Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d3ab3e9e-8d18-36b6-b744-ed0a4728df46.roa
File:                     d3ab3e9e-8d18-36b6-b744-ed0a4728df46.roa (raw, json)
Hash identifier:          RDAVoz3Dgo/lZ1cLDyP4XRbFfoWRT6V3+nUnTGZGZEw=
Subject key identifier:   0B:8D:0A:13:AC:C5:6B:BA:0D:D8:A7:45:E4:25:AE:62:66:9B:86:A1
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285849CA6A10F54B7C8896876D04C0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d3ab3e9e-8d18-36b6-b744-ed0a4728df46.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     36832
IP address blocks:        142.214.140.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 19 May 2025 13:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:10:f5:4b:7c:88:96:87:6d:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=360c060b-f1e7-42b1-9d32-0bb64eab80a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:9a:93:7d:53:44:c8:1c:dd:92:af:c5:d6:
                    d7:29:01:16:ee:9d:42:14:ab:d8:04:ed:93:ba:63:
                    0c:d7:0a:f1:31:2e:bf:44:b4:42:51:7d:b8:d5:db:
                    21:61:e7:36:d5:55:14:36:fd:29:10:d0:e4:89:af:
                    1e:da:b6:79:33:26:e0:28:b5:17:23:da:28:78:75:
                    0b:6d:e2:db:7a:5f:d9:54:e7:f2:78:68:77:f8:72:
                    bf:b3:56:14:29:9d:6e:b6:85:58:bf:cc:46:52:6e:
                    99:87:a4:e2:f1:b8:94:b3:51:95:c4:78:89:91:69:
                    51:13:ce:f2:f5:88:d6:10:68:dd:d4:e4:f7:e8:f4:
                    28:34:de:49:6a:f0:3c:e2:70:dd:6b:72:57:63:04:
                    8a:15:ed:28:63:e4:81:0b:86:ec:de:fc:3a:24:80:
                    b4:5f:c5:b7:84:ff:36:0b:29:a9:c6:15:59:0b:05:
                    2c:82:d6:a5:e9:30:56:97:7c:1f:a7:90:52:3e:88:
                    38:37:fa:f8:49:6b:53:57:23:26:0d:3e:55:72:c4:
                    a2:68:8b:e0:f9:30:ed:75:29:89:1e:57:c0:2e:fa:
                    b8:dc:2f:c9:69:84:a1:22:04:73:1e:d2:47:95:52:
                    ae:ff:3d:ea:5e:8d:13:92:cd:5a:8b:21:0c:14:f5:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:0A:13:AC:C5:6B:BA:0D:D8:A7:45:E4:25:AE:62:66:9B:86:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d3ab3e9e-8d18-36b6-b744-ed0a4728df46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:71:5c:9e:4d:c7:68:77:d9:8e:2d:c0:67:e3:e1:f2:26:ec:
         93:35:82:19:a5:e2:fa:6f:97:42:c9:b5:08:f7:33:a2:fe:01:
         60:81:ee:7b:db:62:b6:ff:af:03:52:e4:27:a3:25:7e:ac:64:
         00:57:da:f8:d1:90:4f:64:4f:60:47:4d:61:99:f1:b6:e0:72:
         da:74:af:c6:3b:bf:31:99:ec:f2:ec:81:0a:d6:16:a9:3f:60:
         b8:fc:b5:62:9f:1d:f3:f1:08:04:84:1e:1a:8b:65:fd:38:71:
         36:4e:be:ff:da:e6:55:76:84:df:14:eb:86:94:dd:a2:ae:8d:
         b7:ad:81:86:c3:4e:fa:cb:45:f8:e9:c4:2a:99:f4:7e:46:e3:
         10:49:0a:7c:52:1e:74:fa:29:42:4a:e7:5d:ff:98:9f:ed:f7:
         5c:e4:f2:48:61:1b:1d:da:d9:7c:2e:dd:d0:12:07:7d:f3:e2:
         de:a9:fe:4c:ec:0a:8f:b5:b1:02:c1:38:e6:a1:16:21:85:3e:
         e0:c1:bb:88:c5:fb:f1:af:67:48:67:17:af:11:ae:cb:ff:97:
         19:1a:f9:55:49:9f:e1:a7:e7:b8:cf:2d:e2:8c:51:db:cc:89:
         d6:04:df:da:ab:d5:67:f0:71:f3:fc:11:5f:43:29:fb:40:f0:
         8e:bd:a1:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnKahD1S3yIlodtBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3
ODYxMB4XDTI1MDUwOTAxMDA0N1oXDTI1MDgwNzAxMDA0N1owLzEtMCsGA1UEAxMk
MzYwYzA2MGItZjFlNy00MmIxLTlkMzItMGJiNjRlYWI4MGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+mak31TRMgc3ZKvxdbXKQEW7p1CFKvYBO2T
umMM1wrxMS6/RLRCUX241dshYec21VUUNv0pENDkia8e2rZ5MybgKLUXI9ooeHUL
beLbel/ZVOfyeGh3+HK/s1YUKZ1utoVYv8xGUm6Zh6Ti8biUs1GVxHiJkWlRE87y
9YjWEGjd1OT36PQoNN5JavA84nDda3JXYwSKFe0oY+SBC4bs3vw6JIC0X8W3hP82
CympxhVZCwUsgtal6TBWl3wfp5BSPog4N/r4SWtTVyMmDT5VcsSiaIvg+TDtdSmJ
HlfALvq43C/JaYShIgRzHtJHlVKu/z3qXo0Tks1aiyEMFPW3yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuNChOsxWu6DdinReQlrmJmm4ahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk
YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvZDNhYjNlOWUtOGQxOC0z
NmI2LWI3NDQtZWQwYTQ3MjhkZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi
MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3
Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4
ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBxXJ5Nx2h32Y4twGfj4fIm7JM1ghml4vpvl0LJtQj3M6L+AWCB7nvb
Yrb/rwNS5CejJX6sZABX2vjRkE9kT2BHTWGZ8bbgctp0r8Y7vzGZ7PLsgQrWFqk/
YLj8tWKfHfPxCASEHhqLZf04cTZOvv/a5lV2hN8U64aU3aKujbetgYbDTvrLRfjp
xCqZ9H5G4xBJCnxSHnT6KUJK513/mJ/t91zk8khhGx3a2Xwu3dASB33z4t6p/kzs
Co+1sQLBOOahFiGFPuDBu4jF+/GvZ0hnF68Rrsv/lxka+VVJn+Gn57jPLeKMUdvM
idYE39qr1WfwcfP8EV9DKftA8I69oXs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:24 2025 by rpki-client