Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/54c74d6d-5de2-3a41-aede-ac69fff10e95.roa
File:                     54c74d6d-5de2-3a41-aede-ac69fff10e95.roa (raw, json)
Hash identifier:          13WGZO9Llt0ZrA4bMLerOP//CRWlM3EohZUzmuU2i7M=
Subject key identifier:   C6:9A:E4:A4:72:78:E9:90:81:57:02:22:FA:77:EB:A1:AD:F3:C0:D0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285840D2CAC7073D8F786781B35D00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/54c74d6d-5de2-3a41-aede-ac69fff10e95.roa
Signing time:             Mon 06 Feb 2023 17:51:09 +0000
ROA not before:           Mon 06 Feb 2023 17:51:09 +0000
ROA not after:            Wed 07 May 2025 04:00:00 +0000
asID:                     16540
IP address blocks:        104.152.100.0/22 maxlen: 24
                          199.36.176.0/21 maxlen: 24
                          199.187.148.0/22 maxlen: 24
                          2607:6200::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d2:ca:c7:07:3d:8f:78:67:81:b3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  6 17:51:09 2023 GMT
            Not After : May  7 04:00:00 2025 GMT
        Subject: CN=094dc079-ae28-408d-9717-e9b4e3649455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:78:e7:63:6e:88:b8:7e:40:84:fe:6d:0e:
                    f0:8d:b7:1b:74:29:35:98:33:e2:eb:13:a9:61:1b:
                    6e:e1:46:82:97:06:a4:90:d8:67:20:02:f2:b3:1c:
                    33:37:9e:54:b5:f6:d2:34:09:c2:89:4b:97:fc:db:
                    05:bf:ab:8e:b7:a3:ac:0a:b6:8d:d5:6d:36:7a:b2:
                    4f:f1:38:86:54:e6:fd:3f:a2:8b:b5:db:12:73:83:
                    bb:bf:6d:34:1e:c8:39:8e:e4:74:c8:38:87:e7:86:
                    0b:3a:af:bf:9d:48:cb:72:21:d5:78:1e:94:36:cb:
                    f5:ac:2d:ca:90:92:48:11:c1:37:25:32:aa:c0:b8:
                    3d:de:3d:a2:10:e2:5b:8d:48:93:69:21:15:3c:fd:
                    52:6e:63:87:a5:03:2d:5c:c1:7e:2f:fc:64:f6:af:
                    54:5b:8e:d2:08:43:67:fe:37:1c:bb:de:90:ef:e0:
                    68:70:38:e3:ec:a8:e5:cb:16:36:fb:59:db:e5:bf:
                    0b:d2:2a:70:01:e5:cd:c4:33:c7:d4:88:20:7c:a0:
                    7b:ea:dd:8f:6d:cc:a5:41:2b:39:5c:ff:ba:f8:f8:
                    15:65:de:56:a1:9a:c2:f5:d6:6e:02:1a:d3:22:92:
                    82:98:74:f0:79:53:12:3f:b0:03:c0:98:be:92:d4:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:E4:A4:72:78:E9:90:81:57:02:22:FA:77:EB:A1:AD:F3:C0:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/54c74d6d-5de2-3a41-aede-ac69fff10e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:13:a5:9c:14:80:4e:08:f1:ed:2f:72:65:b1:9a:9f:36:01:
         cf:07:16:b9:18:e2:28:a7:66:2b:cd:c6:d7:65:7c:72:42:da:
         74:fb:bf:87:51:b7:d0:33:e4:3c:98:e5:4a:47:84:30:3a:3c:
         c7:9a:fd:3b:0f:f9:99:a3:63:a3:62:fd:ea:97:57:82:1c:c4:
         f4:49:00:97:fe:58:7f:80:4d:2a:3a:45:5c:83:22:21:30:d9:
         c0:9f:d4:41:f1:b8:97:d6:96:8d:7c:e3:28:4c:9b:27:9a:6c:
         da:fa:b5:97:2a:91:21:a9:f8:e0:d7:ab:9b:2e:57:50:b5:c8:
         51:be:e4:52:67:5b:7b:75:19:d9:e0:77:32:a8:c1:54:d5:e5:
         40:1b:ee:1f:99:44:59:60:86:5d:9b:38:12:9e:4f:22:22:45:
         c9:b7:a7:de:40:85:96:a6:9a:dd:a1:1b:b6:b6:62:fb:76:25:
         42:31:0c:84:85:ac:2a:c6:02:78:fc:3e:40:f7:35:f3:2b:6f:
         eb:31:d6:c1:66:f6:38:9f:0f:d0:dd:c4:0e:3b:f0:79:8c:a9:
         1b:cf:53:fb:2d:57:4c:65:52:94:4c:47:09:95:20:3f:8b:12:
         f5:b7:cb:cc:d9:6a:4d:3a:de:6e:10:75:0f:df:97:de:77:c4:
         30:b1:2d:4c
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEDSyscHPY94Z4GzXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIzMDIwNjE3NTEwOVoXDTI1MDUwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MDk0ZGMwNzktYWUyOC00MDhkLTk3MTctZTliNGUzNjQ5NDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ1452NuiLh+QIT+bQ7wjbcbdCk1mDPi6xOp
YRtu4UaClwakkNhnIALysxwzN55UtfbSNAnCiUuX/NsFv6uOt6OsCraN1W02erJP
8TiGVOb9P6KLtdsSc4O7v200Hsg5juR0yDiH54YLOq+/nUjLciHVeB6UNsv1rC3K
kJJIEcE3JTKqwLg93j2iEOJbjUiTaSEVPP1SbmOHpQMtXMF+L/xk9q9UW47SCENn
/jccu96Q7+BocDjj7KjlyxY2+1nb5b8L0ipwAeXNxDPH1IggfKB76t2PbcylQSs5
XP+6+PgVZd5WoZrC9dZuAhrTIpKCmHTweVMSP7ADwJi+ktSFUwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFMaa5KRyeOmQgVcCIvp366Gt88DQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNTRjNzRkNmQtNWRlMi0z
YTQxLWFlZGUtYWM2OWZmZjEwZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD
xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIgTpZwUgE4I8e0vcmWx
mp82Ac8HFrkY4iinZivNxtdlfHJC2nT7v4dRt9Az5DyY5UpHhDA6PMea/TsP+Zmj
Y6Ni/eqXV4IcxPRJAJf+WH+ATSo6RVyDIiEw2cCf1EHxuJfWlo184yhMmyeabNr6
tZcqkSGp+ODXq5suV1C1yFG+5FJnW3t1GdngdzKowVTV5UAb7h+ZRFlghl2bOBKe
TyIiRcm3p95AhZammt2hG7a2Yvt2JUIxDISFrCrGAnj8PkD3NfMrb+sx1sFm9jif
D9DdxA478HmMqRvPU/stV0xlUpRMRwmVID+LEvW3y8zZak063m4QdQ/fl953xDCx
LUw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:42 2023 by rpki-client on console-ams.rpki-client.org