Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26d4c4ee-a669-36e0-bda0-4a6892688a86.roa
File:                     26d4c4ee-a669-36e0-bda0-4a6892688a86.roa (raw, json)
Hash identifier:          EkTpCVyjrosgXMm2cKxIUXxq+9qzBk5QHa8+ohrs9qM=
Subject key identifier:   37:E4:8C:2F:C7:20:DF:92:5F:74:FF:BA:40:8F:15:86:B9:0F:EE:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E9BC0AAD0C7FBCBCB6D4
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26d4c4ee-a669-36e0-bda0-4a6892688a86.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     44893
IP address blocks:        142.252.95.0/24 maxlen: 24
                          142.252.143.0/24 maxlen: 24
                          142.252.163.0/24 maxlen: 24
                          142.252.165.0/24 maxlen: 24
                          142.252.166.0/24 maxlen: 24
                          142.252.169.0/24 maxlen: 24
                          142.252.176.0/24 maxlen: 24
                          142.252.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 12:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e9:bc:0a:ad:0c:7f:bc:bc:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=bd44c13e-e0ab-4628-a7d8-5a6827177e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:73:0b:00:00:31:3e:43:99:c3:33:c8:27:
                    32:8b:d7:5d:d4:98:59:03:83:0d:f3:5b:d5:5f:53:
                    e8:2c:cf:a4:81:5a:16:c7:01:fb:99:25:7e:f9:a4:
                    0e:f3:5e:c7:84:6c:d2:7d:05:1f:39:52:3e:fb:27:
                    bd:09:e9:55:ac:22:05:ab:65:30:d0:aa:bd:ed:42:
                    1f:56:33:29:32:68:58:49:1c:56:55:0c:ed:8f:70:
                    7b:7c:88:23:45:0e:a2:f6:1c:1f:70:a9:62:4d:ba:
                    c7:f1:96:43:5b:e3:a8:2a:a6:58:4a:45:5c:ef:e2:
                    ed:54:9d:a1:69:e1:7f:18:c2:96:cb:c3:e3:86:67:
                    05:b1:27:aa:04:1a:65:22:dd:69:c6:f0:62:13:41:
                    a1:38:07:0b:95:28:ef:a8:da:4f:65:b1:45:ef:97:
                    55:0e:dd:c9:8f:78:f8:95:91:02:cd:f2:2d:fa:97:
                    40:20:3b:1b:08:ea:8b:f1:0f:5e:8c:1b:5b:4c:ac:
                    92:aa:4e:48:96:fc:e8:88:87:21:25:2e:94:8d:1d:
                    d0:ba:98:4b:6a:49:98:76:d6:22:c2:da:a2:78:5e:
                    23:e4:3c:9a:4b:15:6f:18:fc:59:cd:e7:5a:a8:f2:
                    5b:ef:c9:e9:eb:79:d9:5a:f6:da:b2:89:34:dc:c0:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:8C:2F:C7:20:DF:92:5F:74:FF:BA:40:8F:15:86:B9:0F:EE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26d4c4ee-a669-36e0-bda0-4a6892688a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.95.0/24
                  142.252.143.0/24
                  142.252.163.0/24
                  142.252.165.0-142.252.166.255
                  142.252.169.0/24
                  142.252.176.0/24
                  142.252.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:6e:4f:0f:3a:88:13:56:0c:21:d5:71:71:3c:b8:0e:34:
         72:9a:11:c0:04:79:28:a2:aa:27:0f:f5:80:b0:3f:69:c2:ff:
         51:94:f9:09:ab:87:25:b9:f8:c5:cb:fc:2f:2f:b1:c8:1a:d3:
         84:7a:0c:f8:72:d9:3f:ae:05:96:1f:9f:f6:5e:67:7a:7a:1f:
         4b:58:e8:d5:6b:8b:66:f6:26:a9:85:12:e9:95:24:47:f3:e2:
         02:39:2c:e8:b1:f4:78:d0:ad:aa:72:55:fe:a7:0f:32:8e:e4:
         78:2b:de:02:af:87:8e:e0:46:88:88:2c:8e:2f:10:d4:c2:77:
         24:66:7e:9f:92:73:08:51:1e:cd:52:6e:a0:42:53:ff:0a:5e:
         67:b8:1d:a5:15:00:2d:7f:62:57:6e:1b:9e:74:ff:f5:f4:7d:
         4f:04:0b:45:e1:72:22:12:ac:67:83:14:04:ef:88:92:de:bf:
         89:02:53:09:99:33:66:24:62:e9:39:d4:b1:bf:a8:46:0b:c5:
         05:0b:6e:47:51:43:9a:b6:dc:84:74:94:a8:90:32:52:1b:cf:
         5d:45:f8:61:e7:cb:a1:6b:ec:ba:02:d5:6b:c8:90:7a:0e:b1:
         69:98:76:fe:ba:a1:d4:ba:a4:5a:54:59:f8:f9:5a:86:eb:71:
         d8:6c:74:16
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEdp0Om8Cq0Mf7y8ttQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
YmQ0NGMxM2UtZTBhYi00NjI4LWE3ZDgtNWE2ODI3MTc3ZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJBzCwAAMT5DmcMzyCcyi9dd1JhZA4MN81vV
X1PoLM+kgVoWxwH7mSV++aQO817HhGzSfQUfOVI++ye9CelVrCIFq2Uw0Kq97UIf
VjMpMmhYSRxWVQztj3B7fIgjRQ6i9hwfcKliTbrH8ZZDW+OoKqZYSkVc7+LtVJ2h
aeF/GMKWy8PjhmcFsSeqBBplIt1pxvBiE0GhOAcLlSjvqNpPZbFF75dVDt3Jj3j4
lZECzfIt+pdAIDsbCOqL8Q9ejBtbTKySqk5IlvzoiIchJS6UjR3QuphLakmYdtYi
wtqieF4j5DyaSxVvGPxZzedaqPJb78np63nZWvbasok03MCY7QIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFDfkjC/HIN+SX3T/ukCPFYa5D+7jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjZkNGM0ZWUtYTY2OS0z
NmUwLWJkYTAtNGE2ODkyNjg4YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAjvxfAwQA
jvyPAwQAjvyjMAwDBACO/KUDBACO/KYDBACO/KkDBACO/LADBACO/LYwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAds9uTw86iBNWDCHVcXE8uA40cpoRwAR5KKKqJw/1gLA/acL/UZT5CauHJbn4
xcv8Ly+xyBrThHoM+HLZP64Flh+f9l5nenofS1jo1WuLZvYmqYUS6ZUkR/PiAjks
6LH0eNCtqnJV/qcPMo7keCveAq+HjuBGiIgsji8Q1MJ3JGZ+n5JzCFEezVJuoEJT
/wpeZ7gdpRUALX9iV24bnnT/9fR9TwQLReFyIhKsZ4MUBO+Ikt6/iQJTCZkzZiRi
6TnUsb+oRgvFBQtuR1FDmrbchHSUqJAyUhvPXUX4YefLoWvsugLVa8iQeg6xaZh2
/rqh1LqkWlRZ+Plahutx2Gx0Fg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:25 2024 by rpki-client on console-ams.rpki-client.org