Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/b6804e9b-f597-32d8-b4de-9df4d51fc389.roa
File:                     b6804e9b-f597-32d8-b4de-9df4d51fc389.roa (raw, json)
Hash identifier:          mfhKaYlfvn5x2ZAWSVvTdzqqUUnR6+uITh/5XzFT8Ro=
Subject key identifier:   9F:62:4B:32:72:01:1E:0A:BE:FA:BF:62:12:EE:67:9D:04:37:09:70
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35E1E1A2
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/b6804e9b-f597-32d8-b4de-9df4d51fc389.roa
Signing time:             Mon 04 Nov 2019 10:07:06 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        139.99.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:e1:e1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=3633ff8b-180a-4c79-9332-46f6312906ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:25:57:36:e4:26:f4:d4:2b:a4:5c:2d:ce:
                    95:47:9c:ca:2a:62:03:3e:92:d7:07:e0:b3:48:cc:
                    ec:4d:1c:f9:71:b1:da:a3:68:04:35:a7:fc:4d:b7:
                    1b:27:16:70:6c:36:c9:56:41:a9:89:57:e6:a2:23:
                    2e:3f:b0:f8:35:05:77:86:52:37:9f:da:3f:57:d1:
                    77:f7:c6:b5:2c:03:3b:d0:2a:ed:18:c1:2f:bf:67:
                    02:2b:46:76:48:85:88:ec:d7:c7:6f:5e:d1:59:23:
                    ff:1b:27:6d:34:fb:a6:66:1e:64:80:a2:88:5f:67:
                    f8:45:6c:24:2a:11:0b:48:9e:9d:a2:7e:4b:69:d2:
                    f5:a5:f3:16:99:b8:3f:16:5d:42:5f:35:57:4d:9b:
                    1a:af:63:d1:85:6c:1b:0d:c4:b4:7e:f5:ca:8f:a7:
                    bd:f0:88:06:1e:6f:73:4b:5e:88:d4:06:55:c6:b5:
                    90:52:64:4c:2b:15:a7:b8:32:81:73:ad:92:ca:44:
                    25:9a:60:99:eb:d1:13:9a:70:9a:10:bf:c0:d2:79:
                    26:5d:57:a1:82:8f:93:54:e7:d8:52:bf:0a:9c:70:
                    f8:6d:e4:cf:b4:77:a5:bd:55:a9:3e:08:36:69:7d:
                    3e:e6:5a:55:bd:ec:6b:a7:65:4e:e9:f0:a1:6b:3d:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:4B:32:72:01:1E:0A:BE:FA:BF:62:12:EE:67:9D:04:37:09:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/b6804e9b-f597-32d8-b4de-9df4d51fc389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.99.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:73:d9:b7:c8:7f:a8:27:8a:62:80:42:74:78:47:d5:73:a0:
         f3:98:17:65:19:ee:f1:9d:82:86:9a:ee:a7:51:4b:9a:1b:74:
         f9:3d:d3:d9:14:3d:81:12:65:d0:3f:c9:23:41:ae:b5:8f:5b:
         fc:7c:ff:f4:68:24:88:7d:af:d8:0d:97:37:fd:fe:23:0d:51:
         ff:74:fb:33:2c:64:3c:d4:4a:88:4a:c3:78:0b:6e:97:79:87:
         8d:f0:13:a6:07:73:a4:c0:34:97:05:4b:92:d8:de:2e:06:16:
         52:81:ad:01:77:e8:34:c9:47:b6:71:10:8d:0c:0f:cf:1a:a2:
         3a:7e:a4:6a:1c:bc:f5:8f:7f:79:ca:95:f6:d6:9a:41:a0:a1:
         cf:5f:04:6b:fc:23:6b:56:f8:cc:16:7a:9d:fd:c7:d5:6a:e7:
         e1:4a:b1:67:6d:c4:a7:30:68:75:9c:28:78:06:70:a0:4c:50:
         e7:e1:0d:2d:03:eb:c4:2b:be:27:b4:e6:83:65:dc:13:96:3b:
         a6:17:66:b1:d5:18:8b:f5:d8:b4:83:99:b1:06:d8:31:bf:37:
         ed:6e:6b:1b:95:b6:ea:45:17:d8:90:76:8f:1e:93:59:70:06:
         2b:03:0b:4d:4b:de:62:68:bc:b3:1c:c0:f9:dc:3d:1c:2d:aa:
         70:b8:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----