Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8c64ef5c-5d9a-32dd-a130-9503f6dc5135.roa
File:                     8c64ef5c-5d9a-32dd-a130-9503f6dc5135.roa (raw, json)
Hash identifier:          DXIkjXTGwSruAyCq+vgo3NQyFFkCpbnlOl4VzOFoixw=
Subject key identifier:   0F:FF:83:97:95:A8:5A:AE:A5:DE:B3:26:86:32:D8:4A:57:43:37:F9
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F43285846943F8ACCE3B04EA2F4C42380
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8c64ef5c-5d9a-32dd-a130-9503f6dc5135.roa
Signing time:             Thu 18 Jul 2024 13:00:33 +0000
ROA not before:           Thu 18 Jul 2024 13:00:33 +0000
ROA not after:            Wed 16 Oct 2024 13:00:33 +0000
asID:                     397881
IP address blocks:        23.142.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:3f:8a:cc:e3:b0:4e:a2:f4:c4:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Jul 18 13:00:33 2024 GMT
            Not After : Oct 16 13:00:33 2024 GMT
        Subject: CN=a4f7456b-120c-4347-8a4a-36b6415303fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:3a:f1:dd:6d:c0:19:54:d3:9c:20:ce:1e:
                    b0:5b:76:e9:4e:78:30:32:f4:d5:4c:5e:58:60:b0:
                    55:c1:63:43:00:56:60:18:ba:c3:02:23:91:7f:e9:
                    d8:56:45:cf:de:69:ad:0e:8e:1f:4a:66:c5:86:be:
                    e1:39:c5:6a:0d:9c:75:b7:6c:33:a6:c7:62:6e:ba:
                    15:bb:f2:45:c7:2c:d0:9d:8d:f2:2b:89:16:09:96:
                    57:63:af:03:19:7b:10:07:1c:34:c4:7c:7d:a9:bf:
                    3b:c2:cf:4a:88:38:74:db:1c:83:f0:ce:4e:13:bd:
                    ce:33:35:cd:ac:7f:c9:eb:05:f9:01:76:7d:da:c6:
                    75:96:00:43:b9:7d:ed:20:48:69:af:6b:ed:77:ea:
                    e1:04:13:1f:60:28:d5:cf:9b:06:18:ae:d9:14:c6:
                    6f:57:5f:40:db:5e:df:4a:99:58:e2:f0:d4:56:c9:
                    17:79:e4:57:6b:24:c3:69:d1:ff:60:86:6e:c7:f1:
                    e1:ee:0e:04:62:f1:8d:25:4d:41:f0:c8:4d:77:0c:
                    a6:a8:62:6b:ed:f5:7c:3d:1d:3a:2a:ce:74:7b:d2:
                    a5:7f:d5:87:c5:d5:48:a2:c4:0a:0e:81:c9:1b:d8:
                    c9:a0:5b:e0:70:60:b5:eb:d3:3a:b6:ed:d3:98:e9:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:83:97:95:A8:5A:AE:A5:DE:B3:26:86:32:D8:4A:57:43:37:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8c64ef5c-5d9a-32dd-a130-9503f6dc5135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:39:e8:7a:3d:a9:1f:82:0d:2b:9e:04:06:aa:ee:24:83:
         d7:e6:fc:77:f7:7e:98:94:3e:db:04:b1:67:77:7b:cd:22:72:
         ac:17:12:dd:bf:8c:e9:64:c9:34:1a:cb:d5:f7:02:ea:6c:8a:
         4b:b1:c9:77:2d:9b:0b:98:12:b4:5e:86:8d:d4:fb:51:9e:e9:
         91:5f:20:92:c2:bc:4e:64:32:5f:4f:61:ab:d4:b9:ef:9a:bf:
         15:91:6b:43:f9:d5:58:bc:d4:d2:dc:72:e9:fc:2a:dd:c5:48:
         e2:ab:26:dd:3c:46:d2:2b:13:39:70:ab:d2:eb:8c:ef:df:df:
         7d:2f:f1:b4:59:61:da:57:8d:4f:41:d4:34:20:d3:aa:da:37:
         97:a9:9f:50:6b:8f:1b:bd:bf:59:69:33:4b:7b:94:46:34:08:
         d9:37:0a:60:17:07:c9:83:c3:fe:c5:30:d9:28:95:71:5a:4f:
         42:c4:7d:2e:6b:40:9d:1f:24:a8:53:de:52:d7:32:bd:a7:c8:
         0a:be:6b:35:87:c0:76:bf:9d:61:b7:04:ba:62:a8:86:a4:bc:
         b9:2b:a2:6e:28:6a:9f:d7:87:f4:67:43:13:4c:7a:25:91:e9:
         c2:06:63:7a:31:ca:7e:10:e7:f9:27:9f:3b:76:3b:88:a8:2e:
         0a:be:a9:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaUP4rM47BOovTEI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE1YjM2M2EtOGY1OS00NmNhLWJhZjQtZTZjYjRiOGZk
ZjIwMB4XDTI0MDcxODEzMDAzM1oXDTI0MTAxNjEzMDAzM1owLzEtMCsGA1UEAxMk
YTRmNzQ1NmItMTIwYy00MzQ3LThhNGEtMzZiNjQxNTMwM2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07I68d1twBlU05wgzh6wW3bpTngwMvTVTF5Y
YLBVwWNDAFZgGLrDAiORf+nYVkXP3mmtDo4fSmbFhr7hOcVqDZx1t2wzpsdibroV
u/JFxyzQnY3yK4kWCZZXY68DGXsQBxw0xHx9qb87ws9KiDh02xyD8M5OE73OMzXN
rH/J6wX5AXZ92sZ1lgBDuX3tIEhpr2vtd+rhBBMfYCjVz5sGGK7ZFMZvV19A217f
SplY4vDUVskXeeRXayTDadH/YIZux/Hh7g4EYvGNJU1B8MhNdwymqGJr7fV8PR06
Ks50e9Klf9WHxdVIosQKDoHJG9jJoFvgcGC169M6tu3TmOmTPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA//g5eVqFqupd6zJoYy2EpXQzf5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTVi
MzYzYS04ZjU5LTQ2Y2EtYmFmNC1lNmNiNGI4ZmRmMjAvOGM2NGVmNWMtNWQ5YS0z
MmRkLWExMzAtOTUwM2Y2ZGM1MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDE1YjM2M2EtOGY1OS00NmNhLWJh
ZjQtZTZjYjRiOGZkZjIwLzQxNWIzNjNhLThmNTktNDZjYS1iYWY0LWU2Y2I0Yjhm
ZGYyMC5jcmwwHwYDVR0jBBgwFoAUOdnRoT2srt8jFv6bIN3QiuEZEZowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80MTViMzYzYS04ZjU5LTQ2Y2EtYmFmNC1lNmNi
NGI4ZmRmMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuhOeh6Pakfgg0rngQGqu4kg9fm/Hf3fpiUPtsEsWd3e80icqwXEt2/
jOlkyTQay9X3AupsikuxyXctmwuYErReho3U+1Ge6ZFfIJLCvE5kMl9PYavUue+a
vxWRa0P51Vi81NLccun8Kt3FSOKrJt08RtIrEzlwq9LrjO/f330v8bRZYdpXjU9B
1DQg06raN5epn1Brjxu9v1lpM0t7lEY0CNk3CmAXB8mDw/7FMNkolXFaT0LEfS5r
QJ0fJKhT3lLXMr2nyAq+azWHwHa/nWG3BLpiqIakvLkrom4oap/Xh/RnQxNMeiWR
6cIGY3oxyn4Q5/knnzt2O4ioLgq+qRo=
-----END CERTIFICATE-----
Generated at Fri Sep 20 12:50:46 2024 by rpki-client on console-fra.rpki-client.org