Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94c28d77-1732-36a7-bf6e-483a90946f55.roa
File:                     94c28d77-1732-36a7-bf6e-483a90946f55.roa (raw, json)
Hash identifier:          aakqNb1KY6JUUT+jX9MAlAU1kkS6Nn+gEPpO131NXM8=
Subject key identifier:   8E:8D:56:7E:87:98:1A:68:A8:2A:75:17:83:81:3A:1E:76:E8:CB:C4
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285844AD056EDE0E3483C7598C2110
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94c28d77-1732-36a7-bf6e-483a90946f55.roa
Signing time:             Fri 26 Jan 2024 00:24:56 +0000
ROA not before:           Fri 26 Jan 2024 00:24:56 +0000
ROA not after:            Wed 24 Apr 2024 23:24:56 +0000
asID:                     30644
IP address blocks:        141.195.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 12:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ad:05:6e:de:0e:34:83:c7:59:8c:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan 26 00:24:56 2024 GMT
            Not After : Apr 24 23:24:56 2024 GMT
        Subject: CN=b296c6b0-ff97-4432-bfdd-0264394f7313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:c3:e5:31:46:af:2c:01:a7:fa:fe:9c:b1:
                    33:d0:89:7f:40:a2:04:0a:fc:4c:f7:32:3f:ea:0b:
                    35:7f:3c:23:28:fd:fe:be:dd:ee:47:74:ff:e3:e3:
                    32:49:a9:be:8e:30:28:3b:f0:1b:ef:cb:33:a0:a6:
                    13:f2:d6:10:d0:dd:90:09:71:6b:58:7b:53:96:b1:
                    7f:ed:89:58:25:9a:2d:e0:af:21:9c:16:14:de:97:
                    57:12:6e:42:62:f8:d0:db:ac:fc:90:1d:b1:0e:43:
                    7d:c7:98:6b:ed:f3:dd:9a:cc:c3:71:8c:80:68:81:
                    9f:c3:40:ed:c6:dd:04:ff:04:1b:80:d0:91:26:da:
                    e1:eb:2a:7e:d8:62:3d:08:48:89:52:c7:e7:f4:80:
                    b0:08:39:13:85:eb:61:ba:c5:de:dc:75:9c:a9:43:
                    96:78:2c:27:50:19:af:7e:62:44:f4:70:17:ea:27:
                    92:86:aa:5c:23:48:55:cc:09:74:3f:46:eb:c5:36:
                    b8:aa:c4:78:0a:50:b9:f6:d9:4e:73:8b:a0:c8:82:
                    ee:ce:79:91:82:87:9f:53:ee:8d:90:be:dd:28:8c:
                    66:5e:c2:d3:e3:1c:c7:d3:ed:bc:1f:de:a5:45:fc:
                    74:82:06:a0:25:c4:db:9d:0e:e5:cc:f0:99:0a:2e:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:56:7E:87:98:1A:68:A8:2A:75:17:83:81:3A:1E:76:E8:CB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/94c28d77-1732-36a7-bf6e-483a90946f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:46:5e:e0:dd:05:8a:f0:fa:f7:10:b0:cf:f3:8d:9a:c1:17:
         83:7d:a8:20:13:10:a8:0b:80:66:60:89:d6:70:ff:84:9f:69:
         43:8c:c3:fb:ef:94:7a:8b:29:a2:8c:af:28:7e:db:d1:9a:35:
         4c:83:7c:5c:d5:da:87:46:89:38:30:cb:2e:59:53:d6:be:31:
         f5:02:60:f3:2f:dd:f8:8a:4f:42:bf:29:dd:0a:a5:1f:db:3c:
         5b:21:cc:2e:e2:56:1f:46:02:ff:44:40:a8:1e:2e:99:d5:ee:
         f4:c6:b3:47:32:4c:6a:4e:70:b0:a4:5b:6f:7b:ef:14:7d:6b:
         20:cd:9a:72:9d:b9:cd:37:3e:99:fd:76:07:85:c2:bd:35:b8:
         38:77:f0:b7:06:9a:6e:0e:2c:dd:c0:6c:ab:07:20:34:56:51:
         59:d5:d9:29:c7:42:a2:e8:dc:fc:f8:ca:26:c3:9e:5d:e1:2f:
         25:26:0e:82:c8:19:fb:5b:60:f4:33:67:d3:8f:f6:81:16:39:
         4b:02:e0:fa:93:2e:f3:e2:7f:e8:b0:fb:08:6a:66:25:1b:6d:
         2b:01:0c:f1:1a:a7:87:6b:b4:8e:d8:b1:c0:b2:cd:52:fa:77:
         06:42:0e:e2:15:98:cc:f5:5c:e6:a1:31:ca:c0:9f:95:48:31:
         a1:30:5a:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEStBW7eDjSDx1mMIRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI0MDEyNjAwMjQ1NloXDTI0MDQyNDIzMjQ1NlowLzEtMCsGA1UEAxMk
YjI5NmM2YjAtZmY5Ny00NDMyLWJmZGQtMDI2NDM5NGY3MzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJnD5TFGrywBp/r+nLEz0Il/QKIECvxM9zI/
6gs1fzwjKP3+vt3uR3T/4+MySam+jjAoO/Ab78szoKYT8tYQ0N2QCXFrWHtTlrF/
7YlYJZot4K8hnBYU3pdXEm5CYvjQ26z8kB2xDkN9x5hr7fPdmszDcYyAaIGfw0Dt
xt0E/wQbgNCRJtrh6yp+2GI9CEiJUsfn9ICwCDkThethusXe3HWcqUOWeCwnUBmv
fmJE9HAX6ieShqpcI0hVzAl0P0brxTa4qsR4ClC59tlOc4ugyILuznmRgoefU+6N
kL7dKIxmXsLT4xzH0+28H96lRfx0ggagJcTbnQ7lzPCZCi7KZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6NVn6HmBpoqCp1F4OBOh526MvEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvOTRjMjhkNzctMTczMi0z
NmE3LWJmNmUtNDgzYTkwOTQ2ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdGXuDdBYrw+vcQsM/zjZrBF4N9qCATEKgLgGZgidZw/4SfaUOMw/vv
lHqLKaKMryh+29GaNUyDfFzV2odGiTgwyy5ZU9a+MfUCYPMv3fiKT0K/Kd0KpR/b
PFshzC7iVh9GAv9EQKgeLpnV7vTGs0cyTGpOcLCkW2977xR9ayDNmnKduc03Ppn9
dgeFwr01uDh38LcGmm4OLN3AbKsHIDRWUVnV2SnHQqLo3Pz4yibDnl3hLyUmDoLI
GftbYPQzZ9OP9oEWOUsC4PqTLvPif+iw+whqZiUbbSsBDPEap4drtI7YscCyzVL6
dwZCDuIVmMz1XOahMcrAn5VIMaEwWkE=
-----END CERTIFICATE-----
Generated at Fri Mar 29 15:34:33 2024 by rpki-client on console-ams.rpki-client.org