Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43517216-fcdc-3b81-9086-7732d1c1f399.roa
File:                     43517216-fcdc-3b81-9086-7732d1c1f399.roa (raw, json)
Hash identifier:          J6oEvwZFCi5F55Gu0D5x4DBIUMqlSQbxJo6dbF9PUbQ=
Subject key identifier:   09:6C:59:FC:0A:6B:9C:81:79:4D:6E:D3:75:34:BB:83:3A:6B:43:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584537CA6EA59E8C2722EDF62300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43517216-fcdc-3b81-9086-7732d1c1f399.roa
Signing time:             Fri 15 Mar 2024 17:23:25 +0000
ROA not before:           Fri 15 Mar 2024 17:23:25 +0000
ROA not after:            Thu 13 Jun 2024 17:23:25 +0000
asID:                     21859
IP address blocks:        173.211.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 17:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:ca:6e:a5:9e:8c:27:22:ed:f6:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 15 17:23:25 2024 GMT
            Not After : Jun 13 17:23:25 2024 GMT
        Subject: CN=726fbb09-ed86-4679-aed9-1e7b095e5cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:e5:3b:25:14:c5:ab:b7:7a:e5:e9:9e:bc:
                    99:27:8b:74:53:5a:39:52:77:5d:4b:ea:ad:50:f9:
                    6b:ce:dd:4a:7e:84:f2:7a:be:91:ae:a4:c5:ac:3f:
                    44:27:65:7f:a9:9b:0e:20:78:b2:6b:f3:49:ac:22:
                    bf:fd:7e:ff:eb:09:3e:fd:42:14:a7:55:36:55:b8:
                    46:20:4c:07:ad:c7:e2:25:53:94:eb:d8:99:e3:eb:
                    6a:bf:b4:4a:f9:d0:56:4e:5a:25:b7:4e:f1:90:06:
                    92:60:86:1b:f3:cd:18:c5:1a:db:d0:37:78:57:19:
                    d5:08:e9:c5:66:37:47:81:95:1e:19:91:a4:08:9d:
                    9d:2b:c8:df:4b:fa:ad:9e:d8:a5:63:0b:58:83:e1:
                    08:e6:ce:39:18:f3:a1:6f:7b:f2:75:15:05:85:69:
                    e4:21:5b:90:d6:f9:e8:91:7b:06:7a:d0:9d:1c:e4:
                    c8:2f:ab:12:40:2a:a7:97:46:8a:3d:26:d9:32:8c:
                    87:9d:6f:f1:4f:3d:dd:28:a6:8a:ff:df:7c:51:49:
                    b8:9f:29:e6:d2:e0:4b:f1:9e:47:91:cf:cd:24:e4:
                    9e:40:c2:40:7d:33:5f:88:47:93:15:2b:aa:94:98:
                    75:c1:41:0c:ac:09:d8:35:9e:32:31:0a:33:ab:ac:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:59:FC:0A:6B:9C:81:79:4D:6E:D3:75:34:BB:83:3A:6B:43:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/43517216-fcdc-3b81-9086-7732d1c1f399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:93:6b:ca:78:10:8c:b7:5a:d8:16:cd:cd:ab:da:23:a6:
         81:e8:2a:b7:07:76:b7:93:c8:25:ec:de:66:34:05:8e:39:58:
         aa:a8:98:f2:20:6f:10:22:7f:4b:17:17:cd:99:7a:52:e4:5d:
         11:b5:05:8c:8f:1e:2f:8a:e0:8f:c7:de:79:fe:c8:75:a4:4c:
         69:a7:86:2f:40:d4:68:f2:9c:1f:80:71:5b:ba:4e:97:c6:96:
         ef:5a:7a:56:d4:d3:1a:d0:5b:ff:60:dc:62:89:ba:d4:ef:51:
         cd:af:df:f7:e9:c4:75:60:3a:87:54:5b:8d:35:ea:10:97:da:
         0d:1b:48:e5:65:07:2a:f0:28:db:89:ec:e9:af:34:f3:0e:40:
         2d:dd:81:92:7b:1f:63:81:7f:a3:cf:88:93:f4:af:7e:36:ef:
         90:52:e8:3c:10:0e:b2:ae:19:be:53:49:08:14:ba:77:de:74:
         3f:b5:9a:34:30:7e:dd:17:de:3d:98:5c:c9:66:5a:96:d9:51:
         cb:d8:5c:60:06:60:eb:9c:25:91:f8:30:71:11:ea:67:64:7c:
         1f:33:a3:dd:5e:8e:f7:82:ff:66:9a:1a:10:6d:d4:3e:78:14:
         bf:9d:f5:3a:dd:9d:44:32:15:e7:ff:76:4c:c6:4d:ce:1b:af:
         43:e5:8b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU3ym6lnownIu32IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMxNTE3MjMyNVoXDTI0MDYxMzE3MjMyNVowLzEtMCsGA1UEAxMk
NzI2ZmJiMDktZWQ4Ni00Njc5LWFlZDktMWU3YjA5NWU1Y2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BTlOyUUxau3euXpnryZJ4t0U1o5UnddS+qt
UPlrzt1KfoTyer6RrqTFrD9EJ2V/qZsOIHiya/NJrCK//X7/6wk+/UIUp1U2VbhG
IEwHrcfiJVOU69iZ4+tqv7RK+dBWTlolt07xkAaSYIYb880YxRrb0Dd4VxnVCOnF
ZjdHgZUeGZGkCJ2dK8jfS/qtntilYwtYg+EI5s45GPOhb3vydRUFhWnkIVuQ1vno
kXsGetCdHOTIL6sSQCqnl0aKPSbZMoyHnW/xTz3dKKaK/998UUm4nynm0uBL8Z5H
kc/NJOSeQMJAfTNfiEeTFSuqlJh1wUEMrAnYNZ4yMQozq6zlFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlsWfwKa5yBeU1u03U0u4M6a0P2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDM1MTcyMTYtZmNkYy0z
YjgxLTkwODYtNzczMmQxYzFmMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKp/k2vKeBCMt1rYFs3Nq9ojpoHoKrcHdreTyCXs3mY0BY45WKqomPIg
bxAif0sXF82ZelLkXRG1BYyPHi+K4I/H3nn+yHWkTGmnhi9A1GjynB+AcVu6TpfG
lu9aelbU0xrQW/9g3GKJutTvUc2v3/fpxHVgOodUW4016hCX2g0bSOVlByrwKNuJ
7OmvNPMOQC3dgZJ7H2OBf6PPiJP0r34275BS6DwQDrKuGb5TSQgUunfedD+1mjQw
ft0X3j2YXMlmWpbZUcvYXGAGYOucJZH4MHER6mdkfB8zo91ejveC/2aaGhBt1D54
FL+d9TrdnUQyFef/dkzGTc4br0Pli7o=
-----END CERTIFICATE-----
Generated at Mon Apr 15 18:12:59 2024 by rpki-client on console-fra.rpki-client.org