Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edfbca00-39d4-37fb-a0a3-1fc44949fae6.roa
File:                     edfbca00-39d4-37fb-a0a3-1fc44949fae6.roa (raw, json)
Hash identifier:          2JQ+vIJxea0nDWuy1pgiWygw+5ladpmIVvTPzLso45s=
Subject key identifier:   CA:E9:C4:B1:ED:91:4D:AD:A5:7D:CC:62:5D:6F:E7:58:AF:5F:E5:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178DEF0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edfbca00-39d4-37fb-a0a3-1fc44949fae6.roa
Signing time:             Mon 04 May 2020 20:55:27 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        216.66.0.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 22:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:de:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=15599280-1998-4952-a100-d8b6940cd425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:3b:55:85:30:a8:e1:5f:7c:48:2e:ad:f3:
                    09:d0:18:7f:6d:f8:ee:bb:f3:94:1c:f0:9d:bc:15:
                    24:0f:22:a4:bf:fe:a6:ea:4e:46:6f:42:2f:cc:a7:
                    cd:51:54:94:37:d0:c5:66:29:bb:ba:c5:03:58:02:
                    b9:c3:d8:b6:2f:b2:e7:91:05:ed:b9:1e:82:8e:3c:
                    22:9f:53:60:59:6b:40:fa:de:2c:a0:b4:34:fe:9d:
                    23:97:92:64:32:63:42:22:73:1f:1b:09:ed:90:9f:
                    b2:23:d0:d9:90:bc:4b:df:f9:e7:9c:7e:38:54:8b:
                    06:91:ed:5d:04:5a:80:ef:d1:6c:3e:f4:ba:2a:a1:
                    98:93:72:c2:e7:94:c8:f2:ec:49:4b:99:0d:03:5a:
                    2e:c7:37:5d:d5:e2:36:dc:f6:ba:f2:47:04:8f:a4:
                    9e:68:79:7b:16:32:35:8c:6a:fe:b0:35:42:ed:5c:
                    e9:4f:7a:fd:f5:a5:e7:04:c0:5a:ce:9e:fa:a0:05:
                    79:5d:4d:67:d5:31:f2:98:34:dc:24:5a:80:bc:5e:
                    69:ee:4d:ee:14:6c:18:50:d3:99:ff:78:30:47:1d:
                    3b:f5:e1:c1:78:b4:de:de:2a:05:c8:11:a0:59:83:
                    52:f2:8f:2d:42:db:d5:4e:de:d0:92:39:ff:fa:64:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:C4:B1:ED:91:4D:AD:A5:7D:CC:62:5D:6F:E7:58:AF:5F:E5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edfbca00-39d4-37fb-a0a3-1fc44949fae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:75:ed:b7:ef:df:41:8f:06:c2:2d:de:89:f6:ba:1d:1a:e1:
         34:0d:a9:a7:07:ff:7d:c2:10:b6:f9:56:a8:8e:fc:9e:1f:c5:
         ff:1d:86:eb:f5:bc:63:4c:01:c3:14:5d:77:49:a2:21:53:4e:
         a8:51:32:ba:fc:bc:8d:7b:e0:bf:23:ae:ea:fb:79:a2:94:08:
         1d:69:7e:26:3c:ea:20:75:c4:b2:e4:e2:ca:0b:79:28:45:53:
         f7:4d:4b:02:3e:2d:9b:1d:9c:09:32:f4:e9:bf:c2:88:72:29:
         84:07:55:83:0c:f0:84:bd:1e:ab:e0:8f:a7:52:ad:27:62:b8:
         a5:d4:aa:20:43:8e:70:8e:03:e9:0f:a3:a3:36:f8:f1:53:2b:
         db:07:49:1d:7e:29:ac:99:b9:79:36:8f:13:bf:04:fe:34:d3:
         9e:fb:6a:dc:4f:48:3e:0f:14:d5:7e:74:fb:d5:2f:41:3d:64:
         26:8e:34:dc:a7:e1:17:c8:7e:b6:28:17:fc:7f:c8:2c:66:9f:
         d4:66:e7:73:64:d4:1e:2c:fc:2f:38:fe:c0:fd:9f:da:ef:81:
         c0:0b:62:c6:e6:23:34:15:39:e2:a4:0c:09:25:5b:9d:f4:30:
         c8:0c:8f:ab:65:72:f7:40:92:f3:1e:75:47:67:81:67:79:9b:
         b2:7e:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 01:52:03 2024 by rpki-client on console-fra.rpki-client.org