Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72d656be-f9df-3fb8-a7ce-50303e1bdf3f.roa
File:                     72d656be-f9df-3fb8-a7ce-50303e1bdf3f.roa (raw, json)
Hash identifier:          vSxovzBbCM7b4KRtsF5q8JAMstpv3YzkbWLuPT5Q6Ow=
Subject key identifier:   05:06:24:F3:AE:76:A3:2D:BE:9D:4F:A2:CB:53:DB:C8:64:C7:D8:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DDC5042201C3AB100059EC740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72d656be-f9df-3fb8-a7ce-50303e1bdf3f.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Fri 09 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        71.246.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:50:42:20:1c:3a:b1:00:05:9e:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : May  9 04:00:00 2025 GMT
        Subject: CN=7a12dcff-a37e-42d4-b7fe-d3604a6b1af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:4f:97:38:d3:fa:75:50:3d:90:7e:f9:d5:
                    da:56:56:84:15:d7:49:30:b8:bb:f3:d5:8f:3d:e5:
                    48:53:d8:43:ee:01:96:db:89:2b:8a:87:e2:8b:fe:
                    d7:05:19:8b:60:77:7b:b9:1d:6d:50:0f:7c:e5:5f:
                    79:0a:95:c0:9f:4c:e8:60:0c:e1:e7:f1:63:22:3b:
                    fa:6c:94:c9:21:5a:66:59:77:33:d9:de:ae:59:ed:
                    c2:6f:cd:eb:af:55:00:1f:9f:d9:a3:fe:fd:95:f6:
                    77:96:5d:eb:4c:38:e3:5e:d3:59:71:a8:e0:c0:e8:
                    60:60:41:5c:9e:a9:b3:ee:ad:32:30:64:4a:33:0b:
                    f7:9c:16:58:e3:c9:e0:6f:69:46:f5:da:24:62:d6:
                    e9:86:01:0f:55:1f:2a:01:81:79:30:0f:e3:60:9c:
                    d8:4d:78:df:3b:3a:81:57:15:6d:b9:f0:29:d9:65:
                    a5:cf:8c:16:5e:a1:fc:70:2b:a6:0f:fd:5f:8d:fc:
                    d7:0e:1e:71:73:de:ac:48:7f:01:56:b5:61:58:71:
                    ad:da:66:c8:38:20:fa:9f:a5:4d:78:6f:45:dd:4e:
                    81:ad:9a:4f:fa:49:44:e1:80:3e:98:d0:52:25:81:
                    6d:52:c9:0d:7b:a4:af:7c:dc:fe:12:c0:2c:bd:fe:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:24:F3:AE:76:A3:2D:BE:9D:4F:A2:CB:53:DB:C8:64:C7:D8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72d656be-f9df-3fb8-a7ce-50303e1bdf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:b3:fc:ea:ce:63:35:0f:23:ba:1d:6d:c5:51:b5:6b:8d:
         58:bc:bc:b2:4f:23:6a:8d:1c:5d:7f:b7:20:99:ed:f8:e5:97:
         ee:a2:c3:de:c3:4e:55:92:1f:84:6d:8f:df:15:bd:d9:7e:d6:
         8a:86:5e:c0:20:1b:ae:9e:df:32:b6:f7:55:8b:74:35:db:2a:
         f8:ab:c2:4b:ca:13:ff:ec:57:2a:ea:09:73:76:08:40:8b:c2:
         dc:aa:20:e1:48:3b:53:0d:38:5a:05:a1:23:55:0e:e0:d3:b9:
         71:5f:1f:18:d6:41:fa:f6:40:75:9f:05:22:8b:49:ec:d2:7d:
         f2:c9:a9:2e:ea:ab:05:b0:21:22:fa:a4:60:3b:0b:09:2a:02:
         a0:a4:eb:98:e3:ac:34:41:6b:47:83:bb:cb:68:f6:71:40:25:
         a0:28:af:3a:8b:d2:53:76:ee:23:df:ef:f8:55:9c:7e:c2:d2:
         a6:bc:40:1a:13:a2:78:c2:29:59:98:78:cb:82:03:50:f9:4b:
         c5:49:17:f7:5c:e3:60:f2:b2:4f:7a:ca:4e:f1:8e:29:ee:47:
         b9:f3:d6:84:36:c8:41:29:c1:a3:57:0d:0a:53:2d:ad:b8:cd:
         ea:fe:72:f3:d2:ad:ee:6f:4a:10:f6:ba:1d:4b:fb:77:0d:38:
         4d:b1:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:42 2024 by rpki-client on console-fra.rpki-client.org