Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb711e1d-1da0-30d6-9543-4687874ce3ca.roa
File:                     eb711e1d-1da0-30d6-9543-4687874ce3ca.roa (raw, json)
Hash identifier:          na1T9VTxkJtgqqTMzhS9S7Yr8jS83VIQHenxP+luRt4=
Subject key identifier:   6F:6F:26:1A:F9:7D:18:CA:F5:6E:DD:7C:8C:6F:38:C0:78:7B:68:4B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583DBF53E2A198FA83CB71F3E800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb711e1d-1da0-30d6-9543-4687874ce3ca.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Thu 14 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.96.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bf:53:e2:a1:98:fa:83:cb:71:f3:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : Mar 14 04:00:00 2030 GMT
        Subject: CN=64c4604a-22a1-4f17-8bd1-8be9039e9199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:98:9c:dc:53:81:03:0d:26:73:85:f2:1b:
                    5a:79:7e:20:8f:d8:93:a7:ca:c2:21:65:bf:ad:f9:
                    20:2b:8d:58:34:14:1d:99:9f:9b:36:e2:1c:9e:00:
                    ff:42:6e:ae:c0:74:15:b2:31:a4:18:22:1e:b1:c9:
                    5f:b6:37:d9:3b:0a:8b:8e:df:9f:28:df:25:7b:aa:
                    08:fa:2a:81:a6:03:6d:cf:aa:7f:81:80:11:10:98:
                    b3:f3:7b:b8:d2:64:cc:ee:fe:86:7c:e8:5d:43:77:
                    d1:1e:36:85:5e:83:8b:37:4d:67:ff:f9:e8:a0:ca:
                    75:b3:86:a8:de:19:ba:5b:70:fd:a3:90:3a:b4:47:
                    19:b8:9f:78:3f:4d:b7:af:2b:0c:0a:de:90:bc:f1:
                    ac:13:f4:24:28:0d:75:26:37:f5:1c:d8:44:00:8d:
                    f1:2e:dd:44:e2:d1:14:eb:12:51:a6:28:3f:68:22:
                    67:00:84:94:0f:25:a9:47:62:8c:43:1b:1c:7f:08:
                    74:f3:a8:3b:19:82:eb:05:d2:49:18:3c:6c:9a:64:
                    b4:a3:9d:f5:46:8e:fd:9f:88:00:a7:63:91:25:49:
                    8e:2d:0d:7d:1b:4a:8f:cb:87:c7:f7:55:9e:21:10:
                    3d:93:5a:45:18:3f:0c:2c:f3:f9:31:e6:1e:e5:d8:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:26:1A:F9:7D:18:CA:F5:6E:DD:7C:8C:6F:38:C0:78:7B:68:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb711e1d-1da0-30d6-9543-4687874ce3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:e6:41:02:42:36:0b:ee:71:1b:85:74:79:2d:e5:73:d6:
         27:ec:d2:5d:ab:94:dd:2a:d9:69:92:65:fe:02:c1:e3:13:ba:
         b9:85:fa:64:23:82:12:9b:6d:ee:ef:f5:b6:41:eb:cd:5b:d0:
         9a:c5:f0:20:c5:62:96:b2:d0:cb:21:fc:4b:c7:51:28:e3:d9:
         be:b1:c9:64:0e:31:e6:e7:07:9d:b4:f7:7f:da:89:3a:46:19:
         1b:ac:7a:a0:4b:47:5a:f3:57:b0:21:cf:87:68:3b:59:50:71:
         4b:8c:84:9e:64:b4:66:ad:84:32:16:d2:75:22:fe:e8:b7:7d:
         86:b4:58:11:61:38:3d:f5:e2:34:5f:7d:ac:71:2e:cc:88:27:
         b6:fb:f8:3f:bc:68:af:ff:dd:b9:2d:10:4e:04:09:19:38:e8:
         81:cf:f8:df:70:0a:61:52:68:91:c1:ba:2b:d9:91:7f:b8:38:
         2f:7c:13:40:b8:1a:08:4f:fc:f3:40:37:d3:45:11:79:3a:ac:
         cb:0d:92:ef:c1:d2:64:55:16:02:3f:26:c3:82:da:48:22:81:
         4d:61:df:5d:50:90:69:21:35:8b:d5:0e:78:51:fe:d4:d5:1f:
         10:f7:b7:85:d9:5e:30:29:25:7c:4a:f0:08:f6:9e:f7:b3:b7:
         39:66:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org