Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c85ff383-55d5-371f-b0a2-94d07f3f873a.roa
File:                     c85ff383-55d5-371f-b0a2-94d07f3f873a.roa (raw, json)
Hash identifier:          /DdL+qaOf76XF7aFtDX0mGKgpKnFGhc/8o6B+l64AvE=
Subject key identifier:   4D:94:5B:06:7F:40:96:E7:AA:33:7D:51:69:AF:F0:F4:46:1D:9F:12
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0EDB41
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c85ff383-55d5-371f-b0a2-94d07f3f873a.roa
Signing time:             Sat 13 Jun 2020 19:01:25 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sun 03 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        52.140.248.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 21:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:db:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  3 05:00:00 2030 GMT
        Subject: CN=5418732d-e810-4bb7-badd-2b88ec47b740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:81:83:bc:e4:88:3c:05:cc:11:fb:e3:65:
                    c7:aa:2a:5c:0a:89:10:77:a4:7c:27:fc:08:28:d6:
                    f8:0b:e8:1d:c2:a7:4b:34:aa:18:c0:dc:79:ff:f0:
                    64:66:ea:78:6f:7a:3f:81:ae:e6:23:86:70:d1:9f:
                    32:da:2d:25:73:2f:8c:81:7b:0f:8f:38:f2:d1:97:
                    2e:96:cd:23:7a:d2:a5:06:f4:87:6f:41:09:ba:d7:
                    d9:c6:0d:34:2e:ae:f7:cc:02:27:b3:93:e0:ca:90:
                    7b:4a:86:e7:60:f4:39:72:c4:52:40:40:2b:56:90:
                    56:9f:53:e6:7c:86:07:7c:aa:00:d3:cc:12:9a:e1:
                    b0:dc:63:70:3e:1f:bb:8c:7a:37:9c:2d:20:70:85:
                    e8:94:59:43:a7:1c:f0:6d:1b:3f:00:03:7b:bb:57:
                    18:24:22:85:82:12:26:c3:4f:56:03:66:33:41:d2:
                    79:47:7a:cb:2f:44:61:ec:fc:ef:21:ba:42:90:2d:
                    37:82:7a:dd:7b:fb:c2:c8:23:33:32:37:ce:a2:34:
                    f2:08:1f:1c:bd:99:2b:31:85:e4:63:dc:d8:98:2f:
                    70:39:33:bb:79:bc:d3:77:f1:6a:87:7c:05:84:87:
                    f0:46:98:00:44:78:10:28:0d:95:c4:08:f8:78:86:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:5B:06:7F:40:96:E7:AA:33:7D:51:69:AF:F0:F4:46:1D:9F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c85ff383-55d5-371f-b0a2-94d07f3f873a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.140.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:4f:3b:ed:aa:c8:71:24:2f:79:6f:f3:a3:f9:59:88:f0:
         35:9f:69:41:86:e0:79:9f:43:1e:31:e8:54:6a:4e:0b:63:05:
         58:cb:4f:da:f7:89:8a:f6:49:52:ff:f4:5f:71:3f:bd:1a:9d:
         bc:0d:34:c6:80:08:b3:1d:f7:0c:76:4b:98:63:84:a6:c0:d1:
         df:45:04:9e:8e:a3:d0:d3:fc:8e:8f:0a:53:08:86:cd:7f:c3:
         36:cc:e9:e8:9b:bb:94:37:2e:a0:51:12:04:44:7b:19:99:22:
         06:5f:67:b8:2c:a6:b4:40:2b:9f:76:f2:42:04:64:c5:ca:27:
         31:10:ca:c4:8f:20:27:d3:2e:72:c6:c3:03:33:88:df:2a:38:
         19:8f:83:06:89:e7:4b:99:b1:f7:89:0d:55:fc:cd:53:ba:90:
         f9:02:32:3b:44:10:d2:3a:ba:47:79:c9:df:78:d1:75:81:3d:
         cc:87:eb:98:1a:68:c7:32:55:c6:a6:03:4f:88:c9:80:87:0d:
         7d:b8:24:91:1f:08:df:79:8f:86:f8:17:a4:fa:24:a6:24:12:
         a8:eb:d1:33:88:c7:c2:32:32:24:9c:e7:23:21:3b:2b:e6:2c:
         75:c1:21:88:8b:cd:1a:8c:25:ae:22:f8:67:e3:49:98:3f:53:
         28:b0:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org