Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f33d79d4-f988-3b96-a00f-e5c1697f4a7d.roa
File:                     f33d79d4-f988-3b96-a00f-e5c1697f4a7d.roa (raw, json)
Hash identifier:          oPK+LjeKD27gtzusSYLjgFSGRIDCp0Jl0T56K0yUzG4=
Subject key identifier:   2D:17:1B:60:6E:54:CC:0D:63:7E:C3:4C:17:BC:45:60:CB:49:F6:40
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D3D06B770
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f33d79d4-f988-3b96-a00f-e5c1697f4a7d.roa
Signing time:             Tue 17 Sep 2019 02:21:53 +0000
ROA not before:           Tue 09 Apr 2019 04:00:00 +0000
ROA not after:            Mon 09 Apr 2029 04:00:00 +0000
asID:                     14120
IP address blocks:        216.93.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Apr 2022 02:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:3d:06:b7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  9 04:00:00 2019 GMT
            Not After : Apr  9 04:00:00 2029 GMT
        Subject: CN=0298da37-02ad-46eb-9d26-e83e62089bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:12:be:65:20:cb:a5:08:07:0d:19:57:c8:
                    87:d7:75:30:ad:66:d2:fc:93:c9:44:04:bf:1a:75:
                    95:11:07:7d:fd:66:88:75:b8:ef:64:50:3c:b7:37:
                    74:c4:5e:11:87:4b:2e:1f:79:0b:24:ce:7b:88:f1:
                    89:01:f8:f2:7c:38:8e:e9:be:7b:66:87:6d:15:69:
                    91:52:04:45:19:54:27:55:0b:49:3c:cf:f8:3f:66:
                    fb:e1:76:41:79:5f:16:bd:9d:0c:0c:b2:a7:26:19:
                    19:8b:75:81:45:94:dc:fd:57:ce:fd:c4:a3:e0:51:
                    a7:38:a5:51:1c:73:ab:f4:c1:71:26:1d:f7:bd:53:
                    41:2e:7e:c9:bc:09:9b:39:7d:f7:3b:27:54:b2:a4:
                    32:5c:88:55:2c:b2:c1:74:7d:6d:7b:a3:a4:84:74:
                    13:67:e6:02:00:58:4d:b2:c0:47:79:46:9c:2e:02:
                    8d:f9:b4:51:62:02:f6:84:0e:03:b0:7d:42:62:71:
                    34:d8:38:11:4e:e0:a3:3f:19:b5:d1:93:e3:c9:07:
                    30:3a:9a:1b:70:86:94:b5:87:7c:0b:d1:0d:dd:4e:
                    a7:24:70:de:33:e6:d0:9c:cc:d9:51:77:79:e7:d6:
                    40:ae:c5:0a:b9:0f:e2:de:7e:2b:76:82:52:86:56:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:1B:60:6E:54:CC:0D:63:7E:C3:4C:17:BC:45:60:CB:49:F6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f33d79d4-f988-3b96-a00f-e5c1697f4a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:eb:c7:e3:2e:95:0f:e1:b0:04:69:d2:0a:79:23:19:d5:
         1e:e8:f3:0a:9a:1c:99:e2:ed:ac:dc:d7:6f:17:e8:aa:b2:07:
         c2:e1:c2:87:a5:60:21:5c:a2:4e:91:2d:83:77:be:a9:7d:03:
         73:c1:92:d5:6e:94:8a:0b:dd:6b:e8:f7:cb:bb:b1:d0:a2:2d:
         b9:c4:7c:8f:88:95:0f:e0:72:a9:d0:fe:dc:d2:01:12:1a:69:
         a6:fe:5c:69:40:28:0d:66:3f:50:d3:23:c7:7b:3d:a5:56:e1:
         3c:44:82:15:5f:ae:e0:2a:fa:99:47:fb:0a:c1:0f:c7:c1:eb:
         b0:d8:94:8b:3c:80:56:85:fe:7e:e6:4b:0b:42:f5:e6:9b:d5:
         ce:00:1e:76:5b:8c:38:d6:ac:a1:f4:bf:9c:46:e6:3a:a0:53:
         a2:d3:c3:a7:0a:b5:bd:b1:84:85:c3:01:db:c8:71:9b:52:8f:
         76:15:e2:18:25:c4:99:4c:e7:d2:1f:eb:6c:9c:4a:0a:f3:0f:
         c8:a8:01:74:eb:3a:01:ce:3a:70:77:75:e0:16:0c:fe:2b:a8:
         c5:bb:87:00:d1:80:ac:d0:35:ce:1e:a2:e3:11:a0:f7:76:bf:
         c1:ef:0b:ac:29:e6:4e:d1:22:46:72:c3:4e:da:91:e3:23:5c:
         c3:3c:f8:0b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbT0Gt3AwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgxOTFk
ZDAeFw0xOTA0MDkwNDAwMDBaFw0yOTA0MDkwNDAwMDBaMC8xLTArBgNVBAMTJDAy
OThkYTM3LTAyYWQtNDZlYi05ZDI2LWU4M2U2MjA4OWJiODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ71Er5lIMulCAcNGVfIh9d1MK1m0vyTyUQEvxp1
lREHff1miHW472RQPLc3dMReEYdLLh95CyTOe4jxiQH48nw4jum+e2aHbRVpkVIE
RRlUJ1ULSTzP+D9m++F2QXlfFr2dDAyypyYZGYt1gUWU3P1Xzv3Eo+BRpzilURxz
q/TBcSYd971TQS5+ybwJmzl99zsnVLKkMlyIVSyywXR9bXujpIR0E2fmAgBYTbLA
R3lGnC4Cjfm0UWIC9oQOA7B9QmJxNNg4EU7goz8ZtdGT48kHMDqaG3CGlLWHfAvR
Dd1OpyRw3jPm0JzM2VF3eefWQK7FCrkP4t5+K3aCUoZWSCMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQtFxtgblTMDWN+w0wXvEVgy0n2QDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5
ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5MWRkL2YzM2Q3OWQ0LWY5ODgtM2I5
Ni1hMDBmLWU1YzE2OTdmNGE3ZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYy
LWY4MmVkZDgxOTFkZC9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkx
ZGQuY3JsMB8GA1UdIwQYMBaAFP8KG+aMRdNWKjDwQ43CF3JEwKWUMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRk
ODE5MWRkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhd/jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEADlbrx+MulQ/hsARp0gp5IxnVHujzCpocmeLtrNzXbxfoqrIHwuHCh6VgIVyi
TpEtg3e+qX0Dc8GS1W6Uigvda+j3y7ux0KItucR8j4iVD+ByqdD+3NIBEhpppv5c
aUAoDWY/UNMjx3s9pVbhPESCFV+u4Cr6mUf7CsEPx8HrsNiUizyAVoX+fuZLC0L1
5pvVzgAedluMONasofS/nEbmOqBTotPDpwq1vbGEhcMB28hxm1KPdhXiGCXEmUzn
0h/rbJxKCvMPyKgBdOs6Ac46cHd14BYM/iuoxbuHANGArNA1zh6i4xGg93a/we8L
rCnmTtEiRnLDTtqR4yNcwzz4Cw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:56 2024 by rpki-client on console-ams.rpki-client.org