Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/7f31c7cf-d7d5-30c1-800d-a1d638d4cb89.roa
File:                     7f31c7cf-d7d5-30c1-800d-a1d638d4cb89.roa (raw, json)
Hash identifier:          8uv741wk0GiD5GXR7Y6xyqnGTwyWgXkmiPct97sYrHs=
Subject key identifier:   AC:D6:C7:99:5C:58:18:64:55:6A:74:72:42:1F:B7:A1:E3:C5:2F:78
Certificate issuer:       /CN=01498755-7057-4d26-ae43-80f30a8a9011
Certificate serial:       010D0C9F43285846EACAD30B02F4C7E929E41D40
Authority key identifier: B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/7f31c7cf-d7d5-30c1-800d-a1d638d4cb89.roa
Signing time:             Sun 18 Aug 2024 13:00:40 +0000
ROA not before:           Sun 18 Aug 2024 13:00:40 +0000
ROA not after:            Sat 16 Nov 2024 14:00:40 +0000
asID:                     199948
IP address blocks:        23.148.200.0/24 maxlen: 24
                          2602:2a9::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 12 Oct 2024 02:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ea:ca:d3:0b:02:f4:c7:e9:29:e4:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01498755-7057-4d26-ae43-80f30a8a9011
        Validity
            Not Before: Aug 18 13:00:40 2024 GMT
            Not After : Nov 16 14:00:40 2024 GMT
        Subject: CN=0bce49fb-3332-456f-9df4-1b273bbffe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:6b:c4:a8:6b:b7:d9:59:a7:6b:b6:81:38:
                    25:e7:a5:83:f4:fc:b0:36:49:fb:62:28:f3:c3:24:
                    28:7f:ff:ac:0d:f1:72:ac:b1:b1:5f:65:91:32:77:
                    44:76:c6:52:d3:69:ab:39:07:45:f9:e5:e7:27:4c:
                    6a:c4:11:ee:3c:2c:cd:45:74:08:7a:b3:c6:2d:67:
                    ce:11:79:a7:aa:47:54:c7:82:de:36:8d:90:a6:b7:
                    c6:2a:4a:ff:6b:1a:74:50:44:d2:f9:7b:82:88:47:
                    7d:91:e7:a4:2f:f3:73:05:e0:2a:19:0b:38:28:80:
                    b0:16:88:66:da:9c:c0:4d:5e:85:d0:90:a6:96:de:
                    3a:1c:12:98:9c:ab:a6:4c:10:58:99:72:d4:80:da:
                    72:c1:35:57:e8:42:d9:a9:bc:83:52:6c:7b:a1:3b:
                    6d:e6:fa:4e:66:3e:db:a8:6f:16:54:e5:6c:ec:e9:
                    f6:8d:7a:56:8e:41:41:03:f4:24:ae:ef:47:69:b9:
                    81:e8:3d:14:45:5b:ad:c8:e7:4f:a9:e7:d2:8b:3a:
                    02:d0:1c:2e:7a:17:e8:55:90:74:6f:17:71:92:ef:
                    63:5e:6b:76:2c:84:7a:a8:b9:66:f5:4f:26:46:96:
                    67:13:f2:71:30:19:a9:41:ac:39:8b:22:3a:ed:a2:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:C7:99:5C:58:18:64:55:6A:74:72:42:1F:B7:A1:E3:C5:2F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/7f31c7cf-d7d5-30c1-800d-a1d638d4cb89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl

            X509v3 Authority Key Identifier:
                keyid:B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.200.0/24
                IPv6:
                  2602:2a9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:03:6e:2f:e3:73:4b:bb:b7:f0:19:d6:30:09:33:48:2a:9d:
         d1:6d:46:09:7c:a4:13:2f:18:3e:bf:f2:6d:2a:2b:7b:60:1e:
         77:ac:db:30:14:47:6c:45:3b:66:45:39:88:2a:77:19:21:a5:
         56:b8:1f:96:21:92:44:88:97:70:10:5b:d5:fc:cd:f3:2c:ce:
         60:aa:da:c2:35:86:79:55:3d:3f:7b:ee:af:b8:d4:64:26:73:
         e6:2d:6a:7a:26:2d:23:4d:3d:1e:2d:e2:c6:b8:00:d7:e1:23:
         71:79:64:bd:15:5c:6f:5b:6c:33:41:7b:57:9b:13:17:60:13:
         69:e9:fc:34:f9:d2:06:89:fa:82:ff:fd:4d:e7:a9:f3:9a:9a:
         ca:91:06:6f:2a:51:b8:df:5c:a7:5f:be:b8:4b:fe:cb:8a:70:
         3e:d3:f0:a2:29:93:4f:e5:63:47:61:a4:e9:04:2b:8c:ce:99:
         0b:41:06:40:32:c6:17:3c:0c:87:6e:b7:59:f3:16:db:4e:58:
         d1:d5:b6:03:16:5c:75:5e:51:ae:4c:b4:4b:b3:d3:28:da:8c:
         e8:12:16:2a:2f:18:0b:f6:42:cf:78:21:a4:67:f4:d1:a4:5b:
         5c:95:b5:6a:83:fd:3a:21:ec:2c:10:bf:ea:58:85:6e:73:d6:
         87:63:8f:7b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEbqytMLAvTH6SnkHUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE0OTg3NTUtNzA1Ny00ZDI2LWFlNDMtODBmMzBhOGE5
MDExMB4XDTI0MDgxODEzMDA0MFoXDTI0MTExNjE0MDA0MFowLzEtMCsGA1UEAxMk
MGJjZTQ5ZmItMzMzMi00NTZmLTlkZjQtMWIyNzNiYmZmZTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43RrxKhrt9lZp2u2gTgl56WD9PywNkn7Yijz
wyQof/+sDfFyrLGxX2WRMndEdsZS02mrOQdF+eXnJ0xqxBHuPCzNRXQIerPGLWfO
EXmnqkdUx4LeNo2QprfGKkr/axp0UETS+XuCiEd9keekL/NzBeAqGQs4KICwFohm
2pzATV6F0JCmlt46HBKYnKumTBBYmXLUgNpywTVX6ELZqbyDUmx7oTtt5vpOZj7b
qG8WVOVs7On2jXpWjkFBA/Qkru9HabmB6D0URVutyOdPqefSizoC0BwuehfoVZB0
bxdxku9jXmt2LIR6qLlm9U8mRpZnE/JxMBmpQaw5iyI67aJJJwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKzWx5lcWBhkVWp0ckIft6HjxS94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMTQ5
ODc1NS03MDU3LTRkMjYtYWU0My04MGYzMGE4YTkwMTEvN2YzMWM3Y2YtZDdkNS0z
MGMxLTgwMGQtYTFkNjM4ZDRjYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDE0OTg3NTUtNzA1Ny00ZDI2LWFl
NDMtODBmMzBhOGE5MDExLzAxNDk4NzU1LTcwNTctNGQyNi1hZTQzLTgwZjMwYThh
OTAxMS5jcmwwHwYDVR0jBBgwFoAUuBDCKMjYT+BlfSuPF/KAKkOZPOMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMTQ5ODc1NS03MDU3LTRkMjYtYWU0My04MGYz
MGE4YTkwMTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5TIMA4E
AgACMAgDBgQmAgKpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDaA24v43NLu7fwGdYwCTNIKp3RbUYJfKQT
Lxg+v/JtKit7YB53rNswFEdsRTtmRTmIKncZIaVWuB+WIZJEiJdwEFvV/M3zLM5g
qtrCNYZ5VT0/e+6vuNRkJnPmLWp6Ji0jTT0eLeLGuADX4SNxeWS9FVxvW2wzQXtX
mxMXYBNp6fw0+dIGifqC//1N56nzmprKkQZvKlG431ynX764S/7LinA+0/CiKZNP
5WNHYaTpBCuMzpkLQQZAMsYXPAyHbrdZ8xbbTljR1bYDFlx1XlGuTLRLs9Mo2ozo
EhYqLxgL9kLPeCGkZ/TRpFtclbVqg/06IewsEL/qWIVuc9aHY497
-----END CERTIFICATE-----
Generated at Sat Oct 12 06:53:55 2024 by rpki-client on console-ams.rpki-client.org