Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/690cf204-14cc-3314-9434-6efd2262e793.roa
File:                     690cf204-14cc-3314-9434-6efd2262e793.roa (raw, json)
Hash identifier:          92jt0WXfBI61YZeTZNwNQIigV+B1jzyBSiHLnwGvWoU=
Subject key identifier:   B0:76:A0:5E:1F:A5:95:2D:4D:E7:7B:50:76:4C:88:E7:D5:79:F1:FF
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F43285845D3E2BBA33A825885F4695B00
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/690cf204-14cc-3314-9434-6efd2262e793.roa
Signing time:             Fri 10 May 2024 15:18:29 +0000
ROA not before:           Fri 10 May 2024 15:18:29 +0000
ROA not after:            Thu 08 Aug 2024 15:18:29 +0000
asID:                     139210
IP address blocks:        158.116.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:e2:bb:a3:3a:82:58:85:f4:69:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: May 10 15:18:29 2024 GMT
            Not After : Aug  8 15:18:29 2024 GMT
        Subject: CN=4cff2c78-d1b4-4a04-9bf8-d02dc00128a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:b4:91:a1:f1:2c:72:a2:f9:ea:be:c6:55:
                    5a:f0:f6:3e:3c:10:8b:5d:39:02:fe:4e:2e:dd:ea:
                    b2:25:3e:d6:87:0b:54:00:a9:ec:c3:57:e9:b8:b9:
                    0c:03:15:62:20:25:22:11:79:73:68:17:3e:79:74:
                    26:3d:22:08:3c:5b:b5:e3:01:2f:a5:d9:4d:c7:39:
                    39:33:4c:ab:d5:2c:1d:f7:d6:98:a2:d3:5d:3e:e9:
                    3a:8a:58:95:46:cf:4f:bb:54:e6:8e:b8:dd:32:0d:
                    b6:12:68:19:a3:d3:f7:1a:7e:a1:ae:41:a9:e2:c7:
                    07:08:2d:3d:5e:db:b4:fd:34:d9:2f:60:fe:b3:2d:
                    54:48:a8:1a:fa:2d:5f:1a:97:c6:86:eb:dc:6a:af:
                    77:9f:49:4f:1a:f0:e0:d5:41:68:00:3c:d0:51:d9:
                    89:7d:1c:4f:00:3e:17:9e:f1:66:c8:b2:d9:0f:6e:
                    f6:7d:23:aa:9e:23:74:ec:41:ce:b0:be:dd:29:25:
                    7a:a0:5f:ba:97:70:ff:cd:fa:94:9e:e6:63:41:36:
                    18:16:a7:f1:b6:17:29:aa:ad:cb:e0:e4:3f:e5:6f:
                    53:27:f5:a8:0e:c8:45:be:96:76:da:a5:4b:bd:39:
                    e1:8a:31:14:ef:39:59:4e:65:f9:cf:b5:4c:f7:59:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:A0:5E:1F:A5:95:2D:4D:E7:7B:50:76:4C:88:E7:D5:79:F1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/690cf204-14cc-3314-9434-6efd2262e793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d9:1e:63:d6:00:46:eb:c8:c6:c5:1f:47:a4:8b:b0:fd:59:
         b4:ed:0b:07:47:5a:77:1c:ba:f5:f9:e1:1c:3c:00:4e:7e:c5:
         74:59:4d:14:33:3b:35:2c:22:04:82:48:7e:05:3e:d1:58:e5:
         dd:f4:f9:83:6e:70:9e:f2:53:5c:69:6d:9e:3c:50:3b:e6:2e:
         6a:52:1e:83:4b:f8:05:17:9f:73:f4:d6:d2:8a:73:89:40:2b:
         d3:94:94:9c:16:2f:98:48:52:d3:c8:35:34:bf:44:be:e0:df:
         76:03:6b:90:99:75:23:d4:8b:34:f0:b2:1c:ff:7f:1a:28:a3:
         7a:f5:00:bf:fc:1f:51:2c:dd:0e:0c:8f:16:5d:59:15:81:fc:
         33:0e:78:4a:6e:ea:03:91:be:2f:7b:14:d7:92:63:5e:b4:43:
         f1:c2:ea:9e:b4:38:bf:0c:1b:3e:40:4a:66:be:42:80:ae:f7:
         61:c0:4b:10:7d:3a:1b:67:e7:ef:64:84:22:be:b2:4a:8a:67:
         f3:31:74:b2:98:6c:50:b4:6c:63:2f:7f:02:c4:d6:07:cf:63:
         95:38:e3:02:f4:1f:39:e8:4b:85:d4:06:41:ea:56:c4:88:39:
         be:16:74:60:63:8b:61:55:26:f1:6e:3c:de:fb:6c:b0:a4:ff:
         06:c5:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org