Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/415ff94d-9285-3a20-bfc0-641bb5f2eb59.roa
File:                     415ff94d-9285-3a20-bfc0-641bb5f2eb59.roa (raw, json)
Hash identifier:          i7uV+f3ROLF2lPUI/5j7B5uHhpKmkGEOvuGOUiXVgqM=
Subject key identifier:   B0:DE:0A:5E:FB:58:5A:D5:1D:2C:DA:11:F9:66:F3:1A:3E:B3:E0:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285844C2250A17E3F380C3B4DF3B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/415ff94d-9285-3a20-bfc0-641bb5f2eb59.roa
Signing time:             Fri 02 Feb 2024 14:00:31 +0000
ROA not before:           Fri 02 Feb 2024 14:00:31 +0000
ROA not after:            Thu 02 May 2024 13:00:31 +0000
asID:                     64267
IP address blocks:        205.164.46.0/24 maxlen: 24
                          209.73.147.0/24 maxlen: 24
                          205.164.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 13:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c2:25:0a:17:e3:f3:80:c3:b4:df:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  2 14:00:31 2024 GMT
            Not After : May  2 13:00:31 2024 GMT
        Subject: CN=bd8b3951-0880-43e6-806a-c0d761b2fee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:90:e8:6d:70:52:05:2d:14:a2:e5:2d:ef:
                    5b:06:1b:e6:3a:9f:bf:36:6b:6a:ff:6b:d4:75:6c:
                    56:28:7f:93:82:6c:5a:db:61:bb:7e:c6:7d:04:f5:
                    20:4d:98:77:3c:94:42:73:b3:f0:30:f0:b9:f8:c1:
                    dd:88:24:38:06:f9:f0:d0:86:0c:cb:c4:c5:86:be:
                    14:11:f1:37:49:99:95:e0:7a:e4:40:6c:b4:42:67:
                    dc:36:b2:7a:2e:9b:c7:e9:e0:47:4b:3b:58:44:c8:
                    c2:55:ec:c3:2a:96:8e:c1:23:53:a9:69:ab:cf:a7:
                    d1:7e:8b:75:9c:04:48:56:42:45:ee:2e:6c:f3:6f:
                    08:b1:8d:9e:16:98:e1:62:b0:db:da:3d:1a:e5:e8:
                    c6:c0:3f:1e:9d:ef:a5:34:ff:47:cb:4e:fc:6a:df:
                    24:87:3b:1b:bd:0f:50:e8:62:04:4c:53:36:e9:f1:
                    de:07:19:b1:dd:b5:ea:d7:51:45:7d:de:c4:5b:e0:
                    c0:d0:21:7b:72:07:4f:8a:d1:6f:ac:a1:1b:80:74:
                    04:07:e1:c1:22:8b:e6:f3:ef:07:de:fd:be:a7:b9:
                    38:c5:ef:ab:fd:05:0e:0c:63:69:ed:f3:51:39:22:
                    53:53:8f:50:b0:b4:ca:0c:ab:5e:c7:f8:c5:c8:83:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:0A:5E:FB:58:5A:D5:1D:2C:DA:11:F9:66:F3:1A:3E:B3:E0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/415ff94d-9285-3a20-bfc0-641bb5f2eb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.164.11.0/24
                  205.164.46.0/24
                  209.73.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:49:d4:b0:66:ce:bc:1e:a8:8b:db:de:a7:2a:af:87:6f:
         6a:70:96:78:8a:fe:fe:41:4c:c7:74:57:93:74:87:bb:ce:ff:
         c2:cf:ac:46:77:02:2b:1f:5f:29:8d:cf:69:cb:af:d3:14:f9:
         dd:5b:db:1b:2b:44:cc:99:cf:07:34:02:af:bf:9e:9e:ef:86:
         d6:f1:5a:56:d4:69:84:b5:ce:d0:e6:ac:50:27:4e:b2:2b:7b:
         69:51:89:c3:33:99:06:13:81:28:e5:33:1a:48:cf:2e:15:5e:
         03:c3:b6:fc:bd:b2:41:bb:df:af:9d:ff:5f:a9:dc:55:ae:46:
         40:de:8e:97:4e:ca:42:3c:94:9b:95:34:de:0d:4b:eb:12:0a:
         16:e3:30:b5:d4:ad:7e:d2:3e:57:f7:fd:e8:35:ed:59:74:f9:
         c2:3c:f7:97:9f:ea:36:21:cf:c1:ee:f5:29:fa:a4:3f:62:ac:
         e1:bb:9a:2b:ed:2f:7c:e7:5b:48:92:25:0b:78:a2:1b:70:a1:
         f0:23:c4:81:b9:58:23:1d:23:54:04:19:d1:94:db:39:25:93:
         ef:67:f4:7a:1b:74:b0:d8:30:e6:f9:8b:29:8b:61:3d:ef:c9:
         c2:e2:3c:59:c5:b2:8f:c2:c0:6e:bf:a6:eb:40:14:5f:d8:49:
         42:57:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:33 2024 by rpki-client on console-ams.rpki-client.org