Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/0599bc23-cae5-37f2-832b-1eb96d91d1e9.roa
File:                     0599bc23-cae5-37f2-832b-1eb96d91d1e9.roa (raw, json)
Hash identifier:          61vEHoMDaynUUmIkbP/KxCiZMAM1lorEysrVPPRHZmY=
Subject key identifier:   8C:F9:F6:94:05:1F:76:E2:49:85:77:10:1B:94:75:68:27:5A:B9:4F
Certificate issuer:       /CN=85cb1f45-c822-4e3f-9234-71ff680b968d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ED7011AB4
Authority key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/0599bc23-cae5-37f2-832b-1eb96d91d1e9.roa
Signing time:             Thu 05 Dec 2019 17:00:04 +0000
ROA not before:           Thu 05 Dec 2019 05:00:00 +0000
ROA not after:            Wed 05 Dec 2029 05:00:00 +0000
asID:                     18439
IP address blocks:        208.78.156.0/24 maxlen: 24
                          216.115.188.0/24 maxlen: 24
                          2604:69c0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 02 Sep 2022 17:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:d7:01:1a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85cb1f45-c822-4e3f-9234-71ff680b968d
        Validity
            Not Before: Dec  5 05:00:00 2019 GMT
            Not After : Dec  5 05:00:00 2029 GMT
        Subject: CN=324b386f-47be-46eb-8a50-fc1bf4fcb7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:91:04:06:c9:ab:33:88:03:b3:9d:20:c6:80:
                    a1:f3:ba:c0:d8:e6:9f:b0:52:40:c8:be:7a:78:6d:
                    b6:91:69:1d:57:2e:4a:9f:78:a9:ce:b6:f8:1b:0c:
                    3e:a3:03:8e:6b:90:4d:b6:1e:de:e5:dc:04:7f:2d:
                    80:f7:b3:cf:23:f4:fc:43:7a:28:48:d0:29:6a:6a:
                    5e:2a:72:09:5b:24:bd:c9:8d:51:b8:e9:2e:8b:41:
                    1c:33:fc:7b:11:4e:15:13:ed:1f:c5:f8:16:76:7f:
                    1a:16:fe:06:cd:88:eb:f5:e4:1f:ab:71:ae:4d:1a:
                    35:2c:9f:5b:44:6f:32:fd:be:03:fe:50:30:7b:c6:
                    ee:5f:6f:a4:5b:ac:6c:ec:70:5f:02:b3:d2:9e:9f:
                    d2:c0:b1:21:31:73:a6:7e:8b:a8:65:eb:3f:40:9e:
                    c8:e6:e0:c0:dc:6d:bc:51:c2:93:88:c9:65:1c:8d:
                    14:da:7c:fe:b7:61:2b:91:9c:35:6b:03:99:eb:ec:
                    70:97:d4:aa:d6:38:9a:fc:6e:e7:73:61:8a:fe:d9:
                    2d:2c:73:08:07:24:21:7b:0a:cf:bc:73:4b:53:79:
                    21:b7:02:99:c3:aa:a8:f8:8f:4b:28:85:ff:55:34:
                    67:ec:bd:31:07:d0:af:da:90:1d:ce:5b:53:73:d4:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:F6:94:05:1F:76:E2:49:85:77:10:1B:94:75:68:27:5A:B9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/0599bc23-cae5-37f2-832b-1eb96d91d1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl

            X509v3 Authority Key Identifier:
                keyid:6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.156.0/24
                  216.115.188.0/24
                IPv6:
                  2604:69c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:7b:95:4c:ac:be:46:ed:8c:eb:30:28:d8:79:e1:6f:e7:
         77:c4:e9:05:bc:65:81:d3:0f:a0:d4:69:d0:74:61:bf:46:00:
         62:45:20:b8:9e:d9:64:4b:fe:1d:35:5b:76:09:3d:88:17:94:
         46:bc:45:aa:cc:b3:0d:c4:9b:a0:81:de:6a:80:64:05:f0:47:
         4a:dc:fc:fd:5c:b4:4d:fd:41:27:99:45:33:4a:0f:56:ad:25:
         dd:48:6d:06:f9:c2:89:b9:13:9b:b3:4a:4c:c6:ba:3d:68:eb:
         26:4c:ad:59:68:73:0b:8d:42:0c:b7:90:73:d2:b7:d0:39:0f:
         5d:43:84:e4:41:32:fc:6d:bb:62:0a:5e:21:13:22:30:5f:18:
         29:21:0a:bb:e9:36:ce:fb:f7:39:13:8d:8f:ac:23:ae:59:48:
         32:71:fb:57:9c:64:97:68:cd:79:88:6d:b0:f2:cc:05:fc:20:
         94:13:4d:13:b0:01:56:5a:ee:ff:b1:23:fa:57:76:ba:6f:50:
         a1:bb:c1:30:06:81:d0:ef:34:a9:8d:1d:9f:c9:a3:49:28:14:
         e9:46:56:fb:b5:76:82:21:9f:37:b1:ca:47:cf:db:d8:d0:f8:
         9f:1b:64:13:af:03:f7:df:0b:4c:1c:b7:8d:83:4a:6c:5e:b3:
         67:1b:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:12 2025 by rpki-client