Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/fa8ec557-eedd-35e8-9d2b-f9244d1a689f.roa
File:                     fa8ec557-eedd-35e8-9d2b-f9244d1a689f.roa (raw, json)
Hash identifier:          BI5SLsBwVarXwlBBgd2q7+wqh587Ndl5LaJZDenqd4E=
Subject key identifier:   FE:1E:14:0F:C4:B0:E7:C2:E6:D9:79:90:D4:CF:D5:5E:2A:A5:86:26
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584501ECCFCE65CB222244FBF000
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/fa8ec557-eedd-35e8-9d2b-f9244d1a689f.roa
Signing time:             Sun 25 Feb 2024 10:19:02 +0000
ROA not before:           Sun 25 Feb 2024 10:19:02 +0000
ROA not after:            Sat 25 May 2024 09:19:02 +0000
asID:                     0
IP address blocks:        45.41.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 11:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:01:ec:cf:ce:65:cb:22:22:44:fb:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Feb 25 10:19:02 2024 GMT
            Not After : May 25 09:19:02 2024 GMT
        Subject: CN=59409009-4c1e-4c49-b4b7-3357df22b768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:08:e9:d3:d5:b3:c4:67:20:9c:c4:e0:8d:
                    22:40:5f:34:ae:99:5d:63:a9:0a:33:eb:26:06:e9:
                    0b:52:ca:38:81:f6:68:b9:77:ea:0b:66:0d:a5:89:
                    99:dd:eb:86:7f:78:d3:ce:37:bd:80:be:cf:99:a9:
                    33:26:8e:3e:32:fb:af:f9:6a:d8:e0:4b:62:4f:f6:
                    64:bc:38:3b:62:d8:8a:c4:42:e5:26:27:35:04:93:
                    5c:9b:30:f3:2d:14:90:dc:28:5d:3b:65:e0:60:62:
                    ab:63:63:45:a2:55:40:27:e2:4f:b6:ab:23:52:e2:
                    02:04:b4:6d:61:54:db:db:d8:e5:ae:10:12:17:90:
                    74:9b:2e:4c:9b:49:5c:92:de:cd:f5:e7:4a:bc:cb:
                    33:bc:10:17:5f:d8:db:22:3e:ae:ba:fb:f7:17:70:
                    a5:f8:a8:c7:29:55:16:7b:14:76:85:5e:0f:67:69:
                    a2:0a:12:8d:5b:64:cf:72:15:f5:8f:35:28:58:f7:
                    45:75:18:c3:f9:bb:94:ce:b5:04:1e:57:8c:9e:f8:
                    dd:83:98:be:e9:98:b3:4b:fa:d5:a5:12:d4:dd:0e:
                    cc:30:4a:3b:1b:3d:9e:04:b6:54:8c:d5:0a:ce:e1:
                    41:6a:71:85:ac:b4:19:fa:a5:f4:36:e8:2c:74:82:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:14:0F:C4:B0:E7:C2:E6:D9:79:90:D4:CF:D5:5E:2A:A5:86:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/fa8ec557-eedd-35e8-9d2b-f9244d1a689f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:76:6d:ca:6f:cd:e7:32:4a:81:81:36:79:78:c7:fd:dd:
         d4:ec:48:39:bf:09:a1:0c:83:19:ef:39:d7:eb:ce:2f:12:81:
         91:4f:40:46:69:c4:92:df:f7:b4:a0:52:de:6f:fc:7d:25:20:
         f1:03:35:65:f4:85:a2:21:66:07:c2:f0:84:b5:b5:31:6d:41:
         60:e1:c3:17:ce:ae:a8:a5:cb:20:83:22:a7:dc:97:17:45:67:
         07:d4:57:b1:46:e7:61:fe:e7:cc:bf:93:4e:2d:9b:95:3b:05:
         2a:be:c8:3a:e2:4e:ea:11:d8:3f:58:04:4e:d1:67:fd:93:40:
         f9:2d:ab:0b:67:d4:3e:02:38:18:71:57:f6:6c:51:a5:8d:0d:
         00:d6:75:e7:52:90:10:6a:92:b4:b7:ac:90:b5:e5:a2:a2:ee:
         81:0b:c6:b0:07:3d:cd:89:95:a3:e4:47:14:b7:d5:79:56:95:
         26:57:fe:75:4b:df:c4:40:04:ae:2b:60:0b:b0:84:85:52:98:
         fc:9b:6f:98:86:8a:93:e9:c3:8c:c7:e8:10:90:78:c5:ae:f3:
         51:85:7f:90:26:a0:fa:b3:2e:79:ec:1e:38:76:7f:e1:cd:0d:
         41:bd:17:53:14:9e:eb:b3:92:2a:84:5a:3e:13:a8:10:f9:18:
         03:ef:55:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUB7M/OZcsiIkT78AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDkyZGQtNzQ1Ny00MjY1LTgwZWUtYzQ0NzQ5NmE0
MTRjMB4XDTI0MDIyNTEwMTkwMloXDTI0MDUyNTA5MTkwMlowLzEtMCsGA1UEAxMk
NTk0MDkwMDktNGMxZS00YzQ5LWI0YjctMzM1N2RmMjJiNzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV0I6dPVs8RnIJzE4I0iQF80rpldY6kKM+sm
BukLUso4gfZouXfqC2YNpYmZ3euGf3jTzje9gL7PmakzJo4+Mvuv+WrY4EtiT/Zk
vDg7YtiKxELlJic1BJNcmzDzLRSQ3ChdO2XgYGKrY2NFolVAJ+JPtqsjUuICBLRt
YVTb29jlrhASF5B0my5Mm0lckt7N9edKvMszvBAXX9jbIj6uuvv3F3Cl+KjHKVUW
exR2hV4PZ2miChKNW2TPchX1jzUoWPdFdRjD+buUzrUEHleMnvjdg5i+6ZizS/rV
pRLU3Q7MMEo7Gz2eBLZUjNUKzuFBanGFrLQZ+qX0NugsdIKUVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4eFA/EsOfC5tl5kNTP1V4qpYYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIw
OTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3NDk2YTQxNGMvZmE4ZWM1NTctZWVkZC0z
NWU4LTlkMmItZjkyNDRkMWE2ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDkyMDkyZGQtNzQ1Ny00MjY1LTgw
ZWUtYzQ0NzQ5NmE0MTRjLzQ5MjA5MmRkLTc0NTctNDI2NS04MGVlLWM0NDc0OTZh
NDE0Yy5jcmwwHwYDVR0jBBgwFoAU52n324FmfZ3Lk+ns0XF96zrFDHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIwOTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3
NDk2YTQxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSklMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQmdm3Kb83nMkqBgTZ5eMf93dTsSDm/CaEMgxnvOdfrzi8SgZFPQEZp
xJLf97SgUt5v/H0lIPEDNWX0haIhZgfC8IS1tTFtQWDhwxfOrqilyyCDIqfclxdF
ZwfUV7FG52H+58y/k04tm5U7BSq+yDriTuoR2D9YBE7RZ/2TQPktqwtn1D4COBhx
V/ZsUaWNDQDWdedSkBBqkrS3rJC15aKi7oELxrAHPc2JlaPkRxS31XlWlSZX/nVL
38RABK4rYAuwhIVSmPybb5iGipPpw4zH6BCQeMWu81GFf5AmoPqzLnnsHjh2f+HN
DUG9F1MUnuuzkiqEWj4TqBD5GAPvVWY=
-----END CERTIFICATE-----
Generated at Sun Feb 25 16:24:47 2024 by rpki-client on console-fra.rpki-client.org