Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db927d63-c619-385f-a595-e85548da1e75.roa
File:                     db927d63-c619-385f-a595-e85548da1e75.roa (raw, json)
Hash identifier:          F3e69GLrTRvDfoXCbRKPdCMlOz03VF00mc2kHbT4EOg=
Subject key identifier:   13:68:89:B8:D5:04:00:DA:BD:29:49:21:D3:E3:64:08:73:A5:B8:20
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584510D6895926F5B2357784BB00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db927d63-c619-385f-a595-e85548da1e75.roa
Signing time:             Fri 01 Mar 2024 18:31:16 +0000
ROA not before:           Fri 01 Mar 2024 18:31:16 +0000
ROA not after:            Thu 30 May 2024 17:31:16 +0000
asID:                     834
IP address blocks:        66.78.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 17:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d6:89:59:26:f5:b2:35:77:84:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  1 18:31:16 2024 GMT
            Not After : May 30 17:31:16 2024 GMT
        Subject: CN=95418d63-7914-451d-bfb3-cdd3e919f81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:3e:e9:72:0f:76:2e:e2:20:2e:fa:1b:5e:
                    d6:ab:e2:f1:1e:1a:05:be:92:22:ed:81:a2:31:10:
                    ad:cc:11:70:47:6b:3b:fd:a7:5d:9e:07:61:56:55:
                    83:70:39:e7:b1:b8:5e:02:c1:59:5e:65:8d:33:85:
                    f2:54:29:d4:ad:b2:d9:48:ae:f1:21:68:7c:ab:0e:
                    0b:8a:52:bc:da:9e:c9:f6:fc:17:2c:18:6f:d3:ca:
                    9c:11:33:c4:eb:ac:4b:9c:71:51:2d:42:24:5a:e5:
                    b9:05:15:53:d4:46:49:d2:6c:71:cc:d5:f2:31:f5:
                    c4:05:f2:e3:d9:29:98:29:46:f5:ff:60:ac:59:55:
                    9c:6a:fe:0f:6f:70:0e:3a:92:0f:05:b4:74:13:b5:
                    55:4d:c7:28:3e:3d:49:06:c6:8b:8c:19:0c:a6:fd:
                    fd:32:51:bd:a3:f5:ad:26:a1:8d:7c:ac:87:82:eb:
                    18:c8:ed:56:bb:1c:35:90:ae:80:ba:98:01:92:99:
                    60:87:a3:55:41:5f:4b:7a:c8:1b:33:2d:3b:70:1d:
                    1a:9c:22:05:01:e7:2c:7f:7f:bb:a3:64:b4:4b:e9:
                    5c:0a:c8:09:0c:42:34:e1:f1:85:01:c6:72:27:ba:
                    eb:5a:5b:b5:70:e7:91:48:69:f3:2c:84:98:fa:4a:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:89:B8:D5:04:00:DA:BD:29:49:21:D3:E3:64:08:73:A5:B8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db927d63-c619-385f-a595-e85548da1e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:e4:8c:bc:37:02:95:fa:f7:7a:27:01:b9:f3:b0:15:e5:72:
         dd:be:c4:65:98:cc:8b:48:31:de:a5:1a:38:af:37:7f:6a:d6:
         99:55:70:f1:62:71:14:ca:aa:95:f9:b1:49:0f:2d:ba:26:51:
         df:2e:cc:df:ae:13:db:01:f3:2c:e4:b5:cc:08:74:6b:63:4e:
         4b:0f:76:aa:c9:60:57:b9:05:fa:1b:27:66:ec:b2:3b:7e:68:
         c2:e6:43:5f:75:7c:77:3d:38:c1:59:6a:49:00:64:84:bb:b5:
         f4:89:b9:99:d6:12:77:d5:25:7c:f8:67:58:27:53:fc:0e:fa:
         d2:e8:a9:af:a7:9b:93:8c:d0:d0:18:0c:34:35:d4:06:11:0f:
         d9:69:93:e5:b8:85:14:b7:92:71:6e:d3:2e:55:90:ea:3f:21:
         76:4d:38:6b:92:d2:ba:40:20:5b:7b:11:15:22:a4:51:f6:d5:
         3e:bc:b4:37:ef:b4:90:70:df:df:96:2d:d6:16:a9:bf:c3:ab:
         90:9b:a7:f9:5b:51:28:72:39:1e:13:3c:12:8b:75:ff:ce:7d:
         19:8e:b2:e1:6f:3f:5b:90:03:e7:c3:06:13:9e:c7:7c:c8:ce:
         31:78:f2:50:29:e8:21:ae:2e:4b:b6:5e:09:72:66:40:d9:54:
         78:c2:a2:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQ1olZJvWyNXeEuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMwMTE4MzExNloXDTI0MDUzMDE3MzExNlowLzEtMCsGA1UEAxMk
OTU0MThkNjMtNzkxNC00NTFkLWJmYjMtY2RkM2U5MTlmODFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4M+6XIPdi7iIC76G17Wq+LxHhoFvpIi7YGi
MRCtzBFwR2s7/addngdhVlWDcDnnsbheAsFZXmWNM4XyVCnUrbLZSK7xIWh8qw4L
ilK82p7J9vwXLBhv08qcETPE66xLnHFRLUIkWuW5BRVT1EZJ0mxxzNXyMfXEBfLj
2SmYKUb1/2CsWVWcav4Pb3AOOpIPBbR0E7VVTccoPj1JBsaLjBkMpv39MlG9o/Wt
JqGNfKyHgusYyO1Wuxw1kK6AupgBkplgh6NVQV9LesgbMy07cB0anCIFAecsf3+7
o2S0S+lcCsgJDEI04fGFAcZyJ7rrWlu1cOeRSGnzLISY+kpuHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNoibjVBADavSlJIdPjZAhzpbggMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGI5MjdkNjMtYzYxOS0z
ODVmLWE1OTUtZTg1NTQ4ZGExZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAODkjLw3ApX693onAbnzsBXlct2+xGWYzItIMd6lGjivN39q1plVcPFi
cRTKqpX5sUkPLbomUd8uzN+uE9sB8yzktcwIdGtjTksPdqrJYFe5BfobJ2bssjt+
aMLmQ191fHc9OMFZakkAZIS7tfSJuZnWEnfVJXz4Z1gnU/wO+tLoqa+nm5OM0NAY
DDQ11AYRD9lpk+W4hRS3knFu0y5VkOo/IXZNOGuS0rpAIFt7ERUipFH21T68tDfv
tJBw39+WLdYWqb/Dq5Cbp/lbUShyOR4TPBKLdf/OfRmOsuFvP1uQA+fDBhOex3zI
zjF48lAp6CGuLku2XglyZkDZVHjCopw=
-----END CERTIFICATE-----
Generated at Fri Mar 15 22:20:50 2024 by rpki-client on console-ams.rpki-client.org