Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/be1df2ec-207c-3f0e-ada8-e3eb0e15f03f.roa
File:                     be1df2ec-207c-3f0e-ada8-e3eb0e15f03f.roa (raw, json)
Hash identifier:          GlY94V+Qprk/lEPCuG/GjEXeg62Fgr/opPRqkcfcG6w=
Subject key identifier:   ED:6B:3D:45:F2:D2:03:E2:F5:28:FF:9A:9B:C8:A7:0F:FB:62:5B:32
Certificate issuer:       /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial:       010D0C9F4328584324EBBB0BB2CC77DB6A0F8800
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/be1df2ec-207c-3f0e-ada8-e3eb0e15f03f.roa
Signing time:             Thu 07 Sep 2023 13:36:16 +0000
ROA not before:           Thu 07 Sep 2023 13:36:16 +0000
ROA not after:            Wed 06 Dec 2023 14:36:16 +0000
asID:                     35913
IP address blocks:        66.59.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:24:eb:bb:0b:b2:cc:77:db:6a:0f:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
        Validity
            Not Before: Sep  7 13:36:16 2023 GMT
            Not After : Dec  6 14:36:16 2023 GMT
        Subject: CN=3b112ab2-6c3a-40db-8156-971b2035a377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:79:38:e9:ca:c9:02:42:8f:a9:48:70:38:
                    97:ca:5c:89:f9:d5:49:dd:12:16:8a:04:c3:d3:45:
                    af:5b:d1:78:d8:3d:f3:4f:60:f6:2c:f0:e5:3d:6b:
                    e5:02:61:e3:25:28:fb:fb:44:1e:c2:9b:41:74:e3:
                    bb:21:75:e3:eb:41:12:46:ef:aa:58:c4:97:3d:29:
                    8c:d7:9f:53:29:a2:4d:f5:ed:c5:aa:93:b5:1d:06:
                    97:ec:dc:fd:3a:32:b5:83:1d:8e:eb:93:df:50:fb:
                    ca:68:6a:63:c8:80:56:06:53:fe:f3:94:5a:5d:44:
                    b1:55:58:d2:4b:a2:31:53:4f:f7:9c:e0:86:36:1e:
                    d5:ab:ad:95:b6:78:6e:40:73:09:08:1f:1d:93:48:
                    86:32:39:9b:16:d8:11:a5:de:32:47:75:52:a8:c2:
                    c2:58:b1:30:61:7f:cc:79:bb:2a:40:5c:e1:20:f0:
                    9d:be:20:ec:62:b5:03:86:fb:65:25:e3:89:f8:f0:
                    11:cd:6b:60:38:73:fa:e2:4e:28:f5:66:ca:32:bd:
                    f0:20:06:98:c6:9a:bd:67:3c:a8:0b:21:76:f1:6a:
                    ae:7f:d7:13:ad:8d:31:13:aa:c6:de:39:45:fb:85:
                    e8:93:be:fa:24:52:15:99:85:66:5a:b5:e4:94:f5:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6B:3D:45:F2:D2:03:E2:F5:28:FF:9A:9B:C8:A7:0F:FB:62:5B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/be1df2ec-207c-3f0e-ada8-e3eb0e15f03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl

            X509v3 Authority Key Identifier:
                keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:70:0b:d3:6b:6c:c3:00:b6:e4:6c:eb:46:e2:ea:f0:87:b2:
         d5:32:5a:cb:7c:ed:a0:77:e9:6f:ad:61:70:a9:e9:40:c8:d4:
         f8:72:3b:b7:0a:04:46:08:6a:cf:08:39:50:b1:d1:20:a0:5a:
         ff:d4:bb:20:a6:a9:71:76:2d:d6:f8:77:46:53:57:ed:fc:cc:
         5a:db:50:d0:82:a9:17:d5:8a:50:53:ee:3f:e5:df:e7:24:04:
         cd:b3:ab:e8:64:34:6e:85:55:88:a0:89:42:fb:2e:6f:4a:ba:
         4d:bd:0f:d2:23:5f:a3:a1:dc:ba:9f:a0:b4:f9:08:d6:20:59:
         4b:f0:35:ba:b8:97:34:1a:79:2f:dc:ad:c2:75:70:c7:4f:45:
         43:ee:8c:84:d1:0b:2e:cf:52:c4:26:81:a9:9d:1e:3e:28:9f:
         8a:11:78:fd:a4:76:b9:9d:2f:ac:e3:30:40:b9:4f:9c:c1:a2:
         f5:f4:ed:78:50:b9:75:61:e0:73:14:ad:20:5b:59:f1:d7:d2:
         37:11:df:55:60:2d:3f:27:fb:f7:f9:30:63:58:01:6d:95:5f:
         a5:fd:de:fa:ec:8f:0d:28:a1:32:62:27:59:ed:dc:fa:58:da:
         10:72:b8:71:aa:e3:89:d9:11:dc:b0:16:6b:10:f7:67:48:82:
         f0:96:b5:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMk67sLssx322oPiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkM2VmOGMtOGM1Ni00MDU2LWJhM2YtOWI4ZjYzODk1
MmNiMB4XDTIzMDkwNzEzMzYxNloXDTIzMTIwNjE0MzYxNlowLzEtMCsGA1UEAxMk
M2IxMTJhYjItNmMzYS00MGRiLTgxNTYtOTcxYjIwMzVhMzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdd5OOnKyQJCj6lIcDiXylyJ+dVJ3RIWigTD
00WvW9F42D3zT2D2LPDlPWvlAmHjJSj7+0QewptBdOO7IXXj60ESRu+qWMSXPSmM
159TKaJN9e3FqpO1HQaX7Nz9OjK1gx2O65PfUPvKaGpjyIBWBlP+85RaXUSxVVjS
S6IxU0/3nOCGNh7Vq62VtnhuQHMJCB8dk0iGMjmbFtgRpd4yR3VSqMLCWLEwYX/M
ebsqQFzhIPCdviDsYrUDhvtlJeOJ+PARzWtgOHP64k4o9WbKMr3wIAaYxpq9Zzyo
CyF28Wquf9cTrY0xE6rG3jlF+4Xok776JFIVmYVmWrXklPXQpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1rPUXy0gPi9Sj/mpvIpw/7YlsyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81M2Qz
ZWY4Yy04YzU2LTQwNTYtYmEzZi05YjhmNjM4OTUyY2IvYmUxZGYyZWMtMjA3Yy0z
ZjBlLWFkYTgtZTNlYjBlMTVmMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTNkM2VmOGMtOGM1Ni00MDU2LWJh
M2YtOWI4ZjYzODk1MmNiLzUzZDNlZjhjLThjNTYtNDA1Ni1iYTNmLTliOGY2Mzg5
NTJjYi5jcmwwHwYDVR0jBBgwFoAUOBFcc6hv1mZNMZddX0pA+JuQbUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81M2QzZWY4Yy04YzU2LTQwNTYtYmEzZi05Yjhm
NjM4OTUyY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjvEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElwC9NrbMMAtuRs60bi6vCHstUyWst87aB36W+tYXCp6UDI1PhyO7cK
BEYIas8IOVCx0SCgWv/UuyCmqXF2Ldb4d0ZTV+38zFrbUNCCqRfVilBT7j/l3+ck
BM2zq+hkNG6FVYigiUL7Lm9Kuk29D9IjX6Oh3LqfoLT5CNYgWUvwNbq4lzQaeS/c
rcJ1cMdPRUPujITRCy7PUsQmgamdHj4on4oReP2kdrmdL6zjMEC5T5zBovX07XhQ
uXVh4HMUrSBbWfHX0jcR31VgLT8n+/f5MGNYAW2VX6X93vrsjw0ooTJiJ1nt3PpY
2hByuHGq44nZEdywFmsQ92dIgvCWtdA=
-----END CERTIFICATE-----
Generated at Thu Sep 28 22:51:19 2023 by rpki-client on console-fra.rpki-client.org