Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa
File:                     e68761d5-9813-3666-a2c1-4eca57ef2471.roa (raw, json)
Hash identifier:          j+zU2xRkLN/TrZ9ldCxmOu8Lj1+Zfe4/ggz6cVMv4N8=
Subject key identifier:   04:8B:FA:20:CC:78:B8:86:BD:5D:C0:45:35:E7:85:2A:E0:39:DC:D8
Certificate issuer:       /CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
Certificate serial:       010D0C9F4328584765A0F60289411780B0544820
Authority key identifier: A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     400164
IP address blocks:        65.75.212.0/22 maxlen: 22
                          2606:8ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 15:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f6:02:89:41:17:80:b0:54:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=761fe732-f65b-48ae-8909-2e6bfd2b8db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:92:a1:79:e2:6a:95:3e:bf:42:66:6b:1d:
                    a3:ee:8c:cc:7a:42:d2:3f:4f:ea:46:6d:b6:0d:82:
                    d6:58:e7:9c:d4:00:2d:b8:e9:95:08:23:76:64:17:
                    87:59:e6:d7:3c:db:38:f9:21:25:47:fb:b7:6d:3d:
                    0d:32:df:cd:71:d0:de:0c:9a:fa:f6:d3:7d:87:12:
                    a1:d8:4e:33:65:e6:5d:80:ca:1b:11:f4:84:9e:45:
                    32:7a:c2:c3:4a:1f:9b:29:cd:bf:76:c3:12:0b:54:
                    ac:11:4e:3f:e3:47:42:44:5c:ec:87:20:44:44:33:
                    1d:33:95:1e:98:da:74:a2:b8:7c:17:65:4c:25:16:
                    33:e0:e6:b7:98:a5:0a:ad:21:8f:45:0d:ca:03:b0:
                    5b:8c:1d:16:ff:13:b2:86:29:f6:4d:59:f6:54:8e:
                    ee:3e:a8:7d:bf:0d:6e:d8:17:9b:45:a8:91:8a:82:
                    ff:f1:27:88:d9:ab:46:f4:0a:4a:04:68:88:21:d9:
                    37:7d:80:64:9d:25:a2:ba:16:50:75:31:c4:0d:a7:
                    58:c9:93:01:9c:ec:ed:26:74:c7:ee:33:08:52:cc:
                    a1:f1:c8:4d:bd:e5:df:0c:86:51:74:a2:2f:01:5f:
                    c8:f1:44:2e:af:36:76:9e:ee:18:9e:09:d2:9b:a8:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:FA:20:CC:78:B8:86:BD:5D:C0:45:35:E7:85:2A:E0:39:DC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl

            X509v3 Authority Key Identifier:
                keyid:A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:cf:5a:9d:ad:75:b1:18:3a:4f:b0:b5:90:6b:0f:e7:a7:
         1d:45:1f:3a:13:f6:cc:54:e1:0b:d6:87:de:dc:19:89:ea:93:
         7f:67:8a:57:12:03:78:fb:8c:11:05:d6:79:7b:6f:c9:1f:f4:
         0e:00:57:4a:38:5a:ca:5d:3c:e2:df:9a:e3:93:8b:0e:79:ca:
         9c:b4:d0:bb:c0:b6:dc:b7:0d:d4:93:5a:09:90:d1:38:2f:5d:
         73:ba:3c:ff:62:b8:39:0d:39:ef:17:17:cb:a3:01:d5:a9:44:
         ec:f9:9d:05:c4:56:4a:f3:6c:de:9f:c6:b8:81:d8:99:7c:9e:
         51:77:eb:cc:fd:e3:e9:21:e1:bf:f4:95:a0:1b:3e:83:8a:dd:
         08:3d:4f:06:29:fe:2c:80:f3:ce:f5:2a:54:00:a2:31:0b:3d:
         b8:ed:43:ac:e2:21:fb:8a:56:92:0e:e0:05:1d:bc:7a:98:cf:
         34:b5:fb:ec:55:2a:d6:eb:ab:77:d8:86:47:01:86:ed:7a:78:
         71:8f:b9:58:b6:7e:66:51:ab:39:d0:09:14:69:9c:f4:fd:ed:
         20:6e:b2:d5:ca:17:a2:9f:de:df:a0:be:5e:f2:64:ee:98:93:
         09:73:96:67:f5:43:1c:86:8d:73:e4:c1:c3:8a:20:58:ce:bc:
         aa:a7:2e:6a
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEdloPYCiUEXgLBUSCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTVhMWM1Y2QtZDYwYi00NjcwLWFkOGQtMjE4NTY4NTVl
ZTQ2MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
NzYxZmU3MzItZjY1Yi00OGFlLTg5MDktMmU2YmZkMmI4ZGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeOSoXniapU+v0Jmax2j7ozMekLSP0/qRm22
DYLWWOec1AAtuOmVCCN2ZBeHWebXPNs4+SElR/u3bT0NMt/NcdDeDJr69tN9hxKh
2E4zZeZdgMobEfSEnkUyesLDSh+bKc2/dsMSC1SsEU4/40dCRFzshyBERDMdM5Ue
mNp0orh8F2VMJRYz4Oa3mKUKrSGPRQ3KA7BbjB0W/xOyhin2TVn2VI7uPqh9vw1u
2BebRaiRioL/8SeI2atG9ApKBGiIIdk3fYBknSWiuhZQdTHEDadYyZMBnOztJnTH
7jMIUsyh8chNveXfDIZRdKIvAV/I8UQurzZ2nu4YngnSm6hI0wIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFASL+iDMeLiGvV3ARTXnhSrgOdzYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWEx
YzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1Njg1NWVlNDYvZTY4NzYxZDUtOTgxMy0z
NjY2LWEyYzEtNGVjYTU3ZWYyNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTVhMWM1Y2QtZDYwYi00NjcwLWFk
OGQtMjE4NTY4NTVlZTQ2LzE1YTFjNWNkLWQ2MGItNDY3MC1hZDhkLTIxODU2ODU1
ZWU0Ni5jcmwwHwYDVR0jBBgwFoAUoAmmsrKCrmq2QHkvlJmArJ1hifMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWExYzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1
Njg1NWVlNDYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCQUvUMA0E
AgACMAcDBQAmBorAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFtbz1qdrXWxGDpPsLWQaw/npx1FHzoT9sxU
4QvWh97cGYnqk39nilcSA3j7jBEF1nl7b8kf9A4AV0o4WspdPOLfmuOTiw55ypy0
0LvAtty3DdSTWgmQ0TgvXXO6PP9iuDkNOe8XF8ujAdWpROz5nQXEVkrzbN6fxriB
2Jl8nlF368z94+kh4b/0laAbPoOK3Qg9TwYp/iyA8871KlQAojELPbjtQ6ziIfuK
VpIO4AUdvHqYzzS1++xVKtbrq3fYhkcBhu16eHGPuVi2fmZRqznQCRRpnPT97SBu
stXKF6Kf3t+gvl7yZO6Ykwlzlmf1QxyGjXPkwcOKIFjOvKqnLmo=
-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:13 2024 by rpki-client on console-fra.rpki-client.org