Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64974682-536b-3a5b-a66e-85fabb4b5daf.roa
File:                     64974682-536b-3a5b-a66e-85fabb4b5daf.roa (raw, json)
Hash identifier:          iv7pYjTWF1TlUCP+IUUK5uiZq+LjAzORm6oB5xndflQ=
Subject key identifier:   76:B1:00:16:CD:15:20:4A:ED:A5:B9:9E:D9:2D:41:77:7F:1F:8F:E1
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285847EE6F6A44C20E853E6114AE80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64974682-536b-3a5b-a66e-85fabb4b5daf.roa
Signing time:             Tue 19 Nov 2024 13:06:49 +0000
ROA not before:           Tue 19 Nov 2024 13:06:49 +0000
ROA not after:            Mon 17 Feb 2025 13:06:49 +0000
asID:                     55154
IP address blocks:        74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 15:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:6f:6a:44:c2:0e:85:3e:61:14:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Nov 19 13:06:49 2024 GMT
            Not After : Feb 17 13:06:49 2025 GMT
        Subject: CN=66173746-4d96-4162-b6fc-633fec2708c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:a1:55:89:b5:c5:8e:ec:6b:29:e9:24:0b:
                    bd:57:fb:eb:71:5d:2f:09:86:90:ae:62:5a:bf:26:
                    16:37:b4:c0:92:de:6e:11:51:30:40:ac:b9:0b:c4:
                    56:34:11:cc:6c:32:5d:52:84:20:b2:7b:54:12:22:
                    a2:46:82:fc:37:fa:d1:bf:87:9d:1a:1e:19:da:08:
                    2d:3f:e1:73:f3:ed:87:da:59:41:5a:6e:6d:b7:0b:
                    02:66:e8:79:ec:b3:ab:27:a9:9d:60:49:6b:19:c4:
                    16:6f:ee:61:f6:6e:13:6c:a2:9f:4e:1b:df:1e:c1:
                    28:c0:2e:c6:35:1f:77:33:5a:61:66:70:f1:88:3f:
                    ab:eb:0f:39:2d:00:df:35:35:45:6f:60:4c:55:00:
                    32:2c:9a:84:11:2c:74:d6:9f:66:7f:64:84:04:0d:
                    e2:61:90:cb:76:5b:9f:0d:73:ea:7c:0f:ca:fa:b5:
                    9f:8e:b9:68:30:e5:fa:89:63:38:0e:9a:2d:7a:fc:
                    b3:f2:57:e8:67:75:77:f2:dd:da:c1:c8:c3:5d:bf:
                    54:60:c3:4a:d0:13:c9:c1:63:7d:ac:df:ce:6d:1d:
                    5b:a8:fa:a2:76:18:d3:db:02:a7:0c:e3:6a:13:e0:
                    f0:9c:07:fc:b3:bb:2d:80:9b:c1:9f:b9:50:70:19:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:00:16:CD:15:20:4A:ED:A5:B9:9E:D9:2D:41:77:7F:1F:8F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64974682-536b-3a5b-a66e-85fabb4b5daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0/24
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:88:24:90:d7:00:a2:dd:6a:a2:55:c2:d3:a5:40:a1:4f:
         c6:db:e1:77:48:36:58:61:e9:eb:00:58:7a:b2:5b:70:f6:91:
         a3:e6:6a:6c:3f:30:b2:fa:70:15:bd:cf:49:cb:ff:67:82:ad:
         c0:16:5f:1b:fd:aa:d9:a2:c0:7f:87:b4:6a:a4:c7:38:a0:e9:
         e9:4a:d8:95:ca:46:23:40:1c:d0:b3:2b:d0:47:8e:ec:5d:43:
         b3:09:f0:38:45:3d:c9:c9:92:77:07:e3:ad:07:05:b7:28:4b:
         4c:51:11:fe:b0:b0:43:b4:1f:51:c8:c8:1e:23:02:b2:ee:6b:
         81:a4:d8:45:6c:2e:21:66:7d:90:42:ba:d5:22:06:33:48:91:
         a2:13:d7:0b:20:43:64:ac:d6:52:88:e7:ff:da:79:31:b8:87:
         74:85:04:59:e4:5f:fc:88:a7:71:f1:b9:53:44:64:2f:a4:92:
         d2:c4:ca:b9:4b:6d:8c:fd:0b:5e:ad:97:96:79:b1:8d:40:b0:
         73:22:7d:a6:23:ad:c9:cb:60:a7:31:db:bf:67:9c:f9:60:82:
         0f:b4:16:35:b3:c4:c8:57:01:5a:b8:72:79:e6:50:ed:da:46:
         7e:cf:fb:30:bb:84:c9:c8:a0:a5:02:de:5e:af:11:d4:f6:0e:
         16:f5:e1:4e
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEfub2pEwg6FPmEUroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI0MTExOTEzMDY0OVoXDTI1MDIxNzEzMDY0OVowLzEtMCsGA1UEAxMk
NjYxNzM3NDYtNGQ5Ni00MTYyLWI2ZmMtNjMzZmVjMjcwOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoehVYm1xY7saynpJAu9V/vrcV0vCYaQrmJa
vyYWN7TAkt5uEVEwQKy5C8RWNBHMbDJdUoQgsntUEiKiRoL8N/rRv4edGh4Z2ggt
P+Fz8+2H2llBWm5ttwsCZuh57LOrJ6mdYElrGcQWb+5h9m4TbKKfThvfHsEowC7G
NR93M1phZnDxiD+r6w85LQDfNTVFb2BMVQAyLJqEESx01p9mf2SEBA3iYZDLdluf
DXPqfA/K+rWfjrloMOX6iWM4Dpotevyz8lfoZ3V38t3awcjDXb9UYMNK0BPJwWN9
rN/ObR1bqPqidhjT2wKnDONqE+DwnAf8s7stgJvBn7lQcBldmQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFHaxABbNFSBK7aW5ntktQXd/H4/hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvNjQ5NzQ2ODItNTM2Yi0z
YTViLWE2NmUtODVmYWJiNGI1ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQASlClAwQA
SlCuAwQASlCxAwQAztT7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJfciCSQ1wCi3WqiVcLTpUChT8bb4XdI
Nlhh6esAWHqyW3D2kaPmamw/MLL6cBW9z0nL/2eCrcAWXxv9qtmiwH+HtGqkxzig
6elK2JXKRiNAHNCzK9BHjuxdQ7MJ8DhFPcnJkncH460HBbcoS0xREf6wsEO0H1HI
yB4jArLua4Gk2EVsLiFmfZBCutUiBjNIkaIT1wsgQ2Ss1lKI5//aeTG4h3SFBFnk
X/yIp3HxuVNEZC+kktLEyrlLbYz9C16tl5Z5sY1AsHMifaYjrcnLYKcx279nnPlg
gg+0FjWzxMhXAVq4cnnmUO3aRn7P+zC7hMnIoKUC3l6vEdT2Dhb14U4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:48 2024 by rpki-client on console-ams.rpki-client.org