Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cf3b740f-fbd3-3ad6-85a6-cab58eee00f7.roa
File:                     cf3b740f-fbd3-3ad6-85a6-cab58eee00f7.roa (raw, json)
Hash identifier:          AKmBuBbrsqApT5jBpDg+1kN+qEJERU7CS6ALtB2ejPI=
Subject key identifier:   4D:FE:EA:9B:F1:DE:01:40:6F:75:24:44:97:76:F1:27:7C:A1:7F:11
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858454B6360AD82A62AFEC46FBE20
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cf3b740f-fbd3-3ad6-85a6-cab58eee00f7.roa
Signing time:             Fri 22 Mar 2024 17:51:56 +0000
ROA not before:           Fri 22 Mar 2024 17:51:56 +0000
ROA not after:            Thu 20 Jun 2024 17:51:56 +0000
asID:                     398101
IP address blocks:        107.180.80.0/22 maxlen: 24
                          72.167.220.0/22 maxlen: 24
                          50.62.80.0/21 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.20.0/23 maxlen: 24
                          72.167.224.0/22 maxlen: 24
                          107.180.68.0/22 maxlen: 24
                          107.180.72.0/22 maxlen: 24
                          107.180.84.0/22 maxlen: 24
                          107.180.88.0/21 maxlen: 24
                          107.180.100.0/22 maxlen: 24
                          107.180.104.0/22 maxlen: 24
                          132.148.164.0/22 maxlen: 24
                          132.148.168.0/21 maxlen: 24
                          148.72.22.0/23 maxlen: 24
                          148.72.64.0/23 maxlen: 24
                          198.12.224.0/22 maxlen: 24
                          198.12.228.0/22 maxlen: 24
                          198.12.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 21:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4b:63:60:ad:82:a6:2a:fe:c4:6f:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 22 17:51:56 2024 GMT
            Not After : Jun 20 17:51:56 2024 GMT
        Subject: CN=30064d9a-a892-4203-8241-6d9e490a4d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:a2:45:be:df:b9:1a:6a:21:8a:58:9c:c2:
                    15:bc:e5:6f:43:ee:57:82:0d:56:8a:34:88:cc:d7:
                    f7:a3:aa:f1:12:67:b1:d0:95:e0:11:d7:82:c7:cf:
                    81:dd:90:b0:1c:2c:94:e9:b6:81:2f:ed:c1:71:db:
                    5a:28:cd:c1:d1:a9:6f:a8:16:1b:a3:17:2b:b0:ef:
                    4d:1d:48:28:64:c2:73:0b:a4:93:56:31:6e:2c:00:
                    98:a6:68:6f:6a:95:25:c1:a5:cd:0b:ad:30:22:68:
                    2f:19:74:0b:96:86:57:b0:70:33:fc:af:bc:d0:67:
                    4c:a8:0b:c6:9e:07:0a:42:61:ee:f8:6f:09:27:0d:
                    8e:24:c8:e6:15:bf:06:90:22:54:ec:39:fe:e8:45:
                    2f:e9:7a:29:37:77:e5:65:1c:c6:70:84:43:cc:43:
                    4a:63:74:41:7b:a6:e8:27:28:26:e6:f0:9d:f4:17:
                    2b:f0:f9:0d:e6:fd:c2:45:33:01:fc:e8:63:0a:0f:
                    19:5b:52:7d:42:ec:f4:83:c9:cc:d7:69:b1:d2:b2:
                    06:21:4f:7a:13:12:ef:09:a7:0a:49:bc:fd:d5:cf:
                    08:16:3b:f6:68:19:b0:fb:6e:c4:87:b5:ce:85:da:
                    54:54:84:c3:e3:89:a3:a6:31:88:84:08:d7:ce:ed:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FE:EA:9B:F1:DE:01:40:6F:75:24:44:97:76:F1:27:7C:A1:7F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cf3b740f-fbd3-3ad6-85a6-cab58eee00f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.80.0/21
                  64.202.184.0/21
                  72.167.20.0/23
                  72.167.220.0-72.167.227.255
                  107.180.68.0-107.180.75.255
                  107.180.80.0/20
                  107.180.100.0-107.180.107.255
                  132.148.164.0-132.148.175.255
                  148.72.22.0/23
                  148.72.64.0/23
                  198.12.224.0/21
                  198.12.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:e6:73:43:ac:05:14:5e:f5:fb:bf:79:43:a6:b0:e3:f8:
         6a:4d:51:00:a7:d4:c0:e5:0a:41:30:73:89:28:6d:80:eb:87:
         12:2a:86:ba:a4:8e:aa:86:ee:a9:96:e3:44:96:f0:20:6b:44:
         03:a8:67:71:0e:6d:c7:0c:29:08:7b:7d:99:33:c3:fc:a0:a6:
         9d:74:53:11:a1:b9:52:ac:83:19:59:9c:58:fb:af:0a:1b:93:
         bb:9c:dc:c8:3a:2b:99:05:26:df:aa:e4:a9:e4:03:b6:02:a6:
         19:d2:8f:b8:2a:8b:07:d7:c0:2b:86:4e:e2:71:14:87:c9:ae:
         da:f0:43:5a:84:32:fd:9c:9a:b1:4c:29:56:43:45:59:25:4c:
         a3:8e:b4:40:73:2d:24:1b:f3:ab:b4:be:0e:21:d9:39:01:10:
         e4:4b:6a:fa:62:41:ba:be:31:1c:71:2b:16:b3:73:75:ea:64:
         fd:60:b0:f7:d4:cc:b8:69:f3:19:3d:a2:52:aa:5f:ef:f8:0f:
         45:fa:f8:e0:61:ba:0a:cb:9e:c7:d2:7c:ea:60:62:b4:cb:f0:
         69:b2:cb:2a:3b:2b:d8:33:2c:5f:98:95:e9:d7:45:87:12:71:
         9f:7a:6a:af:31:f1:6d:9d:11:85:91:2b:49:4e:f3:76:e5:64:
         77:d7:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 00:20:45 2024 by rpki-client on console-fra.rpki-client.org