Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/846bc9a1-af98-3b56-b971-d158a48911d1.roa
File:                     846bc9a1-af98-3b56-b971-d158a48911d1.roa (raw, json)
Hash identifier:          wKQjTEbBLuv37vGVvOjBgK1Lti0XZXWflBrkYvSKNWk=
Subject key identifier:   C2:D4:F7:B1:0F:13:C5:7E:54:A4:A0:51:93:AF:21:21:45:08:79:A8
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B6A207634EF8927672FEC80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/846bc9a1-af98-3b56-b971-d158a48911d1.roa
Signing time:             Thu 05 Dec 2024 15:47:33 +0000
ROA not before:           Thu 05 Dec 2024 15:47:33 +0000
ROA not after:            Wed 05 Mar 2025 15:47:33 +0000
asID:                     376
IP address blocks:        132.213.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:6a:20:76:34:ef:89:27:67:2f:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:47:33 2024 GMT
            Not After : Mar  5 15:47:33 2025 GMT
        Subject: CN=e08d6416-6385-4d6f-b110-890001a3f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:fd:dc:46:5a:ca:77:de:cc:f4:c8:2f:5a:
                    78:f3:9f:cc:7e:d9:6e:4f:b5:90:e4:47:db:a8:da:
                    2f:c5:de:88:a1:ea:8f:f7:d7:f5:03:78:75:1b:51:
                    90:7a:b2:b6:a1:6d:d2:85:80:12:1b:d6:15:c5:27:
                    2f:72:6f:06:28:8c:f5:9a:61:0b:05:9c:b6:4e:4a:
                    6d:1c:61:1a:ab:be:9c:00:83:b0:a8:a8:a4:38:f8:
                    e9:46:20:c1:f5:6e:93:f3:5f:81:25:56:59:2a:8f:
                    ae:b8:7a:81:ae:f6:f1:38:c9:e4:33:f0:c3:4e:dc:
                    b0:39:33:a5:a5:6a:8a:e4:3c:dd:62:70:44:1d:bd:
                    f8:37:10:26:f5:73:3d:c0:d0:e3:6e:0f:bb:88:be:
                    99:e6:2b:a7:56:7f:09:ce:7e:6e:da:b1:8b:fc:90:
                    8c:0b:a8:8c:50:3c:11:03:b5:7c:85:93:40:7b:e9:
                    07:62:18:26:7b:98:a4:be:59:e3:33:6b:aa:05:e8:
                    66:41:f6:d4:d2:a1:c0:76:9d:76:34:68:b6:55:1a:
                    bd:0a:f4:57:4c:c7:2c:f5:b9:9a:54:65:1d:e7:4b:
                    c5:5c:42:92:9e:04:67:db:42:66:58:51:40:35:7d:
                    71:83:ff:9b:ff:7e:a4:89:01:bc:da:9b:37:93:2c:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:F7:B1:0F:13:C5:7E:54:A4:A0:51:93:AF:21:21:45:08:79:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/846bc9a1-af98-3b56-b971-d158a48911d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:56:2b:29:0b:86:f0:63:fe:a4:c7:c6:45:06:49:3d:3e:
         4d:f8:28:b6:dc:8b:33:6f:31:38:ed:ea:3d:d7:ec:8d:e1:78:
         07:29:45:73:d9:5e:b2:fe:42:a6:4b:12:98:55:ec:47:c4:59:
         f5:0c:fd:6b:6e:b6:1a:12:da:98:7a:a1:fd:fa:0e:43:1d:e6:
         01:9a:e3:21:d4:39:f6:e0:05:93:c5:58:dd:f2:d4:39:09:bf:
         dc:bb:d3:e2:27:89:62:52:0b:83:ef:0b:49:34:95:5c:79:31:
         48:ef:e4:71:32:8c:18:ba:74:e1:a3:9f:59:f0:78:f7:ed:c1:
         dc:8b:a0:d8:f1:ac:19:c7:74:19:e0:c1:9c:cc:08:0d:fa:b8:
         7f:0d:ac:61:0d:de:f4:f5:70:0b:dd:0b:9c:68:b5:04:52:14:
         bc:a6:15:83:e1:93:ce:f8:c8:09:3e:9c:61:43:2d:bb:be:22:
         a4:ab:b4:ac:a8:12:02:a0:ea:37:f0:3f:99:1a:27:69:6b:52:
         b5:cc:62:12:c8:52:27:25:3c:75:42:cb:94:a4:47:e8:41:df:
         7b:6c:32:cf:09:dd:02:3a:af:d5:ff:28:2c:88:8e:58:82:ca:
         13:b3:42:40:87:fe:c0:a4:bf:9e:bd:d2:1b:9a:55:85:b4:dc:
         47:cf:0c:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbaiB2NO+JJ2cv7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1NDczM1oXDTI1MDMwNTE1NDczM1owLzEtMCsGA1UEAxMk
ZTA4ZDY0MTYtNjM4NS00ZDZmLWIxMTAtODkwMDAxYTNmMzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSX93EZaynfezPTIL1p485/MftluT7WQ5Efb
qNovxd6IoeqP99f1A3h1G1GQerK2oW3ShYASG9YVxScvcm8GKIz1mmELBZy2Tkpt
HGEaq76cAIOwqKikOPjpRiDB9W6T81+BJVZZKo+uuHqBrvbxOMnkM/DDTtywOTOl
pWqK5DzdYnBEHb34NxAm9XM9wNDjbg+7iL6Z5iunVn8Jzn5u2rGL/JCMC6iMUDwR
A7V8hZNAe+kHYhgme5ikvlnjM2uqBehmQfbU0qHAdp12NGi2VRq9CvRXTMcs9bma
VGUd50vFXEKSngRn20JmWFFANX1xg/+b/36kiQG82ps3kywXCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLU97EPE8V+VKSgUZOvISFFCHmoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvODQ2YmM5YTEtYWY5OC0z
YjU2LWI5NzEtZDE1OGE0ODkxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChNWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCiVispC4bwY/6kx8ZFBkk9Pk34KLbcizNvMTjt6j3X7I3heAcpRXPZ
XrL+QqZLEphV7EfEWfUM/WtuthoS2ph6of36DkMd5gGa4yHUOfbgBZPFWN3y1DkJ
v9y70+IniWJSC4PvC0k0lVx5MUjv5HEyjBi6dOGjn1nwePftwdyLoNjxrBnHdBng
wZzMCA36uH8NrGEN3vT1cAvdC5xotQRSFLymFYPhk874yAk+nGFDLbu+IqSrtKyo
EgKg6jfwP5kaJ2lrUrXMYhLIUiclPHVCy5SkR+hB33tsMs8J3QI6r9X/KCyIjliC
yhOzQkCH/sCkv5690huaVYW03EfPDOc=
-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org