Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd6de7e6-454b-3376-8329-539fcbe8d120.roa
File:                     dd6de7e6-454b-3376-8329-539fcbe8d120.roa (raw, json)
Hash identifier:          65zHnQSc8vIgTil8DFaV8T7EuEw9iR3fVbc7f3MilUg=
Subject key identifier:   01:F0:5C:8F:6E:3F:A5:39:23:13:F5:AB:9F:B2:7D:98:AF:BD:15:B4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A0D09
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd6de7e6-454b-3376-8329-539fcbe8d120.roa
Signing time:             Fri 30 Nov 2018 01:09:42 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 00:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=fc57fc59-76ac-41f9-9a4d-e6fd4d3e9428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:a9:60:0a:7c:33:0e:ca:48:3a:a4:ab:bf:
                    c6:22:cf:81:b6:11:9a:13:b2:b1:f2:f1:2a:42:48:
                    6b:1e:72:9a:3b:64:1f:01:b7:0a:80:3e:e4:ea:80:
                    1e:7f:61:b9:6a:e6:e4:52:ed:03:b4:47:a0:27:14:
                    ed:b0:db:36:25:d2:24:63:1d:b8:55:9f:5d:54:fa:
                    b6:68:69:18:0e:d7:a8:34:a1:4b:49:98:10:ea:af:
                    cc:04:39:35:1a:4d:45:8c:df:8f:5d:39:c7:62:1f:
                    90:4c:ba:51:b5:1d:cf:cd:ac:91:a4:11:b7:20:95:
                    42:49:3f:1c:97:ed:23:19:ab:71:a0:0e:a4:bf:55:
                    89:ff:76:b0:44:b4:a5:d0:19:fb:d1:42:75:8f:42:
                    1f:68:0c:bb:00:ad:99:71:69:93:ed:d8:92:fa:be:
                    45:91:8b:10:cb:e1:36:5f:9a:6e:72:93:89:f1:e1:
                    61:1d:16:43:96:f7:5d:4e:3a:b0:76:f0:47:bf:b0:
                    22:0f:bd:be:74:11:fc:f6:35:0f:82:67:e0:54:88:
                    26:0d:1d:7c:43:eb:4a:88:2e:31:f2:dc:d8:ac:25:
                    e6:98:53:82:33:e7:67:45:16:40:74:0e:d1:c5:de:
                    1c:e7:ef:22:b7:55:66:e4:59:97:3d:4a:03:77:11:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F0:5C:8F:6E:3F:A5:39:23:13:F5:AB:9F:B2:7D:98:AF:BD:15:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd6de7e6-454b-3376-8329-539fcbe8d120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:76:50:af:0a:da:34:34:67:98:e1:66:91:26:a5:db:83:fa:
         1c:23:34:55:8e:e8:dc:c4:4a:27:24:96:47:05:52:00:14:df:
         7b:66:d5:fa:7c:c9:d6:6e:85:8f:d8:e3:b9:c3:2b:7e:74:7c:
         f7:f5:d7:6c:0f:26:f8:bc:46:96:91:83:4e:76:8d:df:a8:e1:
         29:2a:8e:09:5c:72:61:e5:24:36:37:da:ee:9a:07:0f:33:aa:
         8c:73:f5:45:10:30:38:12:7a:71:09:fa:f9:06:48:ce:8b:ec:
         22:ba:fd:43:34:99:9b:ec:c8:c2:7d:9f:41:98:cb:ff:30:c8:
         d2:c9:84:5e:63:58:d9:8f:6a:ba:b2:76:01:0f:21:7a:d2:ee:
         64:b8:13:42:b5:84:cc:99:33:c3:ae:17:41:ae:a1:f1:42:06:
         57:7c:97:43:c2:f8:3e:5b:82:a4:b4:e0:77:11:4d:f3:e2:68:
         15:ca:2a:a2:1a:3c:9a:0c:2e:c2:d9:ef:61:f7:31:e1:77:44:
         14:ec:50:fb:2b:e8:85:fe:ae:6d:d1:ea:f0:5c:1b:ca:97:42:
         58:b1:38:4f:4d:c1:42:3c:05:91:76:0c:f8:e8:f6:49:92:e2:
         5e:4b:8a:90:00:79:dc:ea:bf:ed:0a:b9:e6:b1:ef:a8:ee:0b:
         83:f1:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----