Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/8e3b1f6e-834b-3549-9139-65674c21292f.roa
File:                     8e3b1f6e-834b-3549-9139-65674c21292f.roa (raw, json)
Hash identifier:          VseSXeg9DXpGz0PzGuZMEF2UKxJ0qAYTUUfDeR5YhoE=
Subject key identifier:   CE:64:CF:CA:22:C7:E3:FD:39:95:1A:1D:00:D4:67:2C:EA:AA:54:07
Certificate issuer:       /CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
Certificate serial:       010D0C9F4328583B45AFE2EFC2743AB8E6EB7980
Authority key identifier: 1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/8e3b1f6e-834b-3549-9139-65674c21292f.roa
Signing time:             Mon 10 May 2021 04:00:00 +0000
ROA not before:           Mon 10 May 2021 04:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     7018
IP address blocks:        23.143.16.0/24 maxlen: 24
                          134.195.104.0/24 maxlen: 24
                          134.195.105.0/24 maxlen: 24
                          134.195.106.0/24 maxlen: 24
                          134.195.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:45:af:e2:ef:c2:74:3a:b8:e6:eb:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
        Validity
            Not Before: May 10 04:00:00 2021 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=e8538542-f0e0-4606-a3fa-9cb4975cc201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:9a:94:ff:1a:27:b3:7e:f2:1b:0e:c1:b3:
                    fb:21:67:1f:74:dd:55:c5:2c:47:47:31:0d:36:7b:
                    fa:33:7f:0a:95:a6:a8:57:5f:51:1a:a1:d5:2c:27:
                    c7:c8:de:ee:0e:68:fd:08:30:b9:53:fb:bb:41:1c:
                    98:e1:47:7e:50:4c:b4:39:dd:63:84:17:9c:0f:39:
                    be:d1:20:39:23:9c:35:c2:b3:45:dd:c1:cc:b6:ee:
                    9b:6a:d6:ea:0d:d4:45:8d:bf:b0:ce:2b:1f:7c:44:
                    81:0a:2b:1f:fc:59:94:fe:d0:1e:a8:5b:e5:73:5c:
                    3a:88:a0:74:8c:3d:9b:29:39:50:5c:d3:01:9f:35:
                    8b:3e:93:ef:cc:9e:14:a3:39:e0:c4:68:87:95:de:
                    24:a4:f3:1c:ea:8e:46:50:88:b8:7b:53:02:b4:2f:
                    e3:f1:96:65:2b:5c:78:7c:e2:bb:51:52:cc:a5:4f:
                    4a:e4:8f:fe:56:18:84:3d:4f:5b:4a:bc:e5:cc:8e:
                    cc:f1:ad:45:8a:f4:2a:b6:de:15:d6:b0:d7:c1:98:
                    13:ed:69:0e:2f:b7:04:b2:ac:f1:b6:65:1d:4c:d3:
                    d7:dc:1d:20:c5:08:7c:fc:41:c0:d4:ca:c2:3d:6a:
                    f3:8f:10:02:af:1a:54:27:5f:3c:17:d8:01:16:a8:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:CF:CA:22:C7:E3:FD:39:95:1A:1D:00:D4:67:2C:EA:AA:54:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/8e3b1f6e-834b-3549-9139-65674c21292f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/b9fd36f9-97b3-4d67-9844-6c32258695b0.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.16.0/24
                  134.195.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:31:c4:13:f6:dc:a7:33:9e:2d:ad:ea:97:7d:fa:84:cc:
         89:7c:bf:af:60:8d:95:c4:11:04:f1:8c:54:6b:63:8e:83:69:
         39:99:c6:15:9a:5e:d3:88:3b:9c:74:46:f7:f0:4c:92:3d:29:
         85:e2:23:29:ee:9f:39:a4:10:27:46:60:e8:ca:22:fd:ff:93:
         72:0b:36:1a:09:21:34:93:14:53:3d:ea:f2:06:d1:df:5f:5f:
         81:f9:33:fc:4d:f8:85:58:99:87:fe:6f:0c:50:0d:54:e0:3b:
         8e:e4:fe:00:53:d5:28:59:5b:72:1c:4e:77:78:a9:cd:46:c4:
         a1:4c:25:7e:2e:7e:a0:d1:aa:57:58:94:75:e3:35:f2:6e:02:
         f6:0c:4b:a5:dc:79:84:74:d9:e0:ba:70:2e:e6:3a:dd:85:24:
         08:dd:58:b1:09:10:fc:15:7a:78:ff:bc:cb:07:43:1f:d5:24:
         19:76:c9:64:70:fd:66:24:d5:5d:01:da:0b:dd:c4:36:8c:95:
         aa:e1:df:77:3e:91:32:c4:c6:16:55:67:f3:92:05:9c:d2:f8:
         63:d4:81:24:b0:7a:10:61:b4:49:60:73:b2:ee:cd:9c:54:7b:
         c5:b6:f3:1b:7a:08:90:01:de:18:53:db:6a:f1:68:47:3c:4e:
         83:a0:dd:39
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDtFr+LvwnQ6uObreYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjlmZDM2ZjktOTdiMy00ZDY3LTk4NDQtNmMzMjI1ODY5
NWIwMB4XDTIxMDUxMDA0MDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTg1Mzg1NDItZjBlMC00NjA2LWEzZmEtOWNiNDk3NWNjMjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrialP8aJ7N+8hsOwbP7IWcfdN1VxSxHRzEN
Nnv6M38KlaaoV19RGqHVLCfHyN7uDmj9CDC5U/u7QRyY4Ud+UEy0Od1jhBecDzm+
0SA5I5w1wrNF3cHMtu6batbqDdRFjb+wzisffESBCisf/FmU/tAeqFvlc1w6iKB0
jD2bKTlQXNMBnzWLPpPvzJ4UozngxGiHld4kpPMc6o5GUIi4e1MCtC/j8ZZlK1x4
fOK7UVLMpU9K5I/+VhiEPU9bSrzlzI7M8a1FivQqtt4V1rDXwZgT7WkOL7cEsqzx
tmUdTNPX3B0gxQh8/EHA1MrCPWrzjxACrxpUJ188F9gBFqgPXwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM5kz8oix+P9OZUaHQDUZyzqqlQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWZk
MzZmOS05N2IzLTRkNjctOTg0NC02YzMyMjU4Njk1YjAvOGUzYjFmNmUtODM0Yi0z
NTQ5LTkxMzktNjU2NzRjMjEyOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjlmZDM2ZjktOTdiMy00ZDY3LTk4
NDQtNmMzMjI1ODY5NWIwL2I5ZmQzNmY5LTk3YjMtNGQ2Ny05ODQ0LTZjMzIyNTg2
OTViMC5jcmwwHwYDVR0jBBgwFoAUHKnB7VZ3SgeJ+QeiPHTl+0/4DpgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWZkMzZmOS05N2IzLTRkNjctOTg0NC02YzMy
MjU4Njk1YjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF48QAwQC
hsNoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAjQMcQT9tynM54treqXffqEzIl8v69gjZXEEQTxjFRrY46D
aTmZxhWaXtOIO5x0RvfwTJI9KYXiIynunzmkECdGYOjKIv3/k3ILNhoJITSTFFM9
6vIG0d9fX4H5M/xN+IVYmYf+bwxQDVTgO47k/gBT1ShZW3IcTnd4qc1GxKFMJX4u
fqDRqldYlHXjNfJuAvYMS6XceYR02eC6cC7mOt2FJAjdWLEJEPwVenj/vMsHQx/V
JBl2yWRw/WYk1V0B2gvdxDaMlarh33c+kTLExhZVZ/OSBZzS+GPUgSSwehBhtElg
c7LuzZxUe8W28xt6CJAB3hhT22rxaEc8ToOg3Tk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:44 2023 by rpki-client on console-fra.rpki-client.org