Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/177857e9-df5d-3d29-909d-188deefc785e.roa
File:                     177857e9-df5d-3d29-909d-188deefc785e.roa (raw, json)
Hash identifier:          Ao+4HctVvRU8KXNVbNMw/ZInTYBbxGPWuYci4DNgs2s=
Subject key identifier:   55:08:99:47:97:EF:D5:E4:AB:B3:FC:99:72:ED:64:84:5A:66:80:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847643B7B333E54B96358007D8F
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/177857e9-df5d-3d29-909d-188deefc785e.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     3257
IP address blocks:        142.252.38.0/24 maxlen: 24
                          142.252.60.0/22 maxlen: 24
                          142.252.89.0/24 maxlen: 24
                          142.252.117.0/24 maxlen: 24
                          142.252.138.0/24 maxlen: 24
                          142.252.148.0/22 maxlen: 24
                          142.252.192.0/22 maxlen: 24
                          142.252.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 10:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:7b:33:3e:54:b9:63:58:00:7d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=75d365b9-ed99-45a7-911d-b2ae5e034123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:16:da:e4:d4:b1:66:44:bf:cf:d3:1b:53:
                    82:3b:fc:b7:35:ca:a5:8f:2c:3e:44:93:46:33:06:
                    f9:a6:8a:15:49:5f:84:fe:ba:b3:c7:5f:26:96:9f:
                    b3:f0:77:0b:2c:14:50:37:88:fa:16:d7:dd:b7:2b:
                    09:58:3f:66:e0:34:b2:a7:26:69:7e:18:c3:9e:bd:
                    eb:10:e6:87:21:e1:9a:01:09:e2:53:73:41:e0:e4:
                    87:f7:f0:be:96:42:d6:d0:40:36:a8:2f:64:ea:fd:
                    47:8c:a8:df:b8:d2:37:1f:e3:71:35:40:14:ad:57:
                    5c:4e:fb:07:0e:87:8b:10:d5:d8:46:1f:04:53:9e:
                    92:f4:06:d4:6a:d5:c4:f1:3b:50:cd:1e:f4:54:ef:
                    d0:98:45:f5:8a:a4:80:93:c5:4c:0e:92:ad:31:c4:
                    01:89:59:7a:9a:b9:f5:b8:c8:5a:29:b7:68:00:75:
                    2d:6d:89:c7:51:bd:90:f9:37:6b:92:e2:da:06:db:
                    aa:9d:9d:b6:5e:b5:87:aa:5b:78:ec:f5:46:2b:6a:
                    f8:23:bc:8a:7e:f2:fe:ec:5c:0f:5c:b9:c6:01:25:
                    9f:5c:20:f4:77:f9:9e:c1:53:92:3c:56:01:89:3e:
                    ac:68:36:eb:a7:08:1b:d1:66:7b:e1:1e:f8:dc:1a:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:99:47:97:EF:D5:E4:AB:B3:FC:99:72:ED:64:84:5A:66:80:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/177857e9-df5d-3d29-909d-188deefc785e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.38.0/24
                  142.252.60.0/22
                  142.252.89.0/24
                  142.252.117.0/24
                  142.252.138.0/24
                  142.252.148.0/22
                  142.252.192.0/22
                  142.252.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:33:1f:c6:77:b7:9a:24:27:49:7e:4a:36:0f:84:77:55:
         19:50:84:6b:5b:ff:6a:4e:da:df:54:17:d6:2e:5d:5c:80:2f:
         eb:47:65:7b:8c:2a:16:75:0a:6f:bf:0e:31:33:53:b4:07:0f:
         11:4d:fb:d2:7e:84:91:b4:cc:5f:df:e2:32:fe:57:cc:3d:aa:
         2b:93:af:eb:7d:a1:05:98:d2:68:b1:9e:9c:80:79:50:04:65:
         c7:f4:47:43:b4:fb:70:f9:19:bf:5f:9b:59:6d:3d:18:c0:8f:
         d9:4f:ff:2d:19:eb:b3:32:f0:03:8a:0e:13:6b:62:17:02:1c:
         ba:92:f3:ed:d7:9d:51:15:97:d6:21:31:83:80:3c:a3:5c:6e:
         d3:e6:1a:3a:62:38:0c:40:c9:a4:3b:f5:b6:61:ab:84:cd:8d:
         21:53:99:2e:f5:c4:80:10:3e:a7:20:f8:e6:4a:72:b8:29:35:
         46:31:a3:c3:90:40:a6:0a:af:e5:9a:8c:4b:0a:84:68:0b:59:
         ed:e6:a5:24:77:5d:5f:f6:5f:83:f6:d5:d1:6b:dd:ee:a1:1f:
         00:65:f2:7f:6a:7a:64:1f:cc:5b:0a:37:aa:08:6c:94:dc:ee:
         89:77:ca:9e:88:cd:99:5b:2a:e7:be:b4:db:28:1b:f6:75:8f:
         57:86:f7:a5
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEdkO3szPlS5Y1gAfY8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk
NzVkMzY1YjktZWQ5OS00NWE3LTkxMWQtYjJhZTVlMDM0MTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFcW2uTUsWZEv8/TG1OCO/y3Ncqljyw+RJNG
Mwb5pooVSV+E/rqzx18mlp+z8HcLLBRQN4j6FtfdtysJWD9m4DSypyZpfhjDnr3r
EOaHIeGaAQniU3NB4OSH9/C+lkLW0EA2qC9k6v1HjKjfuNI3H+NxNUAUrVdcTvsH
DoeLENXYRh8EU56S9AbUatXE8TtQzR70VO/QmEX1iqSAk8VMDpKtMcQBiVl6mrn1
uMhaKbdoAHUtbYnHUb2Q+TdrkuLaBtuqnZ22XrWHqlt47PVGK2r4I7yKfvL+7FwP
XLnGASWfXCD0d/mewVOSPFYBiT6saDbrpwgb0WZ74R743Bo0IwIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFFUImUeX79Xkq7P8mXLtZIRaZoAhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTc3ODU3ZTktZGY1ZC0z
ZDI5LTkwOWQtMTg4ZGVlZmM3ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAjvwmAwQC
jvw8AwQAjvxZAwQAjvx1AwQAjvyKAwQCjvyUAwQCjvzAAwQAjvzRMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ADJqMx/Gd7eaJCdJfko2D4R3VRlQhGtb/2pO2t9UF9YuXVyAL+tHZXuMKhZ1Cm+/
DjEzU7QHDxFN+9J+hJG0zF/f4jL+V8w9qiuTr+t9oQWY0mixnpyAeVAEZcf0R0O0
+3D5Gb9fm1ltPRjAj9lP/y0Z67My8AOKDhNrYhcCHLqS8+3XnVEVl9YhMYOAPKNc
btPmGjpiOAxAyaQ79bZhq4TNjSFTmS71xIAQPqcg+OZKcrgpNUYxo8OQQKYKr+Wa
jEsKhGgLWe3mpSR3XV/2X4P21dFr3e6hHwBl8n9qemQfzFsKN6oIbJTc7ol3yp6I
zZlbKue+tNsoG/Z1j1eG96U=
-----END CERTIFICATE-----
Generated at Thu Nov 14 13:01:31 2024 by rpki-client on console-ams.rpki-client.org