Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f337206e-aaf5-32f5-b553-39fe37204abe.roa
File:                     f337206e-aaf5-32f5-b553-39fe37204abe.roa (raw, json)
Hash identifier:          Hwh4syXAH61cTk+FM2nSPegQ9Du0NzmN2MxP7owbnn0=
Subject key identifier:   D5:70:27:73:6D:AC:6E:62:34:4B:F1:BA:34:C1:F4:AC:49:91:CE:5F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846E018BFD2A04AAFECCF8C1B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f337206e-aaf5-32f5-b553-39fe37204abe.roa
Signing time:             Wed 14 Aug 2024 17:03:57 +0000
ROA not before:           Wed 14 Aug 2024 17:03:57 +0000
ROA not after:            Tue 12 Nov 2024 18:03:57 +0000
asID:                     7922
IP address blocks:        198.89.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e0:18:bf:d2:a0:4a:af:ec:cf:8c:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 17:03:57 2024 GMT
            Not After : Nov 12 18:03:57 2024 GMT
        Subject: CN=d808af1b-0287-483f-84cd-581fd392580d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:66:d9:b6:d3:a4:93:59:f5:24:9d:ca:50:
                    53:0b:64:f0:5a:cc:7c:5d:80:3f:0f:9b:34:95:33:
                    d4:d0:36:1a:34:30:df:d7:f0:5a:8f:0a:e7:33:48:
                    17:19:a1:8c:0d:7b:42:5a:cb:1f:7b:52:a6:3c:32:
                    1c:49:6e:e6:ff:ee:bd:3a:be:08:31:d2:ad:ec:70:
                    2c:28:f3:4c:d9:50:c9:2d:74:d9:a3:4c:c6:d6:22:
                    cc:d4:b2:0d:c3:69:f6:65:15:33:35:70:2a:a3:cd:
                    9c:e5:25:5c:1a:57:38:4b:ab:a3:dd:e2:f7:50:c6:
                    e5:f1:bd:ba:28:56:c3:be:98:fe:62:66:1b:9c:d0:
                    e3:27:de:e4:65:ba:80:68:59:e8:61:d0:7a:0c:fe:
                    c2:52:5e:ed:4c:67:58:34:e9:28:00:de:d4:77:33:
                    56:d0:24:35:64:fe:50:78:00:35:1c:8f:da:6e:ae:
                    5f:cd:b8:ec:e6:c4:38:36:28:b2:5b:16:39:4e:d8:
                    77:e6:a5:a7:7d:8f:2b:c7:ab:0d:90:f9:74:d9:0d:
                    92:f7:3b:5f:71:55:e9:14:e3:af:96:eb:64:17:d6:
                    3c:50:24:3a:69:48:aa:01:3f:1d:af:14:0e:5d:a0:
                    82:4a:85:18:0d:db:8e:23:f2:7a:76:c9:27:87:be:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:27:73:6D:AC:6E:62:34:4B:F1:BA:34:C1:F4:AC:49:91:CE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f337206e-aaf5-32f5-b553-39fe37204abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:f8:e4:8d:b0:20:fa:5f:48:84:ca:19:f4:8f:15:3a:23:
         28:26:83:bc:ba:ea:af:c2:cc:31:0e:7d:d0:83:76:8c:78:8d:
         ae:41:fd:7b:f6:63:36:d5:0f:02:b2:1f:42:47:d4:95:da:a9:
         55:10:86:3d:c7:54:12:d5:c0:53:d3:d5:4f:b4:45:f0:50:39:
         97:1e:bf:92:33:89:ac:0f:54:2c:42:b3:40:37:b3:83:e5:c9:
         4f:d8:61:05:7d:a1:a1:90:35:3e:26:31:be:34:97:9a:69:1d:
         17:f5:d1:fa:49:55:bd:b2:b5:ce:92:17:9e:39:94:70:c8:2f:
         d7:26:c8:89:69:ed:c0:eb:6f:04:7c:84:d8:5b:b7:2e:95:59:
         85:8f:a9:a8:91:a0:96:63:83:8a:af:29:a4:61:dc:db:ee:cb:
         ef:85:20:c9:c3:20:92:54:39:19:2c:c0:9e:5a:34:a9:28:95:
         f6:11:f3:dc:0a:fb:3e:63:1e:b3:58:1d:31:0d:61:90:a3:9f:
         a5:50:92:5e:d8:c9:70:c2:a1:4b:03:33:3a:c6:e5:d4:f2:e5:
         ec:0a:2a:2a:92:c8:15:9e:e2:6c:b7:49:83:a4:0a:81:d3:fa:
         e8:53:9a:ca:af:f5:11:c7:da:32:83:64:17:b5:43:e0:df:be:
         dc:99:7d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbgGL/SoEqv7M+MGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDgxNDE3MDM1N1oXDTI0MTExMjE4MDM1N1owLzEtMCsGA1UEAxMk
ZDgwOGFmMWItMDI4Ny00ODNmLTg0Y2QtNTgxZmQzOTI1ODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlThm2bbTpJNZ9SSdylBTC2TwWsx8XYA/D5s0
lTPU0DYaNDDf1/BajwrnM0gXGaGMDXtCWssfe1KmPDIcSW7m/+69Or4IMdKt7HAs
KPNM2VDJLXTZo0zG1iLM1LINw2n2ZRUzNXAqo82c5SVcGlc4S6uj3eL3UMbl8b26
KFbDvpj+YmYbnNDjJ97kZbqAaFnoYdB6DP7CUl7tTGdYNOkoAN7UdzNW0CQ1ZP5Q
eAA1HI/abq5fzbjs5sQ4NiiyWxY5Tth35qWnfY8rx6sNkPl02Q2S9ztfcVXpFOOv
lutkF9Y8UCQ6aUiqAT8drxQOXaCCSoUYDduOI/J6dsknh76R5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVwJ3NtrG5iNEvxujTB9KxJkc5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjMzNzIwNmUtYWFmNS0z
MmY1LWI1NTMtMzlmZTM3MjA0YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxllkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2v+OSNsCD6X0iEyhn0jxU6Iygmg7y66q/CzDEOfdCDdox4ja5B/Xv2
YzbVDwKyH0JH1JXaqVUQhj3HVBLVwFPT1U+0RfBQOZcev5IziawPVCxCs0A3s4Pl
yU/YYQV9oaGQNT4mMb40l5ppHRf10fpJVb2ytc6SF545lHDIL9cmyIlp7cDrbwR8
hNhbty6VWYWPqaiRoJZjg4qvKaRh3Nvuy++FIMnDIJJUORkswJ5aNKkolfYR89wK
+z5jHrNYHTENYZCjn6VQkl7YyXDCoUsDMzrG5dTy5ewKKiqSyBWe4my3SYOkCoHT
+uhTmsqv9RHH2jKDZBe1Q+DfvtyZffU=
-----END CERTIFICATE-----
Generated at Tue Aug 27 23:21:43 2024 by rpki-client on console-fra.rpki-client.org