Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb449ca6-30b5-30f3-9eac-43212505d273.roa
File:                     cb449ca6-30b5-30f3-9eac-43212505d273.roa (raw, json)
Hash identifier:          IflVvZgaDOUzt+bfReQ4pZrPUHJGw12LrMUYmSh//PQ=
Subject key identifier:   B9:28:37:8E:5F:83:88:52:A5:9C:FB:71:FD:AF:52:B9:30:0B:CB:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DDC45DFC13B9D9D62BBE3BC68
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb449ca6-30b5-30f3-9eac-43212505d273.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Fri 09 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        68.160.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:45:df:c1:3b:9d:9d:62:bb:e3:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : May  9 04:00:00 2025 GMT
        Subject: CN=99b6afdb-3c3a-46a4-986e-133c08af22c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:67:a7:2d:49:46:a3:bd:50:32:86:38:7d:
                    8f:d2:a8:99:a7:bd:15:88:a2:04:fc:a3:32:0f:96:
                    ed:a8:f6:63:79:40:44:3f:85:84:60:2b:b2:87:39:
                    71:0b:03:0d:40:8c:de:8c:63:25:b8:46:e3:ce:b9:
                    5d:a9:be:0d:9d:86:2c:79:73:ef:91:5a:64:e7:53:
                    47:c3:28:fa:2c:9d:ef:9c:dc:07:eb:80:5a:7e:a2:
                    00:df:14:1b:aa:67:bd:05:ab:06:4e:33:94:b4:2d:
                    b1:5a:c6:6d:f3:18:98:00:f2:a5:10:bb:83:68:c7:
                    6a:11:41:09:76:6c:9a:ff:fa:9a:7c:d0:5f:3f:6f:
                    c8:63:ff:ab:dd:5c:a8:f3:da:3b:99:34:ad:62:1a:
                    b2:fa:29:97:7f:90:2e:52:51:a9:5b:e6:ec:0c:b9:
                    93:6d:cd:71:73:56:bc:8d:52:d7:34:9c:05:7e:6e:
                    e7:f2:ea:62:e4:5d:85:89:be:1a:e3:b1:c0:fe:12:
                    c8:26:3d:07:27:bc:98:86:4f:8e:43:f5:36:a1:69:
                    c9:24:39:99:8f:55:92:f3:67:d5:b8:bf:fb:c7:df:
                    21:65:4e:24:a5:10:5a:f5:62:1d:5b:09:ee:78:9d:
                    fa:de:d9:fc:9e:41:7f:6c:34:33:b4:8e:75:3f:0d:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:37:8E:5F:83:88:52:A5:9C:FB:71:FD:AF:52:B9:30:0B:CB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb449ca6-30b5-30f3-9eac-43212505d273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:28:7d:40:87:ee:cb:12:4d:cb:c1:48:46:6b:82:57:75:
         2b:ae:61:86:5e:fc:1b:c6:84:c1:1c:32:c0:2d:81:3e:3e:1a:
         7a:69:01:d8:d2:f4:2f:2b:09:dc:6e:45:e5:1f:ba:87:1d:8f:
         3a:5f:2d:3e:6d:75:80:9d:b1:0a:dd:42:8d:90:c4:c6:44:32:
         d8:97:3a:69:78:43:9a:98:3e:f9:6a:9e:6f:bc:7e:02:0d:35:
         8d:45:e9:8d:03:ae:02:76:2b:4b:45:bb:7d:18:35:ce:16:9f:
         d3:58:e0:a7:e9:ef:e5:15:a3:d1:fb:e4:05:a6:ab:d9:77:ab:
         80:79:cd:37:31:2a:9d:b0:ed:2f:24:90:ea:a8:7d:cc:f4:6f:
         52:ce:f6:b3:a9:68:fc:0a:fe:36:b0:bf:5a:d9:f4:c5:65:2e:
         06:de:10:07:a7:92:f3:a2:78:60:d9:ac:5a:60:08:bc:17:55:
         94:50:a6:3e:97:07:03:24:20:d9:0a:c6:bf:18:ee:51:64:1b:
         88:d3:e5:17:c9:cf:66:03:87:df:eb:19:33:3f:45:cb:d8:cd:
         9b:5b:6f:cd:dc:3c:91:33:9b:86:3e:b4:b4:64:8a:fb:0b:36:
         14:2d:49:a5:1a:d3:db:9c:ac:56:7a:96:a9:3d:99:32:b9:01:
         b3:65:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:44 2024 by rpki-client on console-fra.rpki-client.org