Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca594b8-19e5-3456-90b8-505e6c624723.roa
File:                     3ca594b8-19e5-3456-90b8-505e6c624723.roa (raw, json)
Hash identifier:          yDM7skf+MBfynhYB1NZPzgKVQGKH2N8ui/8o6Hl46YM=
Subject key identifier:   77:EB:B9:F4:8E:DE:65:E2:45:47:FF:83:68:75:4F:BB:5A:FA:53:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583E037B1EFB3FAEC6C9593F6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca594b8-19e5-3456-90b8-505e6c624723.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        70.105.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 19:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:7b:1e:fb:3f:ae:c6:c9:59:3f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=caaf2032-6dc4-494b-8588-3231b1604188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:86:1a:ee:b2:41:c9:c3:a1:55:9e:f0:be:
                    b1:12:fd:8a:d1:27:3a:c9:f5:a4:ff:6f:c2:27:4e:
                    c4:d7:1b:60:7d:67:00:95:ed:c0:b5:98:ee:e1:4d:
                    7c:a2:75:fa:d9:2e:08:5d:01:54:e8:26:a1:25:f9:
                    21:56:f9:1b:1a:6c:10:d7:8f:23:be:03:bd:65:cc:
                    99:6b:db:e1:06:e7:b8:8f:17:5c:71:e9:dc:d0:8b:
                    e2:1b:63:f3:e3:44:f7:7a:a9:cc:a5:86:99:ca:0f:
                    ce:c9:d5:07:56:35:3d:62:14:46:4d:15:eb:02:d7:
                    68:57:a4:48:ea:45:49:1b:13:b2:2a:25:6c:f4:62:
                    9e:3b:09:d1:50:dd:9a:4b:cf:50:7b:09:29:28:26:
                    37:14:68:e4:55:dc:45:a9:82:0e:fc:d0:d0:9d:42:
                    03:26:84:1c:28:92:1f:c7:29:9d:fa:4b:ad:0d:54:
                    15:5f:c4:c7:63:9f:df:ee:ac:cd:cc:32:35:3d:df:
                    0a:9e:dc:19:78:29:9e:98:23:0c:d9:ff:98:03:36:
                    c9:0f:4d:10:03:6b:2e:a4:64:6d:80:94:90:01:9c:
                    33:ea:c8:46:39:0f:db:90:63:ac:61:3f:e6:09:54:
                    46:00:74:c5:a6:78:e7:d0:ff:1c:cb:b2:a3:3d:b7:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:B9:F4:8E:DE:65:E2:45:47:FF:83:68:75:4F:BB:5A:FA:53:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca594b8-19e5-3456-90b8-505e6c624723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:65:45:a2:7e:b5:e9:3c:5e:5e:5b:7f:ae:56:90:b7:e2:68:
         ab:ee:90:71:d2:b9:f3:73:3b:78:b6:24:dd:48:25:5a:c7:b3:
         8a:e7:4b:4d:62:4b:b0:86:4f:36:d9:14:30:35:e6:1c:d1:b1:
         d4:3f:1a:b2:2f:15:90:f4:53:ff:89:13:7e:39:75:dd:2c:44:
         42:7d:c5:50:a0:07:b8:94:eb:6d:b7:8a:ca:bd:05:57:9e:b4:
         cd:31:14:5f:c2:0f:38:db:75:60:18:f3:d4:e7:90:b4:9d:bc:
         23:9e:a2:ff:35:e8:d3:08:cf:67:17:a6:fb:84:76:f2:90:4c:
         da:fd:74:2c:85:8e:67:5f:e0:8e:7a:7e:b8:2c:7f:c5:4d:e6:
         d0:ba:a8:87:17:69:18:0b:cf:f0:20:b1:35:7b:06:97:5e:54:
         17:10:5f:7e:1a:2b:ed:1e:25:fa:f8:38:fa:aa:23:d2:c2:f8:
         31:ae:3a:db:8b:6c:da:03:57:9c:13:d4:4c:d9:3f:a4:26:54:
         fd:52:0a:cf:7e:66:3d:00:74:1d:e6:c7:92:d1:54:90:36:bd:
         2a:fe:67:82:68:c4:c4:bb:6d:cf:d2:8c:bf:15:eb:17:10:05:
         6e:d6:ec:47:95:b7:69:5f:f9:9f:db:a4:cc:d6:a5:88:e8:ff:
         8d:3a:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:41 2024 by rpki-client on console-fra.rpki-client.org