Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1517f124-f01d-303d-99a8-199359dadefd.roa
File:                     1517f124-f01d-303d-99a8-199359dadefd.roa (raw, json)
Hash identifier:          VwE2/IzjZ3CnDoLm8nQA+3cR9cBnGu19AewYlbVpXJ4=
Subject key identifier:   4A:97:EA:73:48:5A:B5:B4:91:D1:47:AE:8D:D6:18:FA:20:12:21:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843E2C21E303D5969E849D3FF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1517f124-f01d-303d-99a8-199359dadefd.roa
Signing time:             Tue 14 Nov 2023 13:36:01 +0000
ROA not before:           Tue 14 Nov 2023 13:36:01 +0000
ROA not after:            Mon 12 Feb 2024 13:36:01 +0000
asID:                     64267
IP address blocks:        172.252.10.0/24 maxlen: 24
                          172.252.233.0/24 maxlen: 24
                          173.245.93.0/24 maxlen: 24
                          192.177.33.0/24 maxlen: 24
                          192.177.40.0/24 maxlen: 24
                          192.177.56.0/24 maxlen: 24
                          192.177.69.0/24 maxlen: 24
                          192.177.82.0/24 maxlen: 24
                          192.177.98.0/24 maxlen: 24
                          192.177.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e2:c2:1e:30:3d:59:69:e8:49:d3:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 13:36:01 2023 GMT
            Not After : Feb 12 13:36:01 2024 GMT
        Subject: CN=c5874816-225a-4ef5-9725-f6f16e0d97bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:dc:3c:48:45:a0:f0:7e:7e:c2:53:72:f1:
                    18:2f:ce:1f:1f:a0:48:e1:52:1a:8f:54:47:25:ed:
                    de:73:a5:20:53:05:27:7a:77:93:65:19:f8:1e:f4:
                    d1:c6:33:ae:0d:fc:35:1e:cd:0d:ed:42:d5:82:5a:
                    72:08:3b:56:e5:15:c9:c8:db:a9:cc:7e:83:21:51:
                    04:0a:14:a8:be:c7:8d:7c:e6:c2:6f:01:d5:2f:87:
                    b7:36:04:82:0a:b6:7b:23:05:6e:9d:75:08:4c:60:
                    1f:8d:ca:ff:c7:e1:f4:f6:21:7b:3c:0a:b4:b2:0d:
                    02:75:be:47:d3:a3:d7:82:12:ca:59:94:63:9b:61:
                    62:45:be:ee:b6:2b:ea:c1:95:03:5d:30:97:09:ca:
                    f3:5a:a2:14:5d:d7:1e:e0:d8:65:ce:28:83:a6:2b:
                    e5:fa:f9:9e:35:81:93:29:90:f9:d1:23:61:95:e7:
                    1c:00:a9:73:75:92:b3:fa:a0:21:b2:60:97:62:ea:
                    90:f1:d4:6d:ab:e6:65:84:52:6b:57:07:43:16:62:
                    af:23:7a:7a:0b:b2:10:32:d5:40:ce:69:85:6b:a2:
                    ce:7c:5c:cd:bd:3e:18:5a:c2:9f:6c:29:1c:3a:06:
                    ee:07:49:8d:83:5f:10:1f:d0:18:45:62:ef:3c:35:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:EA:73:48:5A:B5:B4:91:D1:47:AE:8D:D6:18:FA:20:12:21:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1517f124-f01d-303d-99a8-199359dadefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.10.0/24
                  172.252.233.0/24
                  173.245.93.0/24
                  192.177.33.0/24
                  192.177.40.0/24
                  192.177.56.0/24
                  192.177.69.0/24
                  192.177.82.0/24
                  192.177.98.0/24
                  192.177.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:dd:85:85:93:05:70:54:72:47:79:71:c9:f7:29:9a:12:
         9d:66:79:bc:ef:c5:e3:5e:65:5f:a3:65:15:8e:94:67:b5:ca:
         09:3d:2d:d9:a3:70:62:5e:c5:ba:11:4f:87:25:c7:c9:2e:69:
         af:a6:dc:13:cd:e4:38:58:f4:de:87:e6:e7:01:1a:be:c7:97:
         29:a0:a4:63:ce:5f:4e:68:da:8d:d8:c1:83:16:5d:2e:b2:76:
         cd:dc:c3:59:7f:c1:48:5c:58:2b:04:3d:d5:f1:96:59:2d:4c:
         7f:9f:8e:27:e4:aa:59:b2:6b:c6:cb:1a:53:71:94:fb:d6:7f:
         be:14:18:68:76:52:70:64:92:3e:b2:d1:73:29:76:db:5f:c9:
         c7:39:8f:ee:cb:3f:7d:d5:32:9e:46:95:2b:24:c6:1d:05:43:
         db:14:1b:de:40:6f:c2:29:2e:0a:d3:14:b4:a2:db:f3:22:2e:
         19:46:09:81:e9:39:4c:c3:d7:ca:f0:e4:c1:24:16:48:90:73:
         4c:03:06:d0:90:ad:c0:af:2d:93:6b:ed:51:88:02:f1:d2:70:
         27:92:7c:bd:7d:17:7e:18:a4:5d:59:9c:50:fe:26:94:4e:7b:
         b9:31:37:79:1a:f5:5e:93:11:cf:27:a9:47:90:49:a4:80:06:
         20:f0:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 17:20:07 2023 by rpki-client on console-ams.rpki-client.org