Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e15f9302-4180-3641-8301-78c695491ac5.roa
File:                     e15f9302-4180-3641-8301-78c695491ac5.roa (raw, json)
Hash identifier:          6NT0K7AY65hvmU26THgBq5SnAw5OoE2OBY5T1MCrEao=
Subject key identifier:   67:A2:9D:CC:97:84:50:86:A7:11:DE:C7:77:DF:C8:6E:DE:AD:09:1E
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328576D51CC73C042CFC168E89CCA56
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e15f9302-4180-3641-8301-78c695491ac5.roa
Signing time:             Wed 13 Feb 2019 20:46:56 +0000
ROA not before:           Wed 13 Feb 2019 05:00:00 +0000
ROA not after:            Tue 13 Feb 2029 05:00:00 +0000
asID:                     803
IP address blocks:        64.110.192.0/18 maxlen: 24
                          64.201.192.0/19 maxlen: 24
                          67.225.0.0/17 maxlen: 24
                          68.69.192.0/19 maxlen: 24
                          69.11.0.0/17 maxlen: 24
                          71.17.0.0/16 maxlen: 24
                          74.113.12.0/22 maxlen: 24
                          2604:1e80::/32 maxlen: 32
                          2607:f4a8::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 08 Apr 2022 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:e8:9c:ca:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Feb 13 05:00:00 2019 GMT
            Not After : Feb 13 05:00:00 2029 GMT
        Subject: CN=81daaaf0-4c3d-4822-916b-b4e23eb1110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:a6:f6:67:9a:96:4e:23:6b:c7:10:fd:7e:
                    8c:11:f2:43:ac:d0:31:7a:a1:60:d1:d1:b2:ea:e7:
                    67:31:87:54:2b:a5:54:ed:e6:25:17:14:69:e3:a9:
                    40:99:ba:ab:9f:a1:9a:95:de:2f:9e:fc:ae:6f:f9:
                    ac:54:35:44:6f:6f:20:d2:74:8f:61:76:e7:69:26:
                    a3:d2:59:86:33:93:e5:62:a4:ed:08:98:a5:22:cd:
                    22:47:2d:9d:c6:bf:97:5c:b9:58:c9:36:39:a1:fa:
                    53:e4:65:e9:9d:1a:88:25:db:e7:95:04:b0:33:3b:
                    9f:f8:56:93:f4:0f:57:2d:66:11:ff:22:28:dc:f7:
                    3f:ef:26:fd:48:3f:4e:cb:e1:22:67:9d:13:b3:2e:
                    40:fa:ae:b6:41:95:55:0b:05:b7:7b:0c:83:74:d1:
                    72:5b:2d:ed:47:86:77:7c:61:be:87:62:53:d0:99:
                    73:83:3e:39:10:de:bb:9d:ff:88:7b:1a:d0:8f:3e:
                    be:db:f7:35:87:d9:63:da:05:56:80:5d:9c:8a:1f:
                    a0:83:e8:2f:90:05:60:66:df:2c:ad:47:bc:51:9d:
                    89:e5:23:14:60:19:67:c7:ed:b8:72:26:a3:09:ea:
                    6b:e6:6f:58:5b:ca:0e:54:4d:47:80:7c:4a:9f:57:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A2:9D:CC:97:84:50:86:A7:11:DE:C7:77:DF:C8:6E:DE:AD:09:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/e15f9302-4180-3641-8301-78c695491ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.192.0/18
                  64.201.192.0/19
                  67.225.0.0/17
                  68.69.192.0/19
                  69.11.0.0/17
                  71.17.0.0/16
                  74.113.12.0/22
                IPv6:
                  2604:1e80::/32
                  2607:f4a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:ad:81:74:af:e0:c9:ce:e5:a5:65:97:ed:d3:a2:3d:3f:
         c7:59:b2:48:64:2b:f0:60:05:2b:6e:d4:8c:6f:72:a6:37:9c:
         22:aa:6c:93:4c:e1:19:2c:2f:b1:e5:17:75:0a:08:54:57:23:
         89:40:c2:1b:68:df:8a:d2:24:38:e9:6a:22:6a:f9:3b:a7:fa:
         db:de:ff:b3:6d:cb:37:3f:2e:8d:11:3b:e4:db:16:db:19:fa:
         1f:f2:4c:b1:da:01:ab:3f:72:e7:d3:05:90:51:3d:0d:01:a8:
         15:ec:9c:84:ed:4a:21:46:29:bb:9a:91:01:1e:38:0d:19:06:
         95:83:c5:88:02:47:93:a5:f7:e7:1c:90:15:34:22:f0:56:c5:
         30:bd:7f:f5:d4:ef:64:ba:11:ca:8d:ce:50:a9:c9:a0:54:3b:
         86:81:90:76:d5:37:85:e5:c4:bd:f3:a6:90:e1:6f:09:6e:2e:
         01:bc:1a:9a:1c:3a:dc:4a:93:c3:68:06:d1:77:c8:2a:8b:c5:
         f5:75:d8:c5:fb:2a:97:76:61:85:42:62:36:39:2e:5b:f2:59:
         59:58:d2:9e:e5:7f:d4:6d:6f:13:d1:25:ca:05:15:56:63:96:
         25:7b:4a:e6:4c:68:f8:f4:1b:9b:fa:95:ce:fa:b1:95:8e:d6:
         98:78:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:26 2025 by rpki-client