Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/71540ce2-cc40-3c6f-a95c-6edcce91d170.roa
File:                     71540ce2-cc40-3c6f-a95c-6edcce91d170.roa (raw, json)
Hash identifier:          vsh9UNRleWLWEPGQ+2teCGIwxMPAj7s5/+JDnNDtiwE=
Subject key identifier:   0D:03:48:2E:C1:63:EF:FB:B2:6C:00:30:E4:AA:F9:32:B5:50:12:87
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285839847DB5FFE10800617A6E2080
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/71540ce2-cc40-3c6f-a95c-6edcce91d170.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Thu 11 Jul 2030 04:00:00 +0000
asID:                     32233
IP address blocks:        173.252.44.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 20 Apr 2023 14:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:84:7d:b5:ff:e1:08:00:61:7a:6e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Jul 11 04:00:00 2030 GMT
        Subject: CN=68453ee5-cf4d-4f46-aed5-7e1c0801af04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:41:12:c6:4e:d7:88:a9:77:bc:ff:0f:8e:
                    60:2d:f6:aa:12:7d:1a:13:64:6c:45:f4:23:95:0a:
                    df:1f:fb:be:3d:d2:12:aa:f1:7c:76:1b:1c:0a:b1:
                    e1:cb:eb:f6:07:84:c7:1c:57:1b:14:b9:06:fc:a6:
                    4e:4c:a4:c0:f9:b3:63:85:ab:4c:b5:2d:82:cb:1a:
                    eb:08:34:e7:5e:34:97:a6:44:46:29:0b:da:e7:01:
                    df:25:48:11:0b:a3:8f:a9:3e:30:4e:9f:78:a0:a6:
                    b7:50:37:13:6c:4d:21:ea:25:5b:0c:df:3c:aa:3a:
                    0f:6c:45:2d:57:74:79:e7:17:b7:fa:a0:e4:9a:2e:
                    e3:ca:42:28:91:50:85:2d:c9:bd:be:3c:90:29:9b:
                    ba:be:07:c3:c2:ac:84:aa:83:2b:c8:93:c9:7a:64:
                    42:ba:45:c3:24:33:52:6e:c8:37:4a:14:f2:56:0f:
                    99:51:07:28:68:0c:42:3b:33:f9:ad:7a:33:e5:53:
                    7a:4a:3e:ef:a6:29:21:d6:64:aa:04:a7:e5:41:db:
                    b4:72:ce:55:bf:31:04:33:75:db:83:c6:b7:18:eb:
                    6e:17:0f:db:13:bb:61:d6:da:e8:cf:c7:80:2b:66:
                    37:01:52:cb:00:58:14:82:bb:5e:f2:07:56:18:6a:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:48:2E:C1:63:EF:FB:B2:6C:00:30:E4:AA:F9:32:B5:50:12:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/71540ce2-cc40-3c6f-a95c-6edcce91d170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:81:9f:b9:5b:80:3e:07:63:ee:24:fc:ca:2c:92:28:da:37:
         12:33:10:e5:93:e5:57:41:5a:e7:9e:40:45:dc:96:fb:5c:14:
         10:84:eb:13:9a:a6:3b:3c:28:c6:be:b5:e6:f2:19:57:b2:13:
         27:20:34:11:56:66:e9:3c:59:c8:7e:ee:06:3c:ac:82:e8:6a:
         a1:b5:b6:95:e0:2e:a0:f8:6f:fd:76:2b:ef:43:b0:24:bc:4c:
         53:e2:84:96:c6:15:c1:13:bc:67:8c:87:84:2c:4e:f6:6f:25:
         97:a9:78:b6:8f:c1:10:3b:77:a0:18:5c:9c:d4:f1:b6:74:84:
         d1:3f:8e:e0:4e:65:58:4b:7b:88:d6:08:16:df:7f:5d:98:e1:
         01:b8:ea:f3:cb:e5:88:13:95:41:40:e3:0e:8a:15:26:7e:17:
         e9:01:30:61:15:c8:8a:88:90:6e:05:b2:d3:3f:62:13:0b:72:
         a7:05:62:1c:1d:14:20:ba:ca:e2:6a:bc:07:06:9a:a2:79:7d:
         83:b6:7b:d8:5c:ab:0d:a6:da:61:ac:89:43:11:00:7d:ed:a7:
         fb:60:8c:5a:da:26:f6:a9:cc:76:bd:a2:a5:08:5a:1b:d3:3f:
         5b:94:3e:d9:ef:32:a2:6f:01:8e:a3:68:af:9b:32:be:48:5f:
         3f:fd:e1:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDmEfbX/4QgAYXpuIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTIxMDMyNDA0MDAwMFoXDTMwMDcxMTA0MDAwMFowLzEtMCsGA1UEAxMk
Njg0NTNlZTUtY2Y0ZC00ZjQ2LWFlZDUtN2UxYzA4MDFhZjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6dBEsZO14ipd7z/D45gLfaqEn0aE2RsRfQj
lQrfH/u+PdISqvF8dhscCrHhy+v2B4THHFcbFLkG/KZOTKTA+bNjhatMtS2Cyxrr
CDTnXjSXpkRGKQva5wHfJUgRC6OPqT4wTp94oKa3UDcTbE0h6iVbDN88qjoPbEUt
V3R55xe3+qDkmi7jykIokVCFLcm9vjyQKZu6vgfDwqyEqoMryJPJemRCukXDJDNS
bsg3ShTyVg+ZUQcoaAxCOzP5rXoz5VN6Sj7vpikh1mSqBKflQdu0cs5VvzEEM3Xb
g8a3GOtuFw/bE7th1troz8eAK2Y3AVLLAFgUgrte8gdWGGrRuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0DSC7BY+/7smwAMOSq+TK1UBKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvNzE1NDBjZTItY2M0MC0z
YzZmLWE5NWMtNmVkY2NlOTFkMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeBn7lbgD4HY+4k/MoskijaNxIzEOWT5VdBWueeQEXclvtcFBCE6xOa
pjs8KMa+tebyGVeyEycgNBFWZuk8Wch+7gY8rILoaqG1tpXgLqD4b/12K+9DsCS8
TFPihJbGFcETvGeMh4QsTvZvJZepeLaPwRA7d6AYXJzU8bZ0hNE/juBOZVhLe4jW
CBbff12Y4QG46vPL5YgTlUFA4w6KFSZ+F+kBMGEVyIqIkG4FstM/YhMLcqcFYhwd
FCC6yuJqvAcGmqJ5fYO2e9hcqw2m2mGsiUMRAH3tp/tgjFraJvapzHa9oqUIWhvT
P1uUPtnvMqJvAY6jaK+bMr5IXz/94eY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org