Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5224f8ab-dadf-3bfa-afe7-9dcbe3078e2a.roa
File:                     5224f8ab-dadf-3bfa-afe7-9dcbe3078e2a.roa (raw, json)
Hash identifier:          u8SLTZgiEiRB+Ei0Q0GAPBoP3Z82TovggdT0uJbMYzU=
Subject key identifier:   08:8C:13:6B:32:33:5C:2D:0C:A3:49:B7:FE:74:D7:DA:0F:BE:8A:83
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178E05B
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5224f8ab-dadf-3bfa-afe7-9dcbe3078e2a.roa
Signing time:             Mon 04 May 2020 20:55:27 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        216.218.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 17:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=105ad421-a1b7-482f-a91a-27adecdc1e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:32:8c:8b:0b:c1:1b:12:0a:c7:97:ed:d7:
                    ce:17:04:6b:86:b3:e9:4f:95:a4:b2:8d:9b:bd:fe:
                    54:77:a2:4e:ac:29:07:7c:a0:1f:93:7b:73:d3:ae:
                    72:d5:f8:ec:e4:33:1f:27:1d:f9:cf:28:62:6d:aa:
                    cf:5b:44:69:cc:2e:e0:58:8f:02:12:24:12:8a:98:
                    35:ee:fb:10:01:ac:f8:06:49:37:8e:eb:5e:ae:85:
                    fd:6d:fa:34:b9:b8:65:ee:10:4d:db:7d:75:20:99:
                    7c:c6:d0:9e:91:ee:81:33:ea:41:d5:41:17:b3:1f:
                    c5:dc:c0:f0:1f:4a:44:57:c3:01:96:02:9f:f2:77:
                    20:07:55:47:7a:77:02:71:84:c9:7a:6d:67:12:7c:
                    3d:a9:8f:46:37:9b:80:9f:f0:fd:2b:39:cf:1d:7e:
                    ac:04:a9:42:81:9b:57:a5:ec:db:c3:15:3d:88:7e:
                    b6:66:30:32:a6:79:bb:87:ab:d5:a5:c9:19:f4:27:
                    f0:17:f2:27:e0:a4:71:a7:37:57:d7:93:22:3d:f1:
                    13:8a:b2:f7:5a:34:63:41:42:a3:6d:d3:a0:54:01:
                    a1:40:16:37:e9:50:65:b7:9c:22:48:ac:82:7e:dd:
                    81:c4:87:da:2c:09:c0:06:25:c9:48:6f:b7:1d:b6:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:13:6B:32:33:5C:2D:0C:A3:49:B7:FE:74:D7:DA:0F:BE:8A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5224f8ab-dadf-3bfa-afe7-9dcbe3078e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:39:c8:59:c3:be:b7:0f:ae:ef:ef:07:f8:4c:c9:c1:63:22:
         cd:25:79:14:8c:02:2d:0d:fe:9c:ee:7e:11:3b:6a:1a:44:18:
         ce:cf:0c:08:28:1c:fc:7f:84:5a:ba:f0:ff:46:f2:3a:3e:41:
         fb:2a:3a:5d:1f:28:ae:cf:3a:cb:0b:2a:17:54:cf:38:c0:1d:
         7b:d2:e2:25:36:b1:4b:a4:1e:a3:76:ac:d5:17:60:84:fc:fc:
         0a:39:93:9d:fb:18:7a:71:d1:e5:ff:64:25:76:c3:18:3c:78:
         ce:e5:2f:27:32:15:16:9f:75:77:45:05:0a:95:83:e9:48:fb:
         ae:3a:db:17:90:70:88:d4:30:65:ad:a5:c3:92:fc:c8:c9:88:
         e4:fa:79:3b:5a:28:e3:b4:82:a3:85:2e:a2:17:d0:ea:4f:e5:
         b2:25:b7:bb:ce:34:19:51:67:43:ce:3e:0c:9c:f6:93:0f:f6:
         b1:33:f8:fa:df:74:3c:77:94:90:f6:3d:fa:57:2a:94:9c:cb:
         e9:3a:5e:4f:bd:51:62:62:0f:7f:72:9b:df:d7:c1:52:ff:91:
         93:06:71:1d:54:ac:d1:4f:ee:e3:7d:4f:e1:66:df:d4:05:be:
         64:a3:fb:52:97:fe:7d:ac:b9:13:be:dc:b4:2a:0c:a4:dc:32:
         31:4c:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 20:48:47 2024 by rpki-client on console-fra.rpki-client.org