Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/44f4b3ac-3ef1-36b0-be7f-b62c950fbc9f.roa
File:                     44f4b3ac-3ef1-36b0-be7f-b62c950fbc9f.roa (raw, json)
Hash identifier:          c9I5LzRDLXTpUU+mDzcbh/8+qyG6rBSn5QbSCbChKzs=
Subject key identifier:   2B:41:3D:77:D6:60:FD:38:BE:96:07:B6:48:E8:B6:11:22:2B:96:FB
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35EF7976
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/44f4b3ac-3ef1-36b0-be7f-b62c950fbc9f.roa
Signing time:             Mon 04 Nov 2019 10:21:56 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        51.161.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:ef:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=b560f131-88a7-4143-8db8-4667ce0c751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:9e:d4:9a:11:8e:42:2a:6d:13:06:0a:56:
                    c5:50:45:b7:f1:03:db:01:92:55:67:50:50:25:dc:
                    1d:fc:34:40:69:89:d1:86:d6:63:e4:4a:98:f7:88:
                    0c:97:19:22:ca:c6:fb:18:f5:6b:df:08:e9:5d:8e:
                    96:44:35:85:0f:97:50:67:09:80:be:77:1b:de:9c:
                    ed:28:c6:9d:da:8d:19:f8:a7:78:07:48:30:9a:72:
                    0f:ab:13:ee:66:31:e2:02:fc:86:3d:d7:32:41:c0:
                    c6:bd:ca:39:40:ab:0d:d1:4d:52:f6:66:66:75:1a:
                    ff:6d:42:47:a3:b4:d6:81:54:23:da:59:6a:a6:aa:
                    8b:7a:17:37:7c:68:05:7a:3f:e8:84:da:c5:49:f3:
                    26:a9:f6:cf:9c:14:1e:c3:06:37:8e:35:28:9a:ab:
                    97:08:ce:be:4f:a8:19:ec:e1:23:11:85:05:5f:a5:
                    c9:72:7f:c6:86:84:0c:89:3d:f8:0e:6f:2e:41:a6:
                    3d:68:b7:8e:d1:c5:c8:5e:ae:34:e0:aa:bf:d4:3f:
                    e6:fd:83:2e:43:98:16:e4:a6:e8:36:54:4b:0e:30:
                    be:6b:e0:f9:62:57:50:2c:1e:71:5f:31:b5:4f:01:
                    6e:e0:34:b9:9d:ba:20:ca:89:fa:3d:5b:79:04:aa:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:3D:77:D6:60:FD:38:BE:96:07:B6:48:E8:B6:11:22:2B:96:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/44f4b3ac-3ef1-36b0-be7f-b62c950fbc9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.161.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:5a:92:06:53:c5:a4:17:b2:63:20:27:46:50:bf:c9:4f:
         4b:b2:2f:cd:ac:50:6a:21:69:66:26:37:c5:56:fb:85:af:e5:
         b5:af:85:18:c2:5b:8e:81:a3:cf:b8:61:0b:69:2c:c9:17:66:
         c6:13:4e:a4:ee:03:16:0a:56:14:94:11:b3:20:57:35:d7:94:
         73:39:be:e2:24:29:0a:c5:86:58:50:37:87:eb:33:62:fd:dd:
         86:06:8d:4b:81:b4:2e:c7:fb:db:4b:5a:ab:cf:d0:a1:04:3a:
         31:70:71:e8:8d:49:73:29:b3:f6:48:d8:dc:39:99:0c:60:d7:
         c2:11:bb:2e:36:5c:93:12:3e:44:dc:fb:7a:a1:0f:20:b3:d1:
         3e:42:f8:b3:73:db:4b:c8:d0:23:25:14:e2:56:8d:a8:56:93:
         d2:50:7d:19:68:05:4e:56:f3:63:70:18:0d:c4:b6:3c:4e:19:
         ab:13:3c:94:4a:81:85:32:f1:a9:4f:99:88:67:59:de:84:25:
         e6:f5:14:95:8f:62:1b:82:54:8e:f1:cc:b8:36:fa:d2:e3:aa:
         a9:ba:0f:87:3e:8d:b3:7b:f3:7e:ac:2f:ee:c7:4a:52:fe:56:
         33:94:ac:ae:3c:5b:54:26:a9:19:68:25:4e:94:13:49:70:82:
         57:7d:b4:22
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbjXveXYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGVlN2ZiNTQ3LTgxMWItNGRkZi1hYzUxLWYzZDZhNDkyNTUx
NTAeFw0xOTExMDQwNTAwMDBaFw0yNDExMDQwNTAwMDBaMC8xLTArBgNVBAMTJGI1
NjBmMTMxLTg4YTctNDE0My04ZGI4LTQ2NjdjZTBjNzUxZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM5DntSaEY5CKm0TBgpWxVBFt/ED2wGSVWdQUCXc
Hfw0QGmJ0YbWY+RKmPeIDJcZIsrG+xj1a98I6V2OlkQ1hQ+XUGcJgL53G96c7SjG
ndqNGfineAdIMJpyD6sT7mYx4gL8hj3XMkHAxr3KOUCrDdFNUvZmZnUa/21CR6O0
1oFUI9pZaqaqi3oXN3xoBXo/6ITaxUnzJqn2z5wUHsMGN441KJqrlwjOvk+oGezh
IxGFBV+lyXJ/xoaEDIk9+A5vLkGmPWi3jtHFyF6uNOCqv9Q/5v2DLkOYFuSm6DZU
Sw4wvmvg+WJXUCwecV8xtU8BbuA0uZ26IMqJ+j1beQSqHPcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQrQT131mD9OL6WB7ZI6LYRIiuW+zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWU3ZmI1
NDctODExYi00ZGRmLWFjNTEtZjNkNmE0OTI1NTE1LzQ0ZjRiM2FjLTNlZjEtMzZi
MC1iZTdmLWI2MmM5NTBmYmM5Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2VlN2ZiNTQ3LTgxMWItNGRkZi1hYzUx
LWYzZDZhNDkyNTUxNS9lZTdmYjU0Ny04MTFiLTRkZGYtYWM1MS1mM2Q2YTQ5MjU1
MTUuY3JsMB8GA1UdIwQYMBaAFPxW4OduS2qgfH7TM/kG3hYyW/W2MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZWU3ZmI1NDctODExYi00ZGRmLWFjNTEtZjNkNmE0
OTI1NTE1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzOhADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjiRakgZTxaQXsmMgJ0ZQv8lPS7IvzaxQaiFpZiY3xVb7ha/lta+FGMJbjoGj
z7hhC2ksyRdmxhNOpO4DFgpWFJQRsyBXNdeUczm+4iQpCsWGWFA3h+szYv3dhgaN
S4G0Lsf720taq8/QoQQ6MXBx6I1Jcymz9kjY3DmZDGDXwhG7LjZckxI+RNz7eqEP
ILPRPkL4s3PbS8jQIyUU4laNqFaT0lB9GWgFTlbzY3AYDcS2PE4ZqxM8lEqBhTLx
qU+ZiGdZ3oQl5vUUlY9iG4JUjvHMuDb60uOqqboPhz6Ns3vzfqwv7sdKUv5WM5Ss
rjxbVCapGWglTpQTSXCCV320Ig==
-----END CERTIFICATE-----