Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/44cfc9e1-b819-3d64-b11f-315e7d5c9054.roa
File:                     44cfc9e1-b819-3d64-b11f-315e7d5c9054.roa (raw, json)
Hash identifier:          EtCTIcWCmIuHvfhWdJpjrfzTU8Inq3QYdtzga+izr1I=
Subject key identifier:   FA:E3:0D:BA:EB:F4:1F:2D:18:A3:F6:19:92:75:42:40:9F:60:73:1C
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F43285840C5524FE46B151A4FBD1AEB80
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/44cfc9e1-b819-3d64-b11f-315e7d5c9054.roa
Signing time:             Thu 18 Mar 2021 18:52:05 +0000
ROA not before:           Thu 18 Mar 2021 18:52:05 +0000
ROA not after:            Mon 06 May 2030 04:00:00 +0000
asID:                     174
IP address blocks:        173.0.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 23 Feb 2023 00:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c5:52:4f:e4:6b:15:1a:4f:bd:1a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Mar 18 18:52:05 2021 GMT
            Not After : May  6 04:00:00 2030 GMT
        Subject: CN=e51108f3-f9cf-4fea-97f7-ed179a33eed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:ff:f2:8d:ab:e1:da:50:de:b0:47:2a:df:
                    72:15:be:d3:e8:30:8c:7e:6c:ee:d0:ca:ca:68:ce:
                    f4:a1:55:85:45:e9:93:8c:17:2d:60:eb:ac:14:4a:
                    07:74:d8:78:e6:b6:b2:00:56:64:5b:84:45:95:bb:
                    a6:82:b4:fa:01:bc:dd:29:bb:cc:60:8b:d9:73:dc:
                    10:06:a2:d7:e6:b0:34:4a:47:10:42:25:35:5c:0b:
                    f1:e6:66:18:b0:36:f8:26:8d:9f:47:fd:14:97:d7:
                    f1:95:b7:13:b5:da:84:44:ad:ea:0d:b9:4b:80:be:
                    51:1b:7e:6a:29:58:a4:5a:7b:17:71:ed:32:3c:d2:
                    39:bb:7f:8f:0e:cb:00:e0:5f:56:2d:a7:b2:a7:85:
                    fb:7f:2d:a5:a7:26:43:ea:52:82:30:66:bb:c8:b9:
                    6b:d8:dc:09:a4:1e:58:2f:b5:a0:d5:60:2e:cc:39:
                    18:6c:0c:3b:b0:03:74:02:0b:8c:08:ff:79:03:5f:
                    b0:a6:c2:7b:7f:8b:1f:9e:59:a1:9b:1d:5b:63:7d:
                    56:c1:ce:eb:b7:4f:89:f0:ff:e2:d6:f6:56:aa:7d:
                    6f:08:8d:f6:d6:b3:77:bf:81:fa:7b:ff:da:da:0d:
                    cc:22:1e:83:8d:57:89:4c:d8:09:ec:ad:2a:01:83:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:0D:BA:EB:F4:1F:2D:18:A3:F6:19:92:75:42:40:9F:60:73:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/44cfc9e1-b819-3d64-b11f-315e7d5c9054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:2c:4a:47:de:c0:bf:61:78:9f:f0:50:ff:44:4c:a9:40:
         84:c2:17:fd:ae:66:bf:ef:6c:27:0b:4b:99:18:f8:f3:8b:b7:
         c2:ed:d2:6e:09:86:b4:89:7a:ad:6d:75:4b:9d:d5:f4:31:95:
         b1:35:e8:07:3e:89:e3:cb:39:ad:fa:ca:50:44:fc:ae:0d:88:
         45:3e:04:a9:00:aa:10:cc:39:c5:ef:35:82:5e:7c:ca:bb:0a:
         d6:38:c7:77:11:d1:81:38:39:43:8b:39:2b:e7:20:81:08:44:
         67:6e:1e:b4:5d:cf:fb:6f:ef:73:0c:23:38:e5:8b:6d:9d:29:
         4d:9c:ef:ab:b0:57:a4:eb:d2:3b:18:f2:24:06:9d:e2:19:ad:
         40:ee:84:5e:3b:1a:86:df:0a:4c:1f:24:b7:e8:eb:df:79:a8:
         fe:18:06:d8:e5:77:0a:5c:ef:74:31:88:1c:e5:f5:03:f1:93:
         e4:38:df:0d:61:fd:f6:f0:7a:e0:7a:1a:00:47:35:f8:c0:3e:
         9b:32:65:74:6b:16:8b:30:c3:b3:17:62:62:9e:04:09:2f:d9:
         d0:0d:95:08:65:12:d3:f5:bb:48:ae:dc:48:5b:a1:91:1a:2e:
         bf:f4:c6:4a:23:d7:01:51:ab:ef:23:98:f5:cb:3d:be:07:dc:
         5a:b2:0c:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDFUk/kaxUaT70a64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz
ZmM1MB4XDTIxMDMxODE4NTIwNVoXDTMwMDUwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTUxMTA4ZjMtZjljZi00ZmVhLTk3ZjctZWQxNzlhMzNlZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7/8o2r4dpQ3rBHKt9yFb7T6DCMfmzu0MrK
aM70oVWFRemTjBctYOusFEoHdNh45rayAFZkW4RFlbumgrT6AbzdKbvMYIvZc9wQ
BqLX5rA0SkcQQiU1XAvx5mYYsDb4Jo2fR/0Ul9fxlbcTtdqERK3qDblLgL5RG35q
KVikWnsXce0yPNI5u3+PDssA4F9WLaeyp4X7fy2lpyZD6lKCMGa7yLlr2NwJpB5Y
L7Wg1WAuzDkYbAw7sAN0AguMCP95A1+wpsJ7f4sfnlmhmx1bY31Wwc7rt0+J8P/i
1vZWqn1vCI321rN3v4H6e//a2g3MIh6DjVeJTNgJ7K0qAYNkjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrjDbrr9B8tGKP2GZJ1QkCfYHMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw
NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvNDRjZmM5ZTEtYjgxOS0z
ZDY0LWIxMWYtMzE1ZTdkNWM5MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi
YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk
OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0wLEpH3sC/YXif8FD/REypQITCF/2uZr/vbCcLS5kY+POLt8Lt0m4J
hrSJeq1tdUud1fQxlbE16Ac+iePLOa36ylBE/K4NiEU+BKkAqhDMOcXvNYJefMq7
CtY4x3cR0YE4OUOLOSvnIIEIRGduHrRdz/tv73MMIzjli22dKU2c76uwV6Tr0jsY
8iQGneIZrUDuhF47GobfCkwfJLfo6995qP4YBtjldwpc73QxiBzl9QPxk+Q43w1h
/fbweuB6GgBHNfjAPpsyZXRrFosww7MXYmKeBAkv2dANlQhlEtP1u0iu3EhboZEa
Lr/0xkoj1wFRq+8jmPXLPb4H3FqyDIU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org