Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40329819-25ac-31ed-83d2-775d022710af.roa
File:                     40329819-25ac-31ed-83d2-775d022710af.roa (raw, json)
Hash identifier:          7c4Hf1tQGd7Gnwsr+1FXquDn6/u2J4twwURh3AN1MSQ=
Subject key identifier:   8A:53:DE:29:B6:B2:91:BA:C2:DD:E2:4A:15:B1:55:DE:26:0D:30:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB37538B45B71635DA620C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40329819-25ac-31ed-83d2-775d022710af.roa
Signing time:             Fri 03 May 2024 01:11:15 +0000
ROA not before:           Fri 03 May 2024 01:11:15 +0000
ROA not after:            Thu 01 Aug 2024 01:11:15 +0000
asID:                     6167
IP address blocks:        72.122.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:75:38:b4:5b:71:63:5d:a6:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:15 2024 GMT
            Not After : Aug  1 01:11:15 2024 GMT
        Subject: CN=066d13f7-4550-435d-8828-068d7aac8286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:9d:d5:42:d6:25:ec:e4:56:5e:44:ef:7c:
                    1b:b5:59:26:9f:c5:6b:74:79:53:c1:0b:62:a2:87:
                    6c:50:b9:32:ee:5d:ee:17:9b:66:02:98:7c:72:bf:
                    fb:6e:e8:48:87:f0:cc:85:f0:78:25:ed:3a:67:e7:
                    bb:34:ef:b8:8b:00:ee:0e:27:46:43:ed:5c:34:51:
                    b5:fb:7b:4d:cc:38:c0:6d:25:44:fb:db:fc:44:00:
                    d4:85:f2:26:a4:ca:f8:85:fb:ed:a5:5d:7b:83:8b:
                    54:da:e7:bc:31:d1:90:64:72:5f:56:5d:14:65:6d:
                    d2:b8:65:36:81:8b:3d:21:63:81:53:4c:7b:49:5e:
                    a5:bd:d8:29:44:48:9f:1a:e3:4f:31:62:b2:a5:0d:
                    ed:0e:8e:42:de:28:76:5f:af:21:bd:8f:80:1d:7b:
                    02:e5:16:9d:4e:dc:7c:d4:d1:44:94:19:1d:c3:78:
                    6f:b8:21:bd:5f:b9:42:1a:cd:73:b1:66:d2:7e:5b:
                    4f:e1:c9:9e:e4:e5:d8:7d:5d:11:1e:0d:aa:41:85:
                    f3:dd:db:13:51:6a:c8:ea:0c:42:c6:7f:61:c4:1b:
                    b1:12:ba:38:8a:50:45:49:e1:05:81:a1:71:08:4e:
                    ff:b6:9a:86:f9:4f:19:aa:d1:d5:69:ba:57:92:fd:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:DE:29:B6:B2:91:BA:C2:DD:E2:4A:15:B1:55:DE:26:0D:30:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40329819-25ac-31ed-83d2-775d022710af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.122.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:64:a0:23:db:c3:a1:13:cc:b7:35:bb:1f:b3:f2:59:72:
         e8:3b:9d:44:0f:69:ea:fe:e8:77:33:8f:b6:5e:0c:2a:4f:ed:
         b6:e7:8f:e7:43:00:03:8a:ab:e9:41:73:92:b9:b7:8a:82:bb:
         c3:ef:26:12:f2:14:2d:53:1e:ab:eb:83:2f:2d:f3:cc:69:04:
         13:07:b2:7a:97:ba:3b:00:5e:2d:ca:f3:77:b7:20:cf:a5:cb:
         62:28:4d:d5:f8:82:9b:96:1a:f2:10:6b:9c:36:5a:93:93:9d:
         91:b3:aa:15:62:2c:5c:70:39:69:7f:97:52:d6:9f:c1:0d:43:
         43:a6:34:e2:71:cd:c9:c5:a0:46:29:b8:f5:50:89:4b:28:f1:
         45:1b:40:d1:9d:97:4d:e5:85:41:c4:90:bc:99:76:e7:9b:f1:
         1a:58:ad:8e:62:93:45:ad:e8:a0:9e:81:c9:07:b8:b7:71:3d:
         e7:73:69:ce:eb:91:b7:40:e1:00:89:2c:95:5d:59:8c:34:49:
         aa:0e:4d:f0:38:bd:65:ff:9d:5f:73:cd:e2:2e:2a:24:1e:cf:
         1b:8c:3c:23:29:08:da:73:b3:74:12:3f:ee:1b:85:4c:b8:fc:
         7b:94:04:37:a8:07:96:d2:f0:ba:80:28:b1:10:19:a8:d2:d3:
         a3:84:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:31 2024 by rpki-client on console-ams.rpki-client.org