Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3639cf38-2a92-3147-9bb0-fd989cd59960.roa
File:                     3639cf38-2a92-3147-9bb0-fd989cd59960.roa (raw, json)
Hash identifier:          BT4ej7AdsJPXPmMSsQsIHfkB7FWmKVOhD/TJ7693yto=
Subject key identifier:   7F:34:F4:4D:B1:C5:89:55:73:E8:E1:28:49:4D:FA:B6:27:47:ED:96
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E971CAD6071237C7B000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3639cf38-2a92-3147-9bb0-fd989cd59960.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     44477
IP address blocks:        104.252.216.0/24 maxlen: 24
                          104.252.217.0/24 maxlen: 24
                          104.253.76.0/24 maxlen: 24
                          104.253.95.0/24 maxlen: 24
                          104.253.112.0/24 maxlen: 24
                          104.253.198.0/24 maxlen: 24
                          104.253.199.0/24 maxlen: 24
                          104.253.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 12:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e9:71:ca:d6:07:12:37:c7:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=90504a1b-6882-4d61-a76f-2f5c5470659e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:8e:be:1f:ad:57:dc:0c:23:1a:57:f4:b3:
                    cf:97:5c:a6:77:91:bd:29:5c:81:37:12:91:ef:2e:
                    64:7d:13:ce:85:3b:bb:a5:5e:2a:e0:b2:2c:af:69:
                    c8:ca:5c:a0:06:6d:70:90:5c:a6:aa:a0:a7:c9:47:
                    87:68:e6:c9:d4:68:7f:68:eb:7d:47:82:f9:db:83:
                    a9:cc:bb:fa:f2:33:bf:6b:b0:da:2d:46:47:18:e6:
                    62:cd:1b:7f:99:30:43:c0:78:92:70:5b:b5:07:f9:
                    92:62:19:41:6e:31:35:66:82:ba:3c:df:dc:0e:6d:
                    79:f6:f9:89:1b:a2:b6:46:32:15:48:06:49:9f:21:
                    b5:fa:48:8e:eb:fa:50:7f:5f:1e:0a:56:01:11:1e:
                    f2:32:a6:1c:3b:ce:a3:8f:d0:60:88:eb:de:82:13:
                    ad:0d:69:70:b0:f0:5a:3a:71:62:ac:09:e1:c7:d7:
                    89:bf:01:2e:aa:30:4a:e7:16:33:66:36:9c:16:4b:
                    33:b0:62:c2:2f:c9:64:3a:c2:dc:c3:26:06:0d:f1:
                    91:01:ba:cb:b0:46:bc:e2:4f:56:b3:d1:17:c6:9a:
                    8b:c4:08:a4:ae:b8:4c:39:67:67:f6:a5:5c:17:e9:
                    b6:a2:1a:73:d1:49:4f:20:ca:96:2b:f0:30:fa:a7:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:F4:4D:B1:C5:89:55:73:E8:E1:28:49:4D:FA:B6:27:47:ED:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3639cf38-2a92-3147-9bb0-fd989cd59960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.216.0/23
                  104.253.76.0/24
                  104.253.95.0/24
                  104.253.112.0/24
                  104.253.198.0/23
                  104.253.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:77:a7:96:14:79:74:e3:21:4c:f8:48:12:d4:eb:8b:c8:82:
         fd:ca:0c:79:1b:a5:28:46:a1:4c:b5:3d:fb:75:9c:4b:29:84:
         1e:3a:4f:8c:d5:a8:5a:0e:2b:04:67:74:94:e7:e1:70:c7:28:
         63:3e:4e:15:db:8a:0b:b1:c3:f7:bd:09:19:8a:b0:f6:f4:cd:
         b6:f1:6d:be:51:fd:50:00:d7:09:8c:b5:29:4e:89:cb:09:fc:
         19:4a:72:14:cc:19:58:78:db:6b:fe:02:43:89:ed:ba:97:6a:
         84:1e:a4:1e:e0:70:54:77:a2:68:f8:c1:3c:30:86:a6:a2:38:
         f6:ba:0d:31:a9:15:6f:5c:da:c4:4b:43:df:00:19:83:73:32:
         6e:86:aa:eb:5a:ae:f0:49:e6:29:bb:62:3c:e6:ed:ca:e9:6a:
         54:57:ed:7d:cc:86:b9:ff:0c:4e:5d:93:bb:4b:1c:51:fb:bb:
         83:6c:a8:fd:57:89:56:9a:25:27:bc:7e:11:8e:e8:7c:27:3e:
         e4:01:d2:47:d1:4d:c8:5b:7c:ad:e4:96:38:ff:44:1b:e8:7e:
         b5:29:52:3d:8e:b3:fc:e9:d2:f9:b6:d2:27:08:f5:ec:86:d7:
         36:3c:99:f1:e6:75:fb:16:36:37:6c:a1:9c:6c:45:04:63:c9:
         c8:93:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 14:14:25 2024 by rpki-client on console-fra.rpki-client.org