Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/6c62dd69-f9c5-32ad-b075-8fdc14865cae.roa
File:                     6c62dd69-f9c5-32ad-b075-8fdc14865cae.roa (raw, json)
Hash identifier:          dfDnqh2TFO5uN6FcLk5zAZWYZ0PkXCAJ8McJ9jApuJ0=
Subject key identifier:   C6:91:BA:16:1C:AB:FE:97:6E:5E:AC:BB:95:B7:2C:C3:78:51:42:7E
Certificate issuer:       /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial:       010D0C9F43285847F25118C048AE00F0941494A0
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/6c62dd69-f9c5-32ad-b075-8fdc14865cae.roa
Signing time:             Wed 20 Nov 2024 22:28:58 +0000
ROA not before:           Wed 20 Nov 2024 22:28:58 +0000
ROA not after:            Tue 18 Feb 2025 22:28:58 +0000
asID:                     396982
IP address blocks:        66.33.33.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 01 Dec 2024 07:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:51:18:c0:48:ae:00:f0:94:14:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
        Validity
            Not Before: Nov 20 22:28:58 2024 GMT
            Not After : Feb 18 22:28:58 2025 GMT
        Subject: CN=f2a8c9b8-0fde-4216-b217-e019c23ee2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:fa:82:86:04:f0:20:a6:61:08:a9:d2:27:
                    08:26:42:91:e9:43:87:98:d3:17:5a:65:68:53:63:
                    1d:d5:ea:3b:68:28:8a:55:88:8b:75:fe:ba:a6:c1:
                    f2:f1:10:03:48:24:90:32:31:e5:3c:50:3d:c7:0d:
                    ab:70:af:5a:e4:48:41:30:db:4b:d9:28:90:22:78:
                    1a:91:d0:31:d8:3d:f8:2c:f8:1a:a2:c6:26:98:46:
                    49:38:b7:cd:bb:eb:dd:54:5c:a5:55:46:26:f3:db:
                    f2:68:75:1e:a4:18:33:46:32:ee:f5:52:4b:89:f4:
                    f7:a9:80:f8:63:4a:a7:86:88:70:61:bb:79:72:ef:
                    c2:a4:ac:90:40:b7:b0:67:15:89:75:11:23:33:1f:
                    ef:b2:ee:e5:83:17:2c:94:4a:fe:44:35:6c:bd:72:
                    5b:46:3c:9e:5e:b1:ab:10:db:dd:ca:00:3b:55:14:
                    ca:f7:37:c9:fd:77:b6:36:61:b5:91:18:b5:8c:40:
                    60:4f:f1:a8:46:2f:2f:6e:37:0a:a4:42:78:76:4c:
                    04:d6:4c:4f:f3:6d:61:5f:ae:fb:05:3e:5e:e4:2d:
                    c1:31:6b:a1:76:8e:8b:3a:77:c9:dc:0b:4a:03:b2:
                    fd:4d:03:a9:6c:6e:62:72:df:d0:c0:0c:26:8a:da:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:91:BA:16:1C:AB:FE:97:6E:5E:AC:BB:95:B7:2C:C3:78:51:42:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/6c62dd69-f9c5-32ad-b075-8fdc14865cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl

            X509v3 Authority Key Identifier:
                keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:41:a7:09:5c:e2:86:6f:62:92:70:1b:78:53:58:bd:7c:8d:
         d1:4f:a7:09:5c:7f:61:ef:2a:9f:4b:fa:5a:ff:f7:29:e2:be:
         53:c6:41:a3:83:d0:95:6a:f9:df:fe:3d:f7:3d:4f:93:3a:b6:
         f6:d2:76:0b:9d:c6:2d:66:ae:1e:bf:ec:36:91:39:c8:e8:93:
         ce:87:47:7b:35:ba:f4:d8:e7:7a:b2:cb:e0:78:a4:1b:ed:21:
         e6:56:c2:66:65:6b:b7:b6:2f:18:46:8e:61:25:6e:fc:b2:76:
         4a:57:8e:22:1c:dd:6a:73:ad:e1:7e:db:21:7a:c2:2b:4a:e6:
         99:13:7c:c8:d5:83:55:8e:0a:ef:2b:e8:48:ab:8b:46:61:7b:
         09:d4:7c:44:50:86:15:49:e1:38:ca:79:42:8e:b7:fd:66:82:
         f3:04:c8:d5:73:35:5f:bf:ab:2f:37:35:17:ae:60:30:4c:b7:
         b7:eb:a6:b5:f0:51:83:0f:0f:b0:f1:09:9c:e1:33:b4:04:f7:
         99:ca:1a:9b:ad:7f:55:dd:51:8e:07:f0:04:3c:c8:6f:a0:21:
         d9:cf:84:75:1c:20:1e:16:9f:9f:31:c7:e8:45:91:c3:d2:85:
         c5:5c:67:f4:5d:a0:c7:e2:c2:be:f9:25:79:9e:e4:ea:42:f9:
         5e:c7:cd:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyURjASK4A8JQUlKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlZDYxODUtMTg2Yy00ZGE4LTkyNTMtN2Y2MTczMWFl
ZjI1MB4XDTI0MTEyMDIyMjg1OFoXDTI1MDIxODIyMjg1OFowLzEtMCsGA1UEAxMk
ZjJhOGM5YjgtMGZkZS00MjE2LWIyMTctZTAxOWMyM2VlMmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDn6goYE8CCmYQip0icIJkKR6UOHmNMXWmVo
U2Md1eo7aCiKVYiLdf66psHy8RADSCSQMjHlPFA9xw2rcK9a5EhBMNtL2SiQInga
kdAx2D34LPgaosYmmEZJOLfNu+vdVFylVUYm89vyaHUepBgzRjLu9VJLifT3qYD4
Y0qnhohwYbt5cu/CpKyQQLewZxWJdREjMx/vsu7lgxcslEr+RDVsvXJbRjyeXrGr
ENvdygA7VRTK9zfJ/Xe2NmG1kRi1jEBgT/GoRi8vbjcKpEJ4dkwE1kxP821hX677
BT5e5C3BMWuhdo6LOnfJ3AtKA7L9TQOpbG5ict/QwAwmitoJpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMaRuhYcq/6Xbl6su5W3LMN4UUJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYmVk
NjE4NS0xODZjLTRkYTgtOTI1My03ZjYxNzMxYWVmMjUvNmM2MmRkNjktZjljNS0z
MmFkLWIwNzUtOGZkYzE0ODY1Y2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGJlZDYxODUtMTg2Yy00ZGE4LTky
NTMtN2Y2MTczMWFlZjI1LzBiZWQ2MTg1LTE4NmMtNGRhOC05MjUzLTdmNjE3MzFh
ZWYyNS5jcmwwHwYDVR0jBBgwFoAUQCIapIrE96pnpTsYYnt6uYyoJH8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYmVkNjE4NS0xODZjLTRkYTgtOTI1My03ZjYx
NzMxYWVmMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZBpwlc4oZvYpJwG3hTWL18jdFPpwlcf2HvKp9L+lr/9ynivlPGQaOD
0JVq+d/+Pfc9T5M6tvbSdgudxi1mrh6/7DaROcjok86HR3s1uvTY53qyy+B4pBvt
IeZWwmZla7e2LxhGjmElbvyydkpXjiIc3WpzreF+2yF6witK5pkTfMjVg1WOCu8r
6Eiri0ZhewnUfERQhhVJ4TjKeUKOt/1mgvMEyNVzNV+/qy83NReuYDBMt7frprXw
UYMPD7DxCZzhM7QE95nKGputf1XdUY4H8AQ8yG+gIdnPhHUcIB4Wn58xx+hFkcPS
hcVcZ/RdoMfiwr75JXme5OpC+V7Hze0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:42 2025 by rpki-client