Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/9f263f1b-9564-3e80-bfce-29cd96207b55.roa
File:                     9f263f1b-9564-3e80-bfce-29cd96207b55.roa (raw, json)
Hash identifier:          IkVcAjWALI0AN/+U+GQ/kpbpTnZccMuRITvy5yICGmM=
Subject key identifier:   D0:D4:BB:29:A3:E2:AF:F5:BF:69:97:1B:2D:87:78:82:1E:F3:B4:39
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F43285844A9DD038BFCD292920F03E780
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/9f263f1b-9564-3e80-bfce-29cd96207b55.roa
Signing time:             Wed 24 Jan 2024 21:16:04 +0000
ROA not before:           Wed 24 Jan 2024 21:16:04 +0000
ROA not after:            Tue 23 Apr 2024 20:16:04 +0000
asID:                     32109
IP address blocks:        23.132.232.0/24 maxlen: 24
                          2620:8d:a000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:dd:03:8b:fc:d2:92:92:0f:03:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Jan 24 21:16:04 2024 GMT
            Not After : Apr 23 20:16:04 2024 GMT
        Subject: CN=d4e2f95f-cce4-441c-b15b-03a556292847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:0c:ae:16:a5:a8:c2:f2:4a:ce:fa:3f:57:
                    d9:70:27:57:87:53:b3:72:b3:8d:bf:4d:86:aa:11:
                    86:db:c0:c7:ab:42:19:5a:50:45:0d:b7:d9:d5:b6:
                    60:c3:84:4d:5c:d5:00:63:a9:79:d0:1f:55:16:42:
                    77:13:53:15:47:da:f1:eb:59:69:8d:44:62:a3:de:
                    8e:e3:5b:47:f1:84:07:b1:0a:e2:1d:ab:e8:b4:bc:
                    5d:b5:6f:69:0c:a9:0e:64:30:e3:59:02:e2:50:c5:
                    fb:6d:b1:48:8f:7f:00:0b:d2:cb:d7:92:d1:1a:a7:
                    aa:4f:4d:ca:ba:dc:22:3e:a5:33:60:13:4c:43:ce:
                    8f:aa:48:ec:5c:91:5d:d3:40:e8:45:e9:79:81:ae:
                    f1:c8:96:64:d4:ea:7b:cf:ab:fb:ee:3e:72:35:bd:
                    8a:1b:fd:2f:cc:7d:09:f2:15:a0:a5:36:3f:54:93:
                    b8:c3:9d:28:b4:ca:f2:cd:64:eb:36:1f:b3:48:b8:
                    01:1a:d3:76:06:28:ef:95:49:d0:39:12:fa:63:f9:
                    7f:1c:2f:2a:5f:fd:98:6c:85:59:1d:3b:56:fa:33:
                    e0:c8:dd:6a:76:55:6d:9d:b4:af:ae:68:f4:b2:e5:
                    01:cc:9d:fa:bb:5e:b2:e7:fa:57:7e:7f:e9:5f:a0:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D4:BB:29:A3:E2:AF:F5:BF:69:97:1B:2D:87:78:82:1E:F3:B4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/9f263f1b-9564-3e80-bfce-29cd96207b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:af:89:28:75:56:d8:21:7b:44:92:fd:db:f1:99:a5:47:
         6a:0c:8a:56:d6:b0:c7:f0:42:a9:da:2a:15:63:45:db:5a:e9:
         63:98:3f:51:08:c6:0d:63:cf:ee:6b:7a:c9:08:1a:30:ee:3a:
         3a:44:17:e3:7a:0c:57:90:d7:82:6f:20:e5:e4:56:4c:c0:0d:
         13:c5:68:c5:1e:e1:6c:df:f3:b8:e8:be:1f:38:a7:bc:20:d7:
         79:4c:d8:fa:2d:37:85:bb:47:45:9d:39:59:95:f2:73:16:5b:
         d5:e4:f7:19:f3:45:ac:3c:a1:dd:a8:fd:ab:9e:89:48:4b:5b:
         c4:05:36:8c:08:88:d7:6e:96:79:3d:f9:9e:55:c0:f5:d4:09:
         15:bb:e5:29:6e:5a:7b:36:d6:9d:11:00:04:b6:92:c0:c4:3d:
         38:47:8d:08:55:9d:67:98:45:99:21:e5:31:9c:92:45:5d:da:
         f6:1a:cf:c0:b9:bf:ef:ed:47:63:b5:bc:de:d8:aa:8c:df:0e:
         75:fc:0f:73:7a:3f:b3:aa:a8:e2:03:72:97:91:fe:16:28:16:
         ba:40:b7:a0:6b:98:ad:59:7a:d0:13:66:dc:9b:3b:97:f9:4b:
         a7:ba:1d:94:49:39:64:35:1d:08:b4:0f:4b:73:09:16:8c:e3:
         02:a4:3e:f8
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWESp3QOL/NKSkg8D54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ3YmQ2NWYtODNkMi00MDQ2LWFkNjQtNDBiYTQ1ODQx
NWEyMB4XDTI0MDEyNDIxMTYwNFoXDTI0MDQyMzIwMTYwNFowLzEtMCsGA1UEAxMk
ZDRlMmY5NWYtY2NlNC00NDFjLWIxNWItMDNhNTU2MjkyODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9AMrhalqMLySs76P1fZcCdXh1OzcrONv02G
qhGG28DHq0IZWlBFDbfZ1bZgw4RNXNUAY6l50B9VFkJ3E1MVR9rx61lpjURio96O
41tH8YQHsQriHavotLxdtW9pDKkOZDDjWQLiUMX7bbFIj38AC9LL15LRGqeqT03K
utwiPqUzYBNMQ86PqkjsXJFd00DoRel5ga7xyJZk1Op7z6v77j5yNb2KG/0vzH0J
8hWgpTY/VJO4w50otMryzWTrNh+zSLgBGtN2BijvlUnQORL6Y/l/HC8qX/2YbIVZ
HTtW+jPgyN1qdlVtnbSvrmj0suUBzJ36u16y5/pXfn/pX6DzpwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNDUuymj4q/1v2mXGy2HeIIe87Q5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdi
ZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJhNDU4NDE1YTIvOWYyNjNmMWItOTU2NC0z
ZTgwLWJmY2UtMjljZDk2MjA3YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ3YmQ2NWYtODNkMi00MDQ2LWFk
NjQtNDBiYTQ1ODQxNWEyL2ZkN2JkNjVmLTgzZDItNDA0Ni1hZDY0LTQwYmE0NTg0
MTVhMi5jcmwwHwYDVR0jBBgwFoAUcz2oFnyQe5iHVNEbg2WD3ys1MBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdiZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJh
NDU4NDE1YTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ToMA8E
AgACMAkDBwAmIACNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUyyviSh1Vtghe0SS/dvxmaVHagyKVtaw
x/BCqdoqFWNF21rpY5g/UQjGDWPP7mt6yQgaMO46OkQX43oMV5DXgm8g5eRWTMAN
E8VoxR7hbN/zuOi+HzinvCDXeUzY+i03hbtHRZ05WZXycxZb1eT3GfNFrDyh3aj9
q56JSEtbxAU2jAiI126WeT35nlXA9dQJFbvlKW5aezbWnREABLaSwMQ9OEeNCFWd
Z5hFmSHlMZySRV3a9hrPwLm/7+1HY7W83tiqjN8OdfwPc3o/s6qo4gNyl5H+FigW
ukC3oGuYrVl60BNm3Js7l/lLp7odlEk5ZDUdCLQPS3MJFozjAqQ++A==
-----END CERTIFICATE-----
Generated at Fri Feb 16 07:19:45 2024 by rpki-client on console-ams.rpki-client.org