Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/819d7963-960a-3d3d-be10-3bb90fe95456.roa
File:                     819d7963-960a-3d3d-be10-3bb90fe95456.roa (raw, json)
Hash identifier:          m3y7hjUFkg82C1Lu+AvbB2KtpB7gXEaXf7NZlXetT3o=
Subject key identifier:   EF:42:DE:D2:02:45:F3:75:90:4D:C2:46:B6:91:A7:B3:BB:56:B9:F1
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9E78F11D56CC404189140
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/819d7963-960a-3d3d-be10-3bb90fe95456.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        104.244.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:e7:8f:11:d5:6c:c4:04:18:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=a7551e0f-a47b-4bb4-9e54-06a2fc45a9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:18:b0:d8:d4:3a:d3:e2:db:2a:0a:00:2f:
                    f1:3e:e1:52:e7:f4:c5:cf:5c:f1:68:0d:bf:ea:06:
                    3d:ff:e8:3a:1b:19:c6:69:45:81:bf:12:58:1c:40:
                    77:bb:ad:4c:f2:9f:b4:13:06:f5:5c:b8:f7:60:4f:
                    ce:7b:df:50:b3:83:17:a9:06:6c:d5:43:ca:e2:81:
                    ad:18:5f:f4:0d:2b:57:40:f7:37:ce:62:3f:81:e7:
                    cd:de:d6:4b:d7:ed:4d:e6:b6:5a:1d:fd:d5:9b:fd:
                    d1:bd:28:d1:65:af:63:b7:79:72:c0:17:73:33:b0:
                    4e:5d:1c:c6:52:96:32:fe:ca:c2:00:a2:c7:fe:9e:
                    95:f4:89:37:af:8c:09:d8:83:d2:42:5c:b8:46:9a:
                    12:68:88:71:f5:54:ff:13:e8:71:cb:cc:33:9e:04:
                    c5:7e:7a:d8:5e:db:88:0d:ee:72:2c:05:06:6c:33:
                    9c:85:3e:c7:11:4b:51:9b:8f:c8:8c:c3:7a:98:61:
                    65:58:13:a0:ff:26:70:d8:87:4c:ab:82:01:cf:58:
                    4a:5a:3c:73:1b:e2:df:8e:62:36:36:ba:fd:46:d9:
                    bb:7c:f0:ed:95:48:ff:fb:57:34:f7:81:22:be:1f:
                    8b:5d:6f:99:69:45:df:ed:0a:cd:c8:01:aa:a3:0d:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:42:DE:D2:02:45:F3:75:90:4D:C2:46:B6:91:A7:B3:BB:56:B9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/819d7963-960a-3d3d-be10-3bb90fe95456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:6f:02:17:5d:82:5f:16:6d:e2:a5:93:ec:f2:6b:10:2a:
         b6:d4:45:af:a0:15:61:63:c7:89:3f:a4:09:3c:ad:2a:59:1c:
         5f:39:11:5e:82:80:18:a7:de:dd:f0:91:08:45:83:d3:e0:04:
         91:35:8a:4f:66:40:93:5d:c6:89:b4:82:90:4d:f2:a1:69:34:
         b0:a5:b4:e5:aa:eb:24:43:fd:46:39:a7:74:4b:30:17:9f:99:
         92:8d:80:9c:88:b3:f8:a3:87:39:ff:25:de:cd:10:4e:9f:40:
         63:03:0b:db:ca:ea:62:85:b0:36:fe:7a:96:8a:51:81:2d:be:
         12:fc:94:45:94:74:00:58:d5:c4:94:3e:b8:b7:b4:79:c9:9a:
         d2:26:27:f9:db:9c:7d:ad:3c:db:85:80:c0:32:67:41:14:ca:
         80:33:25:40:34:87:14:cd:55:ff:da:b1:08:3a:d6:f0:12:15:
         ab:6d:d7:66:f5:48:8c:f2:90:ab:9d:4b:d1:dd:bc:76:c8:9f:
         17:23:76:85:b2:f1:4c:1a:16:50:db:7f:c1:81:b1:4d:a5:46:
         0e:9f:b1:1d:6c:d5:cc:28:a7:0c:49:ce:e9:41:e4:21:6b:85:
         69:9d:fb:5f:5c:78:9e:3c:55:f1:0d:6c:a2:14:21:a4:1b:ac:
         c2:b5:12:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4byeePEdVsxAQYkUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIyMDYwMTEyMDAwMFoXDTI4MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YTc1NTFlMGYtYTQ3Yi00YmI0LTllNTQtMDZhMmZjNDVhOWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJkYsNjUOtPi2yoKAC/xPuFS5/TFz1zxaA2/
6gY9/+g6GxnGaUWBvxJYHEB3u61M8p+0Ewb1XLj3YE/Oe99Qs4MXqQZs1UPK4oGt
GF/0DStXQPc3zmI/gefN3tZL1+1N5rZaHf3Vm/3RvSjRZa9jt3lywBdzM7BOXRzG
UpYy/srCAKLH/p6V9Ik3r4wJ2IPSQly4RpoSaIhx9VT/E+hxy8wzngTFfnrYXtuI
De5yLAUGbDOchT7HEUtRm4/IjMN6mGFlWBOg/yZw2IdMq4IBz1hKWjxzG+LfjmI2
Nrr9Rtm7fPDtlUj/+1c094Eivh+LXW+ZaUXf7QrNyAGqow3fIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9C3tICRfN1kE3CRraRp7O7VrnxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODE5ZDc5NjMtOTYwYS0z
ZDNkLWJlMTAtM2JiOTBmZTk1NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAo/bwIXXYJfFm3ipZPs8msQKrbURa+gFWFjx4k/pAk8rSpZHF85EV6C
gBin3t3wkQhFg9PgBJE1ik9mQJNdxom0gpBN8qFpNLCltOWq6yRD/UY5p3RLMBef
mZKNgJyIs/ijhzn/Jd7NEE6fQGMDC9vK6mKFsDb+epaKUYEtvhL8lEWUdABY1cSU
Pri3tHnJmtImJ/nbnH2tPNuFgMAyZ0EUyoAzJUA0hxTNVf/asQg61vASFatt12b1
SIzykKudS9HdvHbInxcjdoWy8UwaFlDbf8GBsU2lRg6fsR1s1cwopwxJzulB5CFr
hWmd+19ceJ48VfENbKIUIaQbrMK1EjI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org