Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/ad85b523-f117-3d92-b8fc-bf4aff3b2325.roa
File:                     ad85b523-f117-3d92-b8fc-bf4aff3b2325.roa (raw, json)
Hash identifier:          Y5//d+QxFqtYKUOPuBljVifdPp68MM5UcgTBH9tjMoE=
Subject key identifier:   47:5C:9D:09:9E:78:6F:8B:7C:6B:41:2A:67:1A:34:DA:DD:B9:9B:42
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F43285846C7AAE79FB1164D1ED05FBB90
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/ad85b523-f117-3d92-b8fc-bf4aff3b2325.roa
Signing time:             Mon 05 Aug 2024 23:03:14 +0000
ROA not before:           Mon 05 Aug 2024 23:03:14 +0000
ROA not after:            Mon 04 Nov 2024 00:03:14 +0000
asID:                     63023
IP address blocks:        67.220.72.0/24 maxlen: 24
                          67.220.73.0/24 maxlen: 24
                          67.220.74.0/24 maxlen: 24
                          67.220.80.0/24 maxlen: 24
                          67.220.82.0/24 maxlen: 24
                          67.220.85.0/24 maxlen: 24
                          67.220.86.0/24 maxlen: 24
                          67.220.95.0/24 maxlen: 24
                          68.168.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 20:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:aa:e7:9f:b1:16:4d:1e:d0:5f:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Aug  5 23:03:14 2024 GMT
            Not After : Nov  4 00:03:14 2024 GMT
        Subject: CN=634e69aa-08ac-425e-8753-3da577dbbb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:ea:5b:fc:f9:87:1e:4c:75:dd:44:ae:9c:
                    4a:94:17:e4:0a:d9:af:16:7d:ba:b8:f2:8c:6d:f3:
                    e3:70:9f:7d:8c:51:2c:04:fe:da:85:b3:3c:e9:70:
                    d3:25:d7:45:75:7d:bd:c9:55:c9:97:fa:1c:1f:69:
                    85:78:d8:b8:2c:b2:bb:7e:b4:bf:47:2c:65:12:94:
                    0e:85:82:d3:dd:9e:04:7b:60:a6:ad:81:19:c1:01:
                    bd:69:bc:3c:be:5b:8a:66:d0:8e:a7:2e:f4:0f:85:
                    b6:ac:80:ea:32:74:a5:df:74:89:f8:de:6e:e0:7e:
                    09:c1:73:48:a9:a7:83:10:48:cb:4b:98:48:0e:91:
                    e8:86:9e:1c:a5:88:f3:7c:14:d0:ad:67:f9:a8:da:
                    f8:32:2d:73:ec:e4:3b:17:e8:b5:ca:53:8f:62:5f:
                    bb:67:31:9e:01:14:b3:34:c6:02:ba:d6:08:76:fc:
                    87:89:00:0e:80:4b:94:16:0f:f5:28:91:de:09:3e:
                    c0:10:28:f5:96:3c:de:b8:49:72:df:68:f1:36:d5:
                    93:09:84:06:33:9c:29:35:35:59:aa:d6:cd:3d:bf:
                    b2:b9:0d:07:e8:78:08:6e:b5:14:77:40:f7:4d:85:
                    5e:be:b5:3b:68:a2:9e:8f:57:9a:d3:8a:94:29:0a:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:9D:09:9E:78:6F:8B:7C:6B:41:2A:67:1A:34:DA:DD:B9:9B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/ad85b523-f117-3d92-b8fc-bf4aff3b2325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.72.0-67.220.74.255
                  67.220.80.0/24
                  67.220.82.0/24
                  67.220.85.0-67.220.86.255
                  67.220.95.0/24
                  68.168.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:9f:6b:db:be:bb:2d:08:b7:b4:00:78:fa:77:a2:51:df:
         fe:ef:a5:e0:62:d8:7e:5c:05:5d:53:ab:71:1c:0e:2d:eb:eb:
         c4:91:f1:ad:29:a9:9e:a2:e9:bc:9d:e3:48:9c:05:fe:2e:cd:
         1a:12:a4:ac:0c:c4:c6:46:eb:df:1e:2c:5f:0b:41:36:69:7d:
         c6:8e:df:e8:4d:94:9f:7a:33:95:1d:b2:6c:b7:95:f1:75:42:
         eb:7b:5c:c1:23:bc:11:31:b4:77:b0:c0:e2:de:c7:e0:66:fd:
         4c:94:03:db:fb:75:55:90:82:48:cf:c3:30:1b:c4:6d:43:ad:
         dd:7a:7b:84:16:4e:83:45:f0:c5:e2:0e:02:b3:f4:8a:1d:f7:
         0b:39:7f:47:58:d3:08:2e:8e:cb:fb:47:4c:2f:73:19:a5:be:
         97:90:78:e2:fa:cd:b4:06:e7:f6:7e:7d:e9:fd:bd:4b:58:ea:
         34:ac:6c:31:0a:78:e4:ff:31:b2:30:8c:eb:55:41:36:3f:87:
         65:c5:df:3f:d1:01:e9:d7:b7:73:a3:c8:4f:52:14:a1:3d:94:
         02:34:e8:a5:a8:1c:31:52:1a:35:39:88:2c:a8:09:3e:48:02:
         b6:92:ea:69:dc:1b:df:f4:75:a1:a8:52:4a:77:fe:50:32:69:
         07:a8:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 23:40:34 2024 by rpki-client on console-ams.rpki-client.org