Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08ec7617-d477-3f80-a34d-90d635964ece.roa
File:                     08ec7617-d477-3f80-a34d-90d635964ece.roa (raw, json)
Hash identifier:          heIq/wsF87lhbpRfM9KqD9vqSY3VlEEh7vqRyeEj4qo=
Subject key identifier:   51:42:37:CD:17:60:01:3C:74:82:5A:4E:31:A6:7A:BC:88:21:A2:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586B3F223CB8061C676C04900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08ec7617-d477-3f80-a34d-90d635964ece.roa
Signing time:             Fri 12 Apr 2024 23:46:58 +0000
ROA not before:           Fri 12 Apr 2024 23:46:58 +0000
ROA not after:            Thu 11 Jul 2024 23:46:58 +0000
asID:                     6939
IP address blocks:        107.186.56.0/24 maxlen: 24
                          172.252.181.0/24 maxlen: 24
                          172.121.255.0/24 maxlen: 24
                          172.252.22.0/24 maxlen: 24
                          172.252.94.0/24 maxlen: 24
                          172.252.10.0/24 maxlen: 24
                          142.252.205.0/24 maxlen: 24
                          172.120.9.0/24 maxlen: 24
                          172.120.15.0/24 maxlen: 24
                          107.186.4.0/24 maxlen: 24
                          107.186.9.0/24 maxlen: 24
                          142.252.48.0/24 maxlen: 24
                          142.252.56.0/24 maxlen: 24
                          142.252.18.0/24 maxlen: 24
                          142.252.16.0/24 maxlen: 24
                          142.252.19.0/24 maxlen: 24
                          142.252.40.0/24 maxlen: 24
                          142.252.92.0/24 maxlen: 24
                          107.186.64.0/24 maxlen: 24
                          107.186.63.0/24 maxlen: 24
                          107.186.91.0/24 maxlen: 24
                          107.186.79.0/24 maxlen: 24
                          107.186.224.0/24 maxlen: 24
                          107.187.43.0/24 maxlen: 24
                          107.187.101.0/24 maxlen: 24
                          107.186.234.0/24 maxlen: 24
                          107.186.193.0/24 maxlen: 24
                          107.186.203.0/24 maxlen: 24
                          107.187.102.0/24 maxlen: 24
                          107.187.104.0/24 maxlen: 24
                          107.187.111.0/24 maxlen: 24
                          107.187.108.0/24 maxlen: 24
                          107.186.152.0/24 maxlen: 24
                          107.186.20.0/24 maxlen: 24
                          107.186.23.0/24 maxlen: 24
                          107.186.32.0/24 maxlen: 24
                          107.186.30.0/24 maxlen: 24
                          107.186.25.0/24 maxlen: 24
                          172.252.196.0/24 maxlen: 24
                          172.252.198.0/24 maxlen: 24
                          107.186.13.0/24 maxlen: 24
                          107.165.224.0/24 maxlen: 24
                          104.165.195.0/24 maxlen: 24
                          104.164.206.0/24 maxlen: 24
                          104.165.72.0/24 maxlen: 24
                          104.165.12.0/24 maxlen: 24
                          107.164.139.0/24 maxlen: 24
                          107.165.169.0/24 maxlen: 24
                          107.164.173.0/24 maxlen: 24
                          107.164.24.0/24 maxlen: 24
                          107.164.22.0/24 maxlen: 24
                          107.164.86.0/24 maxlen: 24
                          107.165.197.0/24 maxlen: 24
                          107.165.212.0/24 maxlen: 24
                          107.165.215.0/24 maxlen: 24
                          142.252.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 20:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:b3:f2:23:cb:80:61:c6:76:c0:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 23:46:58 2024 GMT
            Not After : Jul 11 23:46:58 2024 GMT
        Subject: CN=ece9569d-53fa-4ee3-8c24-3c4286f14d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:d3:4a:81:3d:65:0d:76:7e:52:a0:66:ff:
                    29:18:e2:38:ce:12:27:d6:30:f3:c2:b8:b9:ae:7c:
                    bb:aa:96:7b:30:35:7f:fd:53:16:ba:92:64:48:fc:
                    d2:cc:19:3f:29:e8:32:90:ec:ce:84:77:4c:5f:4d:
                    b8:ab:c6:3a:eb:3c:3f:aa:be:2c:a5:e3:45:1b:0b:
                    65:54:fb:5a:98:cb:2c:2f:e5:b9:e2:62:38:e6:f6:
                    59:84:f1:03:a6:56:60:40:6f:c2:94:7b:d0:10:3a:
                    47:91:d5:93:dd:44:e1:93:00:50:d8:b0:0d:a0:a3:
                    1b:94:51:68:05:64:4c:26:c9:70:0d:96:d9:c5:96:
                    28:02:cd:85:88:ec:44:6e:95:81:ce:c4:b0:f6:33:
                    11:d5:45:95:69:0e:30:cf:e9:40:a5:0c:31:06:b9:
                    bb:aa:c6:f4:73:7c:57:aa:0c:15:dc:f7:4a:38:e5:
                    90:25:18:99:a9:2b:1d:a5:7c:59:77:8e:33:10:11:
                    8b:9d:65:bb:2b:53:91:17:f1:87:68:c5:63:f6:17:
                    99:1e:fe:46:d4:5f:97:1e:5d:3c:3f:39:8f:d4:ab:
                    4c:c4:ee:9c:49:4d:d1:95:65:c5:0c:56:ec:22:12:
                    e4:4f:51:29:d8:9d:0b:f4:0b:89:f9:dd:e8:d9:82:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:42:37:CD:17:60:01:3C:74:82:5A:4E:31:A6:7A:BC:88:21:A2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08ec7617-d477-3f80-a34d-90d635964ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.206.0/24
                  104.165.12.0/24
                  104.165.72.0/24
                  104.165.195.0/24
                  107.164.22.0/24
                  107.164.24.0/24
                  107.164.86.0/24
                  107.164.139.0/24
                  107.164.173.0/24
                  107.165.169.0/24
                  107.165.197.0/24
                  107.165.212.0/24
                  107.165.215.0/24
                  107.165.224.0/24
                  107.186.4.0/24
                  107.186.9.0/24
                  107.186.13.0/24
                  107.186.20.0/24
                  107.186.23.0/24
                  107.186.25.0/24
                  107.186.30.0/24
                  107.186.32.0/24
                  107.186.56.0/24
                  107.186.63.0-107.186.64.255
                  107.186.79.0/24
                  107.186.91.0/24
                  107.186.152.0/24
                  107.186.193.0/24
                  107.186.203.0/24
                  107.186.224.0/24
                  107.186.234.0/24
                  107.187.43.0/24
                  107.187.101.0-107.187.102.255
                  107.187.104.0/24
                  107.187.108.0/24
                  107.187.111.0/24
                  142.252.5.0/24
                  142.252.16.0/24
                  142.252.18.0/23
                  142.252.40.0/24
                  142.252.48.0/24
                  142.252.56.0/24
                  142.252.92.0/24
                  142.252.205.0/24
                  172.120.9.0/24
                  172.120.15.0/24
                  172.121.255.0/24
                  172.252.10.0/24
                  172.252.22.0/24
                  172.252.94.0/24
                  172.252.181.0/24
                  172.252.196.0/24
                  172.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:86:f0:51:67:3e:35:60:eb:46:6f:57:12:ec:46:44:f3:06:
         1d:82:b5:c3:84:9a:2f:e7:fe:71:b4:86:12:7d:8f:fc:d6:8b:
         aa:34:02:a8:f3:e4:bf:dc:f2:69:02:41:ad:a4:03:3f:9e:05:
         89:00:dd:9c:a9:a3:c2:ed:20:da:16:c0:bb:06:3f:7e:0f:52:
         e9:e8:9f:ba:0b:66:45:66:a9:94:88:d7:6f:70:fa:d9:a4:c0:
         35:75:a6:6a:81:e7:5f:7d:68:ab:cb:ea:cb:62:09:64:98:d4:
         d7:a2:37:3c:48:0b:84:82:ef:75:71:39:e2:71:22:11:9b:08:
         cf:b9:e5:4a:96:1e:22:0d:24:d3:55:01:34:63:22:ee:cb:59:
         07:1c:ad:77:94:78:57:4c:ac:3f:92:9f:1b:a0:49:44:c9:45:
         78:17:10:37:81:6b:2c:ef:01:77:3b:ff:17:cc:6a:df:20:f0:
         37:2a:2a:f8:f1:ae:3b:fb:0e:38:45:c7:1c:4c:61:f5:b4:ca:
         08:df:c0:5b:93:7a:d6:a5:e8:c4:5e:ac:42:6e:20:48:7d:69:
         38:48:5e:2a:1e:8b:92:e3:e5:b3:eb:2f:3d:3c:b5:7c:46:9d:
         6c:e9:5c:f1:c1:d8:bc:5d:44:77:72:53:cf:dd:53:59:64:de:
         02:41:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:56:38 2024 by rpki-client on console-fra.rpki-client.org