Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dd34293-3ea9-3765-b4f8-53576becb3d7.roa
File:                     3dd34293-3ea9-3765-b4f8-53576becb3d7.roa (raw, json)
Hash identifier:          drAk/hbSwsDTyhxS/KlskDKBZAaVbAr29BtHlpPIZhc=
Subject key identifier:   CD:05:1A:AF:4D:50:DB:D3:CD:98:5C:9C:62:FC:31:A1:55:B4:5D:13
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584684E4B0371FC39D0E30F4B240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dd34293-3ea9-3765-b4f8-53576becb3d7.roa
Signing time:             Sat 13 Jul 2024 01:00:24 +0000
ROA not before:           Sat 13 Jul 2024 01:00:24 +0000
ROA not after:            Fri 11 Oct 2024 01:00:24 +0000
asID:                     209854
IP address blocks:        104.253.72.0/24 maxlen: 24
                          104.253.202.0/24 maxlen: 24
                          104.253.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 21:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:e4:b0:37:1f:c3:9d:0e:30:f4:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 13 01:00:24 2024 GMT
            Not After : Oct 11 01:00:24 2024 GMT
        Subject: CN=2c14ab22-c018-43bd-ab98-58efee7f1f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:dc:66:2d:49:8e:59:60:2a:38:67:b0:c4:
                    ad:23:40:ad:9d:eb:ab:b7:49:94:49:15:c8:07:e4:
                    ea:43:44:60:9d:77:89:da:cd:02:bb:49:59:ce:66:
                    73:03:81:81:ec:e4:65:b5:8a:e4:53:bf:18:0d:67:
                    9c:6d:b1:1a:1b:62:35:18:b4:0c:aa:dd:be:c8:c6:
                    92:ac:39:39:4e:88:ee:d9:8c:66:c0:2f:20:2b:b9:
                    c4:ac:b5:82:5a:da:f6:fb:47:f7:ba:fa:88:16:56:
                    6a:e4:20:da:ab:c0:3f:c7:cc:f6:76:c0:59:3b:28:
                    e6:03:67:f7:88:16:2a:d1:66:73:cc:f7:bf:e7:a2:
                    57:0b:57:d9:98:77:98:e3:c2:54:b2:db:86:b2:6c:
                    85:ff:32:a7:da:b1:89:84:3d:a7:1e:c3:b8:21:c8:
                    47:ae:fb:7a:f5:df:c1:37:94:98:49:17:d3:67:0e:
                    df:d2:35:e6:94:22:24:5d:1f:e2:4e:54:5f:70:60:
                    d3:31:12:b7:28:c3:dc:6e:d9:9d:ab:3e:ad:96:54:
                    e1:46:84:a8:e7:48:67:3e:de:1f:6a:3c:55:35:0e:
                    b1:41:55:3e:c0:41:f2:1b:55:e5:74:c7:35:98:67:
                    ba:a7:e3:d8:e4:b2:4b:48:bd:fc:de:df:09:55:56:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:05:1A:AF:4D:50:DB:D3:CD:98:5C:9C:62:FC:31:A1:55:B4:5D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dd34293-3ea9-3765-b4f8-53576becb3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.72.0/24
                  104.253.202.0/24
                  104.253.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:77:84:d0:5c:bb:a4:44:27:07:4d:ab:cc:75:e3:a8:3c:14:
         2a:e5:dc:5c:bb:89:1b:3f:5c:bb:2a:79:71:43:49:ec:57:2a:
         3f:f0:0e:90:5b:3e:29:5f:56:38:3b:a1:1f:86:52:df:b9:2d:
         2f:06:68:37:8d:ba:c1:b4:1b:18:3e:ef:c1:f9:24:96:64:04:
         7f:1e:94:98:d6:7d:be:ab:56:2d:67:c2:6a:41:3d:83:17:1d:
         b1:4b:28:94:91:06:1f:73:35:95:9f:33:81:b7:40:15:ad:49:
         0b:b7:ac:fb:03:c5:1d:39:8b:f5:a9:9f:f5:60:c6:ff:9e:59:
         9b:bc:22:ed:d5:cb:40:30:a3:67:9e:14:c4:99:cb:24:d6:c0:
         d8:55:ff:04:55:f5:29:be:79:eb:3e:05:66:02:93:1d:8c:38:
         bc:92:a2:79:8f:83:64:f5:64:b9:c4:93:42:15:b5:8a:2f:7d:
         78:7d:65:8b:7b:d7:ae:69:67:d0:e7:25:11:84:c1:22:cd:e9:
         99:56:a7:61:f4:0f:5f:c4:bb:48:5f:8f:84:c0:e8:d0:9b:b5:
         1b:b7:90:af:d4:80:43:e4:62:c5:00:fe:13:cd:be:21:d1:f7:
         fe:10:99:96:e9:1f:90:c4:32:fb:e5:44:a0:75:07:fe:8c:4f:
         29:37:4f:51
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEaE5LA3H8OdDjD0skAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDcxMzAxMDAyNFoXDTI0MTAxMTAxMDAyNFowLzEtMCsGA1UEAxMk
MmMxNGFiMjItYzAxOC00M2JkLWFiOTgtNThlZmVlN2YxZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNrcZi1JjllgKjhnsMStI0Ctneurt0mUSRXI
B+TqQ0RgnXeJ2s0Cu0lZzmZzA4GB7ORltYrkU78YDWecbbEaG2I1GLQMqt2+yMaS
rDk5Toju2YxmwC8gK7nErLWCWtr2+0f3uvqIFlZq5CDaq8A/x8z2dsBZOyjmA2f3
iBYq0WZzzPe/56JXC1fZmHeY48JUstuGsmyF/zKn2rGJhD2nHsO4IchHrvt69d/B
N5SYSRfTZw7f0jXmlCIkXR/iTlRfcGDTMRK3KMPcbtmdqz6tllThRoSo50hnPt4f
ajxVNQ6xQVU+wEHyG1XldMc1mGe6p+PY5LJLSL383t8JVVY4JwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFM0FGq9NUNvTzZhcnGL8MaFVtF0TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RkMzQyOTMtM2VhOS0z
NzY1LWI0ZjgtNTM1NzZiZWNiM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaP1IAwQA
aP3KAwQAaP3XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACB3hNBcu6REJwdNq8x146g8FCrl3Fy7iRs/XLsq
eXFDSexXKj/wDpBbPilfVjg7oR+GUt+5LS8GaDeNusG0Gxg+78H5JJZkBH8elJjW
fb6rVi1nwmpBPYMXHbFLKJSRBh9zNZWfM4G3QBWtSQu3rPsDxR05i/Wpn/Vgxv+e
WZu8Iu3Vy0Awo2eeFMSZyyTWwNhV/wRV9Sm+ees+BWYCkx2MOLySonmPg2T1ZLnE
k0IVtYovfXh9ZYt7165pZ9DnJRGEwSLN6ZlWp2H0D1/Eu0hfj4TA6NCbtRu3kK/U
gEPkYsUA/hPNviHR9/4QmZbpH5DEMvvlRKB1B/6MTyk3T1E=
-----END CERTIFICATE-----
Generated at Fri Sep 6 23:12:44 2024 by rpki-client on console-ams.rpki-client.org