2d:d4:ac:87:2b:
                    1a:fd:ce:dd:d9:67:0d:48:db:36:ce:2c:0d:46:aa:
                    60:7b:bf:ee:24:14:f9:8b:35:74:22:b2:58:76:bb:
                    ff:44:34:2f:30:8f:1f:a8:72:7c:e3:ed:f5:08:32:
                    78:d1:df:13:ec:88:8d:04:ad:7e:b7:9e:09:50:ef:
                    f2:0a:98:b3:7f:9d:ae:cc:19:7e:be:a2:ab:ec:9b:
                    ef:03:c1:47:3e:c8:bb:07:6c:91:3e:13:f9:40:87:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:53:AD:B6:3B:68:A6:CE:A2:37:C9:65:FC:98:33:5D:E7:80:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:80:ab:a9:f4:94:3b:7a:b1:77:8e:e8:c3:a1:24:99:ab:
         7c:0a:96:16:78:45:5a:33:b6:38:8b:72:d7:6e:94:ba:40:84:
         c6:db:0b:2e:c1:81:74:30:7d:bc:22:cd:57:34:da:c9:84:08:
         d0:34:6f:98:fc:b1:a2:f1:74:53:93:0f:87:97:3f:62:07:7d:
         17:b6:79:4b:19:97:0c:88:48:8b:5c:7e:63:57:42:77:15:cd:
         b2:73:c5:74:61:e8:31:63:35:a8:07:f7:2b:cf:8e:3b:21:f0:
         89:e8:47:db:c8:4a:5d:47:65:83:73:3a:1f:ae:ec:2e:06:d0:
         36:2c:f1:4f:b9:29:b8:c6:34:42:fa:83:cf:23:8f:b8:0a:7e:
         f3:6e:d1:d3:49:b9:f1:f4:c4:21:af:85:19:08:bc:48:9a:a0:
         d5:0f:0c:9c:fe:1e:4b:f2:bc:1a:c7:6c:cc:64:2c:5e:63:8e:
         41:da:39:4e:ee:2d:2b:62:20:f0:83:e1:05:80:5f:56:2a:4c:
         6b:fb:f5:43:98:6c:0b:c8:19:c5:fe:53:ca:e1:d8:b3:48:a5:
         81:b0:95:be:bf:03:38:c8:10:0b:0a:23:b8:21:0a:27:31:7d:
         c0:98:8c:57:c7:45:38:42:b9:54:fb:42:d8:4b:22:98:6a:ca:
         ec:4e:9e:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmmqsX3F5hxj4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZjI3NjQ5MGQtNmY5Yy00NTJkLWE5OTItNmYzMzkwODhmZmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSP14fr1LGfuIjJy5xkoVit8L8b+YRN1lIHh
/wAGjFvbAThI5JTmUSGwGMOOF6SxrsubaKz412Op2CppgmfoVOme8rXfDZgqdxWH
b8GEtT8lnfc70/LHF/LuqLKlzaTpBQdtFENUiQQl4m2yb3zaVxaae+3wOI2jq0I9
1gQPikxfsqUGC76PRgaevfXX8ZZRIascfeWkdZySfOLUtYfnLdSshysa/c7d2WcN
SNs2ziwNRqpge7/uJBT5izV0IrJYdrv/RDQvMI8fqHJ84+31CDJ40d8T7IiNBK1+
t54JUO/yCpizf52uzBl+vqKr7JvvA8FHPsi7B2yRPhP5QIdORwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGadU622O2imzqI3yWX8mDNd54AEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvODZkNGQ2MTYtM2M3YS0z
MmY4LTgyMWMtY2FkMTZiNjYxNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz36YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1fgKup9JQ7erF3jujDoSSZq3wKlhZ4RVoztjiLctdulLpAhMbbCy7B
gXQwfbwizVc02smECNA0b5j8saLxdFOTD4eXP2IHfRe2eUsZlwyISItcfmNXQncV
zbJzxXRh6DFjNagH9yvPjjsh8InoR9vISl1HZYNzOh+u7C4G0DYs8U+5KbjGNEL6
g88jj7gKfvNu0dNJufH0xCGvhRkIvEiaoNUPDJz+HkvyvBrHbMxkLF5jjkHaOU7u
LStiIPCD4QWAX1YqTGv79UOYbAvIGcX+U8rh2LNIpYGwlb6/AzjIEAsKI7ghCicx
fcCYjFfHRThCuVT7QthLIphqyuxOnt4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:57 2025 by rpki-client