Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7adffa71-841d-357b-a30e-6ce1055742e5.roa
File:                     7adffa71-841d-357b-a30e-6ce1055742e5.roa (raw, json)
Hash identifier:          129OzMQqfIt7CkKy1k5U3oTwDzllNtyAEh/xYEmaMVw=
Subject key identifier:   F6:08:7F:68:39:A5:C7:F5:89:B5:22:76:1F:9C:7A:C3:A3:59:2B:CB
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9E7924C7C61DC7355B440
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7adffa71-841d-357b-a30e-6ce1055742e5.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        162.248.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:e7:92:4c:7c:61:dc:73:55:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=4d485f29-fc07-4e68-835c-f0f0f52daae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:f9:6b:3d:11:a9:42:44:e1:e0:f2:74:a7:
                    e8:52:82:15:6a:0d:3d:e7:7c:33:d2:18:56:87:6d:
                    31:a5:06:9e:2f:d6:57:9d:51:cb:39:42:e2:dc:ff:
                    ee:5a:d5:a7:32:17:13:20:e8:c3:d2:96:ab:af:4b:
                    f3:1f:73:06:c6:ee:a9:34:3d:48:dd:07:1b:9e:9d:
                    7b:5a:e2:5f:3a:0c:bc:58:37:51:ee:00:b2:63:73:
                    8d:bf:4c:01:66:88:c0:c4:39:a2:24:26:7b:eb:04:
                    ee:26:79:24:a0:e8:08:a4:ce:64:a0:2c:94:dc:eb:
                    05:09:d0:44:60:69:a7:3d:db:22:c0:55:62:76:c5:
                    d5:7a:aa:83:0f:69:51:8b:ae:10:2c:a2:0a:5b:2d:
                    e4:07:f8:1a:8e:c6:ee:10:bb:8b:9f:aa:dc:fe:7b:
                    f1:55:9c:32:a2:f1:73:82:50:5c:a4:23:c5:89:78:
                    08:d1:19:03:8c:45:27:87:51:c3:ba:98:46:36:bb:
                    a7:b7:2f:be:fd:0c:00:78:91:23:6c:fd:fc:9f:eb:
                    37:83:95:a6:68:de:05:79:47:bf:e0:fe:1f:58:c1:
                    6d:f4:46:d2:c0:e6:2c:ce:f0:47:8b:d9:77:9d:3d:
                    e9:a0:49:8c:44:e2:40:2b:85:08:bd:9f:71:0c:ab:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:7F:68:39:A5:C7:F5:89:B5:22:76:1F:9C:7A:C3:A3:59:2B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7adffa71-841d-357b-a30e-6ce1055742e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:01:96:93:5d:b8:17:4d:c5:d4:2a:ce:b5:cd:08:71:c5:
         bd:a5:14:e0:28:43:41:16:a9:06:90:45:21:9d:f6:8f:21:c0:
         0a:44:66:94:75:f2:f9:80:01:a3:9b:bc:61:58:5d:0f:d3:72:
         c2:d3:2c:e3:27:02:b6:8f:bc:56:f4:33:2b:82:8b:a5:a2:4a:
         27:13:b5:ab:2f:0e:56:0d:b4:93:4e:7e:a1:0f:0d:cf:81:e1:
         98:e2:4e:38:19:e6:33:43:f0:33:e9:51:21:6c:ea:cc:78:0e:
         d0:02:b6:0f:45:d4:4c:2a:2b:02:f9:e4:85:a3:9c:7e:3a:fe:
         46:dd:95:c8:8b:0c:87:c2:78:31:e0:f1:c7:26:00:88:dc:8c:
         0e:16:69:23:3a:8c:b4:d5:80:c6:a0:4c:d3:4c:f9:0b:8f:35:
         54:39:21:54:f1:ce:dc:ff:72:46:ef:a5:43:38:dd:a2:e2:16:
         13:7e:70:63:59:1a:65:ba:96:cf:ab:a9:02:8c:42:3e:08:85:
         22:fe:e8:c6:fd:16:2a:51:62:23:a7:97:78:f7:ce:c6:14:12:
         e7:5e:c0:34:85:0d:fb:83:b6:17:1b:cc:d7:89:ad:66:df:ab:
         bd:54:2c:e7:4f:c0:41:95:5d:ae:5e:7e:89:a7:2e:06:e0:22:
         b0:0e:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org