Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ee255e4-9459-3836-b8f3-9dcba4f3b178.roa
File:                     0ee255e4-9459-3836-b8f3-9dcba4f3b178.roa (raw, json)
Hash identifier:          MMWDiip6iSwhebWA6+4PTZcZs8Pg8UKxuf4eUm4u5SU=
Subject key identifier:   EF:B2:4F:75:21:D4:50:50:5F:32:09:74:46:CE:63:2A:F5:BC:EC:18
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583EDBB9CDBA64DF8E6D49DDF980
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ee255e4-9459-3836-b8f3-9dcba4f3b178.roa
Signing time:             Tue 09 Aug 2022 12:00:00 +0000
ROA not before:           Tue 09 Aug 2022 12:00:00 +0000
ROA not after:            Wed 02 Aug 2028 04:00:00 +0000
asID:                     55293
IP address blocks:        68.66.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 11:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:db:b9:cd:ba:64:df:8e:6d:49:dd:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Aug  9 12:00:00 2022 GMT
            Not After : Aug  2 04:00:00 2028 GMT
        Subject: CN=44a8a7b9-ab56-4ba4-b0d3-66d029074950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:2f:c9:58:33:63:a2:40:90:d6:b5:23:5d:
                    f6:c8:17:8a:fe:5d:68:a4:d3:c7:8b:cb:69:ae:bd:
                    82:7a:c0:97:b5:23:84:f9:2e:a8:65:08:da:8b:3d:
                    da:9a:f4:97:4e:f8:8f:d0:03:bd:a5:cf:30:50:bf:
                    91:29:b2:c6:1b:3e:65:99:5a:dd:27:fa:6a:84:2e:
                    81:82:e1:3f:ca:02:18:cc:98:c1:02:89:36:51:5b:
                    0e:23:a2:8d:22:bc:8c:45:c0:0b:d1:94:84:20:cb:
                    42:88:94:d4:e0:28:1d:da:01:fb:61:96:f8:00:7e:
                    e5:73:a0:3b:20:90:e8:c5:ce:91:20:f7:7c:48:71:
                    30:cb:1e:d0:fb:16:bb:e7:5b:f9:8b:91:61:ee:12:
                    fb:d8:a8:ec:5f:7c:50:fd:23:45:d4:b8:cd:43:44:
                    60:52:3d:09:0e:57:e6:b5:7d:8f:41:bb:e9:87:c6:
                    2c:50:60:29:79:63:9d:15:fe:3b:34:da:84:e2:56:
                    c3:91:75:e4:c2:22:70:a6:66:38:bc:e4:a0:b9:1c:
                    00:26:3f:47:c9:0a:36:2a:7d:5f:03:50:c9:60:fc:
                    05:02:c3:57:f4:f3:85:26:5e:a8:4b:28:7b:2e:d2:
                    fd:36:23:17:a1:2e:57:bd:0c:d3:53:59:79:f6:72:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:4F:75:21:D4:50:50:5F:32:09:74:46:CE:63:2A:F5:BC:EC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ee255e4-9459-3836-b8f3-9dcba4f3b178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:85:2c:78:6d:0c:df:f5:b4:0f:bf:b1:61:68:3c:15:d7:
         a0:c8:5f:d3:2e:ee:16:be:9c:ab:ed:e3:7f:3a:24:ff:36:46:
         51:9a:7b:45:d6:ae:76:85:85:f2:98:05:e4:10:75:a7:be:80:
         d3:02:a1:c8:1e:ea:c3:df:79:f9:90:7d:b6:3e:a2:f7:f2:4c:
         50:53:fc:a5:53:e4:ac:17:48:54:cd:ec:7b:c0:19:bd:92:31:
         1e:c5:59:20:dc:e4:39:26:95:a0:2f:ac:45:20:13:e2:b0:81:
         bf:41:f8:61:7f:bb:da:a2:73:d7:ea:64:fe:a5:8b:83:3a:63:
         18:7b:84:05:ab:6b:b1:e7:f8:20:08:ec:65:91:19:60:c1:ca:
         56:69:b5:7d:71:35:f1:aa:71:8c:9f:65:2a:a6:17:e3:b5:c0:
         ad:04:87:98:06:d3:08:3a:41:ef:d0:49:cb:d6:dc:b1:31:99:
         1a:b9:e3:a8:67:d9:ab:1b:5d:25:69:99:db:63:6d:f0:42:db:
         03:9d:f2:94:ff:6c:a4:b6:80:bb:01:1e:02:ee:49:9e:f8:a9:
         b9:40:13:f5:26:e1:cc:45:07:f8:1d:48:f6:29:60:85:c9:2a:
         d7:09:0d:69:a3:f8:e6:c0:c2:c7:c2:12:f2:ba:c5:85:3e:8a:
         07:3e:17:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7buc26ZN+ObUnd+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIyMDgwOTEyMDAwMFoXDTI4MDgwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDRhOGE3YjktYWI1Ni00YmE0LWIwZDMtNjZkMDI5MDc0OTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4vyVgzY6JAkNa1I132yBeK/l1opNPHi8tp
rr2CesCXtSOE+S6oZQjaiz3amvSXTviP0AO9pc8wUL+RKbLGGz5lmVrdJ/pqhC6B
guE/ygIYzJjBAok2UVsOI6KNIryMRcAL0ZSEIMtCiJTU4Cgd2gH7YZb4AH7lc6A7
IJDoxc6RIPd8SHEwyx7Q+xa751v5i5Fh7hL72KjsX3xQ/SNF1LjNQ0RgUj0JDlfm
tX2PQbvph8YsUGApeWOdFf47NNqE4lbDkXXkwiJwpmY4vOSguRwAJj9HyQo2Kn1f
A1DJYPwFAsNX9POFJl6oSyh7LtL9NiMXoS5XvQzTU1l59nKvLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+yT3Uh1FBQXzIJdEbOYyr1vOwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMGVlMjU1ZTQtOTQ1OS0z
ODM2LWI4ZjMtOWRjYmE0ZjNiMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJp1hSx4bQzf9bQPv7FhaDwV16DIX9Mu7ha+nKvt4386JP82RlGae0XW
rnaFhfKYBeQQdae+gNMCocge6sPfefmQfbY+ovfyTFBT/KVT5KwXSFTN7HvAGb2S
MR7FWSDc5DkmlaAvrEUgE+Kwgb9B+GF/u9qic9fqZP6li4M6Yxh7hAWra7Hn+CAI
7GWRGWDBylZptX1xNfGqcYyfZSqmF+O1wK0Eh5gG0wg6Qe/QScvW3LExmRq546hn
2asbXSVpmdtjbfBC2wOd8pT/bKS2gLsBHgLuSZ74qblAE/Um4cxFB/gdSPYpYIXJ
KtcJDWmj+ObAwsfCEvK6xYU+igc+F+w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org