Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/942eb7b5-8624-3698-b223-8bb3263ef5fa.roa
File:                     942eb7b5-8624-3698-b223-8bb3263ef5fa.roa (raw, json)
Hash identifier:          mUgKc8pH/PagxP4DBpvKA/6b0IvXfbCJeWHdFlLj65o=
Subject key identifier:   30:CE:BB:5A:3F:F7:30:E8:CD:B6:DB:D3:2D:91:F1:7F:1E:36:EC:66
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC8897351AFAB69D9F38540
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/942eb7b5-8624-3698-b223-8bb3263ef5fa.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        66.109.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:89:73:51:af:ab:69:d9:f3:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=1ad99ea1-5cfe-457a-acc9-1953dded5d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:e1:a7:98:97:39:46:33:ae:b9:36:2a:96:
                    18:9d:d5:4f:16:cf:cb:36:6c:e5:91:c0:65:6b:47:
                    52:e4:ef:e0:e0:31:35:e2:3c:f3:d6:2c:3a:dd:07:
                    14:a8:7e:fa:c9:50:e4:90:10:5d:34:5a:d8:4c:92:
                    46:b5:d5:cc:a5:a0:9c:ed:90:4f:61:eb:21:5d:39:
                    13:d9:f4:2c:d7:f4:a9:79:ab:cb:65:51:f7:8b:c3:
                    5e:92:fe:d6:a2:f5:46:80:9e:78:bc:9e:b5:2d:29:
                    21:9a:ca:50:87:22:08:4e:d0:33:4e:95:9c:08:c2:
                    c4:7b:98:50:60:35:01:8f:e7:36:24:fd:17:f0:23:
                    10:a3:89:5d:73:14:b7:ef:7f:fe:6d:ab:e1:be:4c:
                    0e:bf:f2:ec:b0:f3:89:d1:4e:dd:9c:9f:af:48:68:
                    46:5e:30:8c:54:7b:0f:d0:24:93:65:6a:d5:f8:5f:
                    5c:32:ca:74:7d:46:fe:fe:fd:3e:46:7b:7d:79:73:
                    50:2d:17:3f:98:f2:66:38:83:c7:f6:c4:ed:cb:f8:
                    1c:13:ab:5b:f4:fb:fc:e5:34:71:07:79:f0:af:ea:
                    37:40:7c:f0:62:9b:2e:7e:c3:49:b6:35:c8:4e:d2:
                    89:dd:e5:0f:f5:ef:7a:5a:f2:97:05:1a:0b:70:ef:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:BB:5A:3F:F7:30:E8:CD:B6:DB:D3:2D:91:F1:7F:1E:36:EC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/942eb7b5-8624-3698-b223-8bb3263ef5fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.109.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:80:11:8c:1c:67:84:75:d1:0c:ff:e3:8f:3f:db:1e:ef:37:
         49:4c:7a:c1:8c:98:36:1c:ee:64:23:d4:85:5f:8c:78:9e:57:
         79:ba:2b:c3:d2:5c:5e:93:d4:28:63:90:16:37:30:68:77:83:
         d9:ac:f0:72:f5:51:5b:62:81:d4:8e:21:7f:a1:80:31:80:56:
         b2:ae:f4:14:3a:d1:78:cc:c9:43:5c:06:98:72:b2:96:ef:ec:
         4c:76:eb:06:9c:11:06:2a:98:99:54:16:e4:3c:b7:e1:72:d5:
         0c:05:bc:62:a1:0f:82:56:ae:02:60:a3:56:f6:53:9f:f5:1e:
         54:31:02:ba:a6:8a:a8:7a:74:0e:0b:9a:3a:c3:c6:3d:28:e8:
         a8:32:47:c2:53:e7:70:56:f5:c4:e6:d7:55:30:90:96:44:88:
         b9:1b:96:e3:92:f3:9f:ef:35:37:10:06:da:24:05:01:cb:1d:
         51:47:13:f8:82:66:64:61:06:8c:7f:f7:96:67:44:2b:3f:1a:
         7d:ea:7a:62:c5:af:a0:8a:ef:fd:55:6b:dd:80:b7:e5:7d:ea:
         59:3e:4d:7b:79:5f:d7:46:27:b1:09:04:80:14:7e:ac:e0:b0:
         7b:9b:34:03:15:4c:06:01:c1:05:7c:00:7f:78:db:1a:74:bf:
         b0:fb:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org