Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/08b90feb-294b-3bbe-a6e3-b78b36ff5907.roa
File:                     08b90feb-294b-3bbe-a6e3-b78b36ff5907.roa (raw, json)
Hash identifier:          LWw5wtXtU8ry2iIZwMnludIiwjBtafFvhpoZYMLvy6k=
Subject key identifier:   9B:67:A8:F4:F7:3A:AA:B1:16:69:D3:01:12:12:3B:7A:D8:79:3C:74
Certificate issuer:       /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial:       010D0C9F432858403ECAF3C4ECD5DBE101B1F380
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/08b90feb-294b-3bbe-a6e3-b78b36ff5907.roa
Signing time:             Wed 14 Dec 2022 20:38:16 +0000
ROA not before:           Wed 14 Dec 2022 20:38:16 +0000
ROA not after:            Mon 17 Mar 2025 04:00:00 +0000
asID:                     62715
IP address blocks:        162.222.40.0/21 maxlen: 24
                          103.8.239.0/24 maxlen: 24
                          64.207.222.0/23 maxlen: 24
                          68.65.192.0/21 maxlen: 24
                          67.222.252.0/22 maxlen: 24
                          216.9.196.0/23 maxlen: 24
                          216.9.198.0/24 maxlen: 24
                          2606:4a80::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:ca:f3:c4:ec:d5:db:e1:01:b1:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
        Validity
            Not Before: Dec 14 20:38:16 2022 GMT
            Not After : Mar 17 04:00:00 2025 GMT
        Subject: CN=ceb43314-a209-4e39-bf8f-1d25135bb939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:24:90:56:91:48:d0:e0:7b:48:7b:44:be:
                    37:2c:bc:54:34:9f:0f:75:dd:20:33:8d:fb:60:b6:
                    18:96:d1:ca:ee:30:69:80:2f:f1:ee:81:9b:1c:8a:
                    ea:ee:d9:dd:0d:4c:de:46:75:8c:a9:f0:54:b0:f2:
                    89:26:09:d9:97:bf:86:1a:a0:8b:10:b1:63:b5:75:
                    35:41:08:0d:eb:56:e4:48:f6:1c:3b:a9:30:c0:73:
                    d3:b4:c3:18:50:a1:c0:f7:18:9f:96:08:b4:24:a7:
                    c6:22:ab:9e:da:f1:a6:9e:0b:43:0a:d2:d7:78:a0:
                    5d:21:33:f4:13:a6:bb:40:1f:6f:84:4a:d4:a9:df:
                    7f:6d:6b:a6:a9:de:93:1c:9c:0e:40:d8:99:be:04:
                    54:4d:00:3d:ec:87:eb:8a:fb:64:7a:ac:3e:42:91:
                    bf:b0:b3:9b:79:36:57:34:cd:47:aa:90:00:36:35:
                    42:a4:9f:cc:91:16:3e:ca:f6:88:d9:20:a0:81:7d:
                    2f:da:9a:2d:db:90:49:25:8d:58:6a:de:65:ec:fb:
                    9d:21:22:1b:ee:1a:d8:6e:f0:7e:c0:d3:94:91:f9:
                    46:b6:88:89:1e:29:fc:29:77:c8:67:25:bb:ab:d3:
                    9b:62:2c:fe:14:39:a0:a4:82:a6:88:e1:36:82:ca:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:A8:F4:F7:3A:AA:B1:16:69:D3:01:12:12:3B:7A:D8:79:3C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/08b90feb-294b-3bbe-a6e3-b78b36ff5907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.222.0/23
                  67.222.252.0/22
                  68.65.192.0/21
                  103.8.239.0/24
                  162.222.40.0/21
                  216.9.196.0-216.9.198.255
                IPv6:
                  2606:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:e4:6d:74:c1:6e:07:33:e5:c9:61:55:68:ec:cd:74:a8:
         e2:2a:63:5a:a6:2f:86:ed:d2:9b:d2:7a:50:cf:18:1e:36:f7:
         b9:9f:69:f0:72:37:5e:b5:f8:51:be:dd:49:2f:9c:30:30:77:
         35:d8:aa:55:1f:75:ed:58:2c:e3:b3:f9:6e:6b:b7:4b:0e:c8:
         2c:83:9b:51:37:4f:1f:e6:6e:b9:7c:9e:c1:ea:cf:f7:76:3b:
         37:4f:fd:18:11:46:1d:13:f4:a0:3f:3e:a6:dd:ad:e2:40:1f:
         df:b8:7f:d9:45:ce:14:97:90:5a:55:a6:31:1f:af:d5:48:4c:
         f9:24:47:58:4f:5b:32:4a:80:6c:3f:41:45:04:3b:7b:ab:a0:
         4f:80:df:4c:4f:94:9b:e1:85:85:72:02:e8:b3:ae:a3:b2:f0:
         d6:c5:cb:82:5e:da:b7:c0:3b:11:cb:40:d6:8c:1b:c8:cd:46:
         b9:d9:64:d1:7e:f1:fc:22:30:a9:ec:f6:20:7b:41:f3:f6:d9:
         f4:eb:31:c3:83:8d:dc:91:2b:ef:b8:3f:7f:11:b0:3f:67:0b:
         de:45:15:04:5c:e9:b1:34:62:af:33:d6:83:8e:b0:49:8d:21:
         7b:49:71:7a:9e:ee:21:4e:aa:8e:32:9f:c5:1b:21:a5:6c:40:
         a1:ac:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:21 2023 by rpki-client on console-ams.rpki-client.org