Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b31ca30-7f86-378d-9240-ff2e8a3b2c05.roa
File:                     7b31ca30-7f86-378d-9240-ff2e8a3b2c05.roa (raw, json)
Hash identifier:          7tH6TsMHMNEBeR6KOVyfBST1yRMvLMRMkU4rI/Q+GIY=
Subject key identifier:   6C:B4:CC:DA:DF:1F:2E:28:04:8F:1F:38:00:87:01:F2:BD:2D:64:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07303417090E84AFBA30C8D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b31ca30-7f86-378d-9240-ff2e8a3b2c05.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        68.238.112.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:30:34:17:09:0e:84:af:ba:30:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=ea4c82a5-3aa2-4191-868d-ab7aedd7f8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:90:fd:44:7c:c9:5c:5e:05:1a:43:a9:f4:
                    aa:5e:e9:92:18:b4:71:1f:70:38:c6:53:f2:b1:61:
                    fc:f1:04:8c:71:cc:c2:5e:21:75:80:97:f4:fa:a1:
                    6f:63:2c:72:52:2e:6e:09:1a:ed:b5:f0:eb:d5:06:
                    3d:92:13:76:df:41:d1:34:5b:3b:a3:af:79:7e:2b:
                    1f:b8:e6:6a:fb:2f:58:18:23:95:24:ad:c6:70:c4:
                    f8:a0:41:de:1a:46:96:78:14:1a:74:1e:fb:2c:5e:
                    19:93:95:90:a5:34:7c:d9:c8:24:ea:d4:f0:dc:65:
                    61:1d:db:2f:33:de:84:e4:d9:c3:60:89:5f:4d:dd:
                    11:5a:ce:39:ef:21:a3:21:cd:b4:fb:30:5a:dc:bb:
                    bd:7c:d7:87:04:84:55:b1:e6:70:77:13:2f:fe:87:
                    1c:89:25:ba:e5:35:ef:80:a0:c1:0f:e4:21:6e:2c:
                    9c:6b:6e:c6:f3:f6:d0:35:81:2d:56:24:1a:86:48:
                    1c:09:ef:f5:ab:51:28:2f:a8:98:8b:ed:4c:93:e9:
                    8d:b6:4f:c7:9a:e5:20:c1:25:8c:db:f5:86:ce:59:
                    e0:c4:33:d2:c3:f5:0f:0b:68:4e:c0:d8:cf:4d:3e:
                    f1:c7:0e:e8:f2:70:9c:4b:8e:f2:2a:c0:a2:7b:47:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:CC:DA:DF:1F:2E:28:04:8F:1F:38:00:87:01:F2:BD:2D:64:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b31ca30-7f86-378d-9240-ff2e8a3b2c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:67:a3:28:73:ab:a3:7d:1b:0d:76:ca:70:bb:90:48:56:2a:
         0c:ed:40:12:c2:e2:de:b0:53:16:0f:5b:de:e3:9e:cb:f8:8d:
         60:6f:1a:23:e4:00:df:0f:53:57:5c:3a:1a:34:12:20:fe:62:
         bf:25:35:6e:b9:d4:0e:de:a7:eb:7f:e7:02:33:0d:c7:a2:72:
         72:6c:62:c4:44:37:eb:a0:4b:86:45:d8:07:98:2e:b3:bf:e1:
         9d:1c:4d:9a:0b:ec:ac:be:72:5f:65:05:ea:bd:46:9d:d3:4c:
         10:67:72:dc:11:30:ee:3c:0c:dc:a8:30:6a:62:b4:36:98:92:
         f8:da:43:6d:55:c1:fc:fb:79:5b:84:3c:2e:86:d7:32:5b:71:
         a7:74:04:d4:d7:f1:92:cd:8b:4f:87:6f:77:5d:e5:6c:a7:27:
         0b:fd:27:15:ba:6e:c7:aa:90:48:32:fb:eb:5a:9f:4b:e6:92:
         cb:b1:1b:28:1f:14:96:34:ae:7f:7d:de:7a:3a:bc:ac:9c:a2:
         52:64:25:e6:ef:d7:87:26:bb:97:7f:8d:33:e4:cf:08:02:57:
         fd:12:e0:1d:00:f2:e7:eb:78:ac:28:f4:18:b6:82:b6:88:a1:
         85:c6:f0:7b:ae:9f:9a:83:8c:99:56:e9:b8:94:cd:8c:20:07:
         d1:50:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:42 2024 by rpki-client on console-fra.rpki-client.org