Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a45c191-a920-318c-88d3-2b6f4e6bec58.roa
File:                     3a45c191-a920-318c-88d3-2b6f4e6bec58.roa (raw, json)
Hash identifier:          CSH2PQE6DiG3CsULiaITPj1nqxAwKOD7cejb/p+2IiU=
Subject key identifier:   C4:39:52:E1:B2:DE:5F:05:E2:49:29:2A:5C:34:75:EC:29:56:2A:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E0380D7C30B6A2264D4555800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a45c191-a920-318c-88d3-2b6f4e6bec58.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.244.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:80:d7:c3:0b:6a:22:64:d4:55:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=b170a9ea-8041-4afe-8e42-1386bc0a97b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:b3:64:8d:43:8a:57:61:23:0b:11:5b:31:
                    7a:fc:c0:d4:ca:b4:62:7a:29:68:11:f5:4f:bf:aa:
                    65:77:d8:95:e4:ae:94:13:31:50:94:c4:64:1b:90:
                    0d:ec:0d:8d:5b:72:51:7d:79:77:9c:a8:78:fe:88:
                    a2:dc:10:8d:ad:74:89:ca:36:66:76:ce:d4:d9:8a:
                    4e:e4:0f:b7:d1:41:5b:de:f0:be:58:3e:8c:64:13:
                    4d:72:2a:f0:89:9e:5f:9c:34:72:1d:71:26:02:99:
                    00:b9:9d:3c:13:55:36:d6:16:5d:33:9e:6c:54:d2:
                    25:26:89:ce:83:00:00:ca:85:c2:39:76:75:89:d9:
                    66:d2:9f:93:f1:87:b3:d6:71:e0:83:08:a2:a7:1f:
                    5c:b3:b9:cc:3c:e7:37:55:bf:de:6b:77:96:a3:bf:
                    c5:cc:8e:93:b3:9b:60:5c:e5:a9:bc:09:8b:93:ba:
                    fe:eb:4b:16:3c:12:51:02:7c:1f:2c:18:80:9b:c3:
                    44:34:00:68:32:af:0d:1c:37:cf:92:09:47:f6:52:
                    78:91:2d:2e:cc:81:87:f7:79:17:9e:a9:e6:7b:a0:
                    83:ff:8b:9e:e8:cc:89:d6:0c:3b:be:4b:c3:06:50:
                    1d:24:2a:b5:8c:78:1d:4a:21:93:d6:bd:a4:4d:6d:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:39:52:E1:B2:DE:5F:05:E2:49:29:2A:5C:34:75:EC:29:56:2A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a45c191-a920-318c-88d3-2b6f4e6bec58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.244.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:99:e9:3e:9c:07:cf:46:c2:a8:9e:fb:77:02:b8:1f:3f:18:
         52:b2:ba:cb:73:83:c1:24:af:29:e4:5d:6a:92:a9:13:bf:90:
         39:96:23:b2:23:61:08:05:44:4a:31:a9:d4:84:bf:7f:17:1b:
         0c:f1:ab:f8:3e:ec:d9:84:aa:36:af:48:b9:4c:77:98:fc:35:
         e1:59:6a:d9:cc:18:69:b3:b8:03:d5:23:6b:fd:a9:74:93:af:
         fe:a8:45:1d:3b:3c:50:cf:fb:bf:0a:ed:22:f3:d8:eb:a4:65:
         58:d3:71:ec:7f:ed:0e:8c:9b:4b:cf:bf:49:22:d6:4b:25:fd:
         63:4f:f9:d8:8d:40:e8:cf:ee:06:70:81:ea:2a:bf:4c:7a:dd:
         2b:20:ee:1d:32:3f:0d:0e:bc:68:c5:5a:cc:cb:56:2c:c4:69:
         14:e6:96:8f:76:45:15:e2:c1:17:cb:9b:d7:bb:14:17:26:4d:
         ba:26:bc:55:f4:bb:eb:cb:f1:3c:9d:ea:72:21:ca:6b:95:74:
         c5:c5:c2:ae:d6:90:e4:f3:78:12:26:ac:e3:bb:b0:cb:0c:b6:
         03:e7:b7:8b:11:34:5c:98:df:4b:92:ac:34:34:80:79:3b:27:
         90:cd:1e:7f:c3:e1:a7:62:c8:c7:32:f3:ec:28:15:0c:a1:88:
         51:72:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:31 2024 by rpki-client on console-ams.rpki-client.org