Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/001b9297-ccc1-37bb-ab04-17702d0dc0bd.roa
File:                     001b9297-ccc1-37bb-ab04-17702d0dc0bd.roa (raw, json)
Hash identifier:          j44Pki2mXZUpftr6xilxx0gZuU25CiJiRVrOFKGXJUA=
Subject key identifier:   89:A3:72:B8:4E:FB:65:BA:3E:7B:AA:58:3D:BC:B7:A6:63:B1:15:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AAE1D8B4070388C8C4DCBE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/001b9297-ccc1-37bb-ab04-17702d0dc0bd.roa
Signing time:             Thu 25 Apr 2024 22:48:33 +0000
ROA not before:           Thu 25 Apr 2024 22:48:33 +0000
ROA not after:            Wed 24 Jul 2024 22:48:33 +0000
asID:                     397373
IP address blocks:        107.164.10.0/24 maxlen: 24
                          107.164.38.0/24 maxlen: 24
                          107.164.130.0/24 maxlen: 24
                          107.164.135.0/24 maxlen: 24
                          107.164.178.0/24 maxlen: 24
                          107.164.187.0/24 maxlen: 24
                          107.165.4.0/24 maxlen: 24
                          107.165.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 02:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:e1:d8:b4:07:03:88:c8:c4:dc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:48:33 2024 GMT
            Not After : Jul 24 22:48:33 2024 GMT
        Subject: CN=f8fb696b-014b-410f-bb65-bfe245283186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:6e:eb:1e:0b:3a:72:3f:50:74:1e:47:d6:
                    38:95:cc:80:31:17:ac:ac:74:18:ad:d4:11:81:6a:
                    fe:7c:8f:a9:24:17:b3:d9:ca:88:fa:c0:52:b2:f4:
                    17:44:eb:4b:a6:62:f1:bc:2f:7a:a9:c2:89:64:4f:
                    35:72:b4:85:47:0c:0b:04:d4:9c:92:97:5b:9a:4c:
                    9a:77:90:2a:35:ba:15:e1:1f:89:55:6f:54:8f:43:
                    3b:44:00:da:93:f7:d3:7d:37:97:6e:6a:a3:cf:89:
                    3a:34:0f:00:ed:9f:b8:0f:06:7d:83:1b:a0:1e:7c:
                    44:a6:f4:0f:1a:0c:76:bc:fa:6a:5f:cb:eb:a1:10:
                    9f:e2:4f:8f:41:bf:1f:32:6c:72:45:3f:9c:b9:bd:
                    d8:1c:d9:d9:17:0a:01:0c:42:ac:ab:d3:56:88:a0:
                    c3:a9:f9:6c:3e:9e:bf:e3:16:73:b2:47:89:c2:21:
                    8f:30:ca:1a:75:e6:d3:e4:a8:8c:71:93:6d:bc:7c:
                    8f:18:83:3e:50:bc:b7:c1:e8:43:05:06:54:f3:e9:
                    a5:e1:fe:11:bb:3c:d8:9d:7c:8f:95:ef:e3:9b:20:
                    de:b8:ed:64:b9:8e:52:aa:af:1f:60:dd:65:a5:65:
                    ab:36:46:7d:5c:fe:c6:6b:3f:ac:58:45:41:c8:4c:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:72:B8:4E:FB:65:BA:3E:7B:AA:58:3D:BC:B7:A6:63:B1:15:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/001b9297-ccc1-37bb-ab04-17702d0dc0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.10.0/24
                  107.164.38.0/24
                  107.164.130.0/24
                  107.164.135.0/24
                  107.164.178.0/24
                  107.164.187.0/24
                  107.165.4.0/24
                  107.165.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:2f:84:bc:0c:f2:54:43:a1:f3:bd:34:0f:7b:8e:da:4f:
         c9:7d:9e:8b:2e:93:42:ea:55:5c:68:d8:ed:a2:86:7a:61:9d:
         ee:85:cc:16:63:99:8f:d6:64:3a:14:e1:26:f0:68:d0:51:e1:
         04:af:37:93:99:fb:3d:03:69:3d:b8:46:7c:6d:e8:94:7b:f5:
         ce:79:d5:1f:8f:84:29:b6:08:97:c4:5b:7c:27:a9:ea:26:f2:
         64:31:c4:c0:58:46:0d:11:f9:93:27:dd:08:f0:ba:cf:b4:72:
         ef:41:c0:8e:94:a2:33:ca:41:71:45:29:49:9b:c0:db:4d:32:
         90:34:c0:dc:f3:5c:8c:bc:d7:9d:57:90:99:a7:ce:95:fa:ad:
         27:81:c5:b9:97:d5:78:c2:b0:f1:09:be:ea:1e:f0:ea:46:fa:
         fa:8b:81:30:31:da:fa:3f:4f:a2:94:0b:ab:d0:eb:66:8e:aa:
         53:26:7e:e2:7c:e1:f7:d5:c3:85:ff:29:b3:0c:19:c1:48:85:
         b7:97:08:74:d9:a4:c7:d3:2f:47:3d:fa:26:27:5a:94:5f:bb:
         6b:9d:b2:62:ce:bc:7d:f8:90:95:e3:ba:02:02:70:18:91:c3:
         ff:31:98:7e:71:63:99:c9:33:24:16:be:9e:6d:67:5a:47:f9:
         77:60:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:17 2024 by rpki-client on console-fra.rpki-client.org