Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa
File:                     58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa (raw, json)
Hash identifier:          P+avzsIrFM3OUIyAeiuKUq84A6eWcVUkErXr67sq664=
Subject key identifier:   58:98:CF:64:60:C5:32:8F:C6:2E:AB:CC:C0:AD:0C:EF:84:BD:C2:45
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0A45C4
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa
Signing time:             Sat 13 Jun 2020 18:56:25 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Mon 08 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 21:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr  8 04:00:00 2030 GMT
        Subject: CN=e3f848a6-1013-4277-8306-5b91d5a62e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:7e:8f:50:d5:2f:87:4c:96:c5:06:2a:27:
                    5b:aa:7c:79:79:3e:54:8b:52:30:e9:55:ef:1e:82:
                    f1:be:da:11:ba:c7:a6:4d:43:6e:f2:d1:07:44:8e:
                    e1:6c:d2:98:5b:0f:19:2d:b8:1d:86:b0:70:69:a4:
                    32:c7:0a:1c:7f:c8:f3:9c:4c:3d:bb:a8:58:ab:1e:
                    d5:b9:f5:2a:87:e6:81:dd:f4:12:7a:19:d8:67:9b:
                    61:85:32:d0:47:f5:5a:ff:68:df:51:61:8a:8d:b8:
                    b1:e4:b6:56:27:36:93:62:62:36:71:5b:50:06:ca:
                    0a:6d:20:80:d1:fd:f8:f0:7a:91:34:91:16:80:17:
                    89:e4:6c:1b:d4:80:4f:6a:0f:d6:bf:32:5e:87:dd:
                    60:6c:30:6d:8a:5b:5c:c5:05:1e:8c:86:d0:c4:ad:
                    de:69:4e:41:4f:9c:cd:61:74:5d:05:2c:de:76:d0:
                    76:92:7b:2c:74:b3:f8:ea:48:ac:d9:48:87:e5:48:
                    7d:e3:60:75:4b:3b:11:6b:20:ca:92:a3:33:54:b3:
                    87:ef:c0:62:de:d1:e1:d5:24:87:79:5c:ae:ae:99:
                    f2:e8:da:92:50:22:98:c4:c1:88:9b:9f:fc:e6:62:
                    d5:35:31:b3:09:b0:b8:5e:8e:32:71:90:d7:24:ed:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:CF:64:60:C5:32:8F:C6:2E:AB:CC:C0:AD:0C:EF:84:BD:C2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d9:68:99:e2:0f:72:7d:f3:97:8b:f0:dd:68:4b:d9:3e:24:
         5c:05:cb:98:fd:bf:b0:a4:b6:2d:10:1f:79:a9:a2:bf:c6:b1:
         16:d6:bc:52:70:7a:6a:6f:18:aa:0d:7a:6b:fb:51:8b:51:d3:
         bd:6d:3f:62:68:5c:27:e3:7f:fd:62:57:e8:16:2f:a8:bc:6d:
         52:db:6e:c1:7c:67:18:9f:ee:45:a9:84:42:ee:33:a5:56:b0:
         2d:93:15:e0:92:65:61:3c:d4:71:cb:e7:d8:62:3d:9b:3a:db:
         7a:3c:7e:2e:34:eb:ca:10:47:1e:b5:9b:82:f0:47:7d:13:78:
         df:3b:de:4a:59:bd:29:b3:99:e2:13:39:b6:a3:59:af:2d:e0:
         45:00:21:ce:c3:7a:79:c6:c5:d0:06:2f:d2:10:56:40:8e:5a:
         fc:7f:45:5f:a5:33:e6:bd:9b:dc:52:cf:ad:3d:57:55:4d:89:
         ba:ed:dd:6f:e4:5f:c4:73:de:79:b5:db:0b:61:1c:d6:f1:46:
         90:34:25:02:74:4e:41:63:b2:7d:9a:19:41:7e:2c:0e:fd:0d:
         b6:8a:ad:bb:7c:14:aa:ba:d2:cb:d3:5a:b0:c4:7d:86:22:b6:
         9f:5a:d0:ae:83:c4:92:65:51:57:9c:41:ef:44:de:9f:38:79:
         84:e5:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org