Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/967b9ca3-fede-3f1a-8d8a-0d7f7f848c37.roa
File:                     967b9ca3-fede-3f1a-8d8a-0d7f7f848c37.roa (raw, json)
Hash identifier:          Hs30TwT774TY16qROAT4SHdjnTsR8kKZHwHZI3F3aDg=
Subject key identifier:   63:1E:38:A4:90:47:5A:B5:88:B2:FD:4F:AD:92:F1:F3:CD:F3:C2:64
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E1C111A5E
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/967b9ca3-fede-3f1a-8d8a-0d7f7f848c37.roa
Signing time:             Wed 30 Oct 2019 09:48:33 +0000
ROA not before:           Wed 30 Oct 2019 04:00:00 +0000
ROA not after:            Wed 30 Oct 2024 04:00:00 +0000
asID:                     16276
IP address blocks:        192.95.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:1c:11:1a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Oct 30 04:00:00 2019 GMT
            Not After : Oct 30 04:00:00 2024 GMT
        Subject: CN=80e81090-44d2-4b3c-a0d0-20e8701fbcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:70:a2:f7:8e:4e:30:8b:51:97:70:39:0f:
                    d2:82:22:b9:79:5a:f3:95:8a:32:ef:c3:ae:6b:f1:
                    af:01:4a:d9:97:2c:30:8f:56:20:0c:4c:25:45:de:
                    b5:01:2c:db:37:b0:14:a6:b1:65:b1:43:4f:85:5d:
                    fb:4c:84:e4:57:71:f5:13:54:d6:fa:f9:e5:89:42:
                    28:65:28:82:dc:33:7a:ff:b4:76:fe:10:c6:8c:89:
                    07:f9:d9:69:d8:2a:4e:eb:c3:0c:d4:8c:d8:17:52:
                    88:1b:9f:3f:6b:91:74:29:f2:39:46:4b:08:95:db:
                    77:35:42:38:b9:8b:e1:eb:f4:c8:63:dd:0a:b7:28:
                    e9:4a:2c:27:9b:81:c8:4e:ac:62:7e:27:49:c0:98:
                    30:40:22:5a:55:f7:17:25:92:68:79:61:71:2a:9c:
                    49:b5:62:5b:55:ef:10:d3:53:78:8b:af:02:c4:b1:
                    77:73:28:fa:28:d3:9e:ac:8e:d4:02:90:32:5b:33:
                    37:f8:ff:84:bc:e9:f5:d2:26:69:41:e3:d8:9e:06:
                    0d:61:bd:13:c6:63:c4:6c:4b:25:cc:b5:6c:8d:a7:
                    c4:af:c8:f9:c3:63:ef:62:08:6c:01:b6:3f:23:b6:
                    63:ab:d0:52:b7:be:f2:47:fe:b9:4a:e9:cc:a1:12:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:38:A4:90:47:5A:B5:88:B2:FD:4F:AD:92:F1:F3:CD:F3:C2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/967b9ca3-fede-3f1a-8d8a-0d7f7f848c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ce:4c:aa:d9:65:fd:38:03:2e:18:56:e4:89:bd:04:cd:87:
         77:3a:22:bd:4f:9c:65:69:82:d8:65:6f:b7:29:55:eb:5d:98:
         b1:88:b8:d8:96:c8:8d:7e:7b:3a:6c:f1:d6:19:6f:17:d2:63:
         4c:86:02:a2:4f:76:13:f5:31:72:59:52:af:c7:d9:b4:dd:d4:
         03:13:89:bb:29:e6:92:6d:38:13:ed:9a:6d:2e:70:e7:b7:ae:
         12:97:44:b4:79:83:90:ca:e7:b1:2c:15:5f:b0:64:56:ca:ee:
         77:0c:7e:27:bf:61:82:8d:7c:c6:31:9f:1a:cd:d6:cb:3d:02:
         0a:1c:a8:c7:03:0f:14:d2:82:56:84:21:c8:1c:7a:d3:07:7e:
         c9:23:ba:7e:93:17:37:9c:af:46:af:4d:c4:b5:1c:f6:93:a1:
         a7:82:3f:03:f8:d9:6e:2d:74:4a:88:f5:f0:70:de:8c:4f:bc:
         d9:8b:9e:f6:d2:54:12:a5:d5:a2:fa:10:4d:ed:2e:8e:da:41:
         8b:aa:8a:bd:9d:bf:58:c6:39:66:11:28:6f:41:e2:ee:af:82:
         56:a8:3a:32:52:52:2b:69:8e:03:d5:ad:ce:5e:76:c3:a4:b5:
         4e:42:a5:fa:3f:0e:9c:b1:2e:fa:b1:5c:07:5f:cf:ab:0a:cb:
         1e:25:a1:dd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbhwRGl4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGVlN2ZiNTQ3LTgxMWItNGRkZi1hYzUxLWYzZDZhNDkyNTUx
NTAeFw0xOTEwMzAwNDAwMDBaFw0yNDEwMzAwNDAwMDBaMC8xLTArBgNVBAMTJDgw
ZTgxMDkwLTQ0ZDItNGIzYy1hMGQwLTIwZTg3MDFmYmNhYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOWBcKL3jk4wi1GXcDkP0oIiuXla85WKMu/Drmvx
rwFK2ZcsMI9WIAxMJUXetQEs2zewFKaxZbFDT4Vd+0yE5Fdx9RNU1vr55YlCKGUo
gtwzev+0dv4QxoyJB/nZadgqTuvDDNSM2BdSiBufP2uRdCnyOUZLCJXbdzVCOLmL
4ev0yGPdCrco6UosJ5uByE6sYn4nScCYMEAiWlX3FyWSaHlhcSqcSbViW1XvENNT
eIuvAsSxd3Mo+ijTnqyO1AKQMlszN/j/hLzp9dImaUHj2J4GDWG9E8ZjxGxLJcy1
bI2nxK/I+cNj72IIbAG2PyO2Y6vQUre+8kf+uUrpzKESZTkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRjHjikkEdatYiy/U+tkvHzzfPCZDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWU3ZmI1
NDctODExYi00ZGRmLWFjNTEtZjNkNmE0OTI1NTE1Lzk2N2I5Y2EzLWZlZGUtM2Yx
YS04ZDhhLTBkN2Y3Zjg0OGMzNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2VlN2ZiNTQ3LTgxMWItNGRkZi1hYzUx
LWYzZDZhNDkyNTUxNS9lZTdmYjU0Ny04MTFiLTRkZGYtYWM1MS1mM2Q2YTQ5MjU1
MTUuY3JsMB8GA1UdIwQYMBaAFPxW4OduS2qgfH7TM/kG3hYyW/W2MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZWU3ZmI1NDctODExYi00ZGRmLWFjNTEtZjNkNmE0
OTI1NTE1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBfADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAqs5Mqtll/TgDLhhW5Im9BM2HdzoivU+cZWmC2GVvtylV612YsYi42JbIjX57
Omzx1hlvF9JjTIYCok92E/UxcllSr8fZtN3UAxOJuynmkm04E+2abS5w57euEpdE
tHmDkMrnsSwVX7BkVsrudwx+J79hgo18xjGfGs3Wyz0CChyoxwMPFNKCVoQhyBx6
0wd+ySO6fpMXN5yvRq9NxLUc9pOhp4I/A/jZbi10Soj18HDejE+82Yue9tJUEqXV
ovoQTe0ujtpBi6qKvZ2/WMY5ZhEob0Hi7q+CVqg6MlJSK2mOA9Wtzl52w6S1TkKl
+j8OnLEu+rFcB1/PqwrLHiWh3Q==
-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:29 2024 by rpki-client on console-fra.rpki-client.org