Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/3a2dc3c1-4503-3f8b-912c-f658929883c3.roa
File:                     3a2dc3c1-4503-3f8b-912c-f658929883c3.roa (raw, json)
Hash identifier:          OPdH8bVwTF8li2SwVHOlMWeTM3eQheDP46XnhBSq0qc=
Subject key identifier:   2B:77:34:B2:67:2E:D2:C0:80:36:23:76:1E:C8:39:A9:B0:E6:F0:49
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584177A0DBF249AA29CB2FD86560
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/3a2dc3c1-4503-3f8b-912c-f658929883c3.roa
Signing time:             Thu 03 Feb 2022 13:41:48 +0000
ROA not before:           Thu 03 Feb 2022 13:41:48 +0000
ROA not after:            Thu 16 May 2030 04:00:00 +0000
asID:                     32058
IP address blocks:        69.55.80.0/20 maxlen: 28
                          208.73.28.0/22 maxlen: 28

Validation:               Failed, certificate revoked on Thu 06 Apr 2023 20:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:a0:db:f2:49:aa:29:cb:2f:d8:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Feb  3 13:41:48 2022 GMT
            Not After : May 16 04:00:00 2030 GMT
        Subject: CN=1d2ff67d-5b46-4ba2-801a-d52db3881f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:d2:b3:7f:97:fd:50:e8:e8:f9:39:2b:9d:
                    55:b7:80:1f:38:b7:2b:55:0d:85:85:7b:40:53:3d:
                    7b:f3:99:b1:43:8b:f1:af:cd:37:4d:ee:ea:62:92:
                    59:ef:db:22:f7:4d:d4:b4:fa:df:35:cf:e5:72:fe:
                    4d:54:29:39:62:cc:98:ad:d8:51:1d:bd:6d:f6:59:
                    56:6f:0e:62:d2:17:ef:59:a7:61:72:73:45:3b:9d:
                    6e:51:6c:ae:8d:8b:91:e6:47:24:74:87:8a:36:a6:
                    b3:69:46:93:54:9f:d0:e2:fb:99:b1:d2:ad:0e:2a:
                    86:d9:dc:0b:08:cf:2c:8d:76:a5:4b:7a:bd:93:37:
                    38:10:93:7c:f9:22:c3:57:d7:02:48:fd:9d:55:b9:
                    76:87:ff:6f:3f:30:66:33:88:ec:22:fd:38:7f:a5:
                    53:4d:09:77:3d:7a:db:96:23:47:47:35:93:9f:8e:
                    62:07:32:48:5f:ca:be:1a:eb:c0:d3:d9:f9:ed:8a:
                    37:05:05:ad:a3:eb:52:73:8a:90:3b:71:25:3b:4d:
                    f6:68:ca:e6:c9:f8:07:9c:c2:f2:46:0d:17:97:c2:
                    f4:0a:10:c9:53:b0:f8:f2:72:c9:88:65:ef:35:ec:
                    aa:06:4c:e5:6f:13:37:f1:93:12:06:13:79:70:9a:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:34:B2:67:2E:D2:C0:80:36:23:76:1E:C8:39:A9:B0:E6:F0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/3a2dc3c1-4503-3f8b-912c-f658929883c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.80.0/20
                  208.73.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:21:db:8f:e2:9d:9a:24:f0:00:32:28:d5:7b:8a:2a:22:7e:
         4e:84:b3:f0:50:18:09:84:17:31:2c:2f:b5:d8:2e:0b:35:9e:
         d4:9f:8e:7d:5a:b1:f7:9d:88:40:7f:cd:8a:66:0c:97:a6:e1:
         ad:14:5a:1b:c8:93:28:bd:28:6a:47:bc:e9:d9:e7:1a:93:59:
         bc:3d:6b:f3:f6:ef:ef:0b:58:0c:d7:90:e8:63:b2:97:90:8e:
         61:65:b4:97:80:0b:df:10:76:c4:7c:af:9e:9e:27:62:9b:3d:
         92:c5:e2:e5:b7:e7:f9:89:69:66:7b:a6:9a:45:cf:a4:e7:05:
         e0:c9:c2:fd:2e:e3:a3:26:5e:20:d9:e4:94:f2:c4:cc:23:8c:
         13:a5:17:1d:d8:bf:8b:9b:98:a2:0b:c2:38:1d:fe:68:f4:44:
         70:45:4e:84:79:94:81:95:ea:1b:b1:15:ef:72:6a:62:05:a6:
         37:05:c4:e5:fb:80:74:f1:1e:d6:37:84:f1:53:1c:75:e7:4b:
         07:e3:eb:c0:05:a2:8d:68:f6:5b:91:a1:c8:8a:ac:97:88:81:
         66:a5:1e:d1:ad:d8:eb:3b:3d:50:a9:cb:d6:27:35:5c:b1:c4:
         3a:30:a8:e5:ba:7d:dc:30:45:4a:66:90:b0:48:0e:7e:33:93:
         3f:98:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org