Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa
File:                     44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa (raw, json)
Hash identifier:          ggeSQjynkSz3yjsJEw8LfeUfLG83P0TxC+5K9DUhMLI=
Subject key identifier:   57:A5:73:68:39:41:B5:61:CC:57:45:95:1E:7C:3A:57:33:85:F5:14
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586B23610DD9C0FFF146AAA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa
Signing time:             Fri 12 Apr 2024 23:43:28 +0000
ROA not before:           Fri 12 Apr 2024 23:43:28 +0000
ROA not after:            Thu 11 Jul 2024 23:43:28 +0000
asID:                     3561
IP address blocks:        172.120.22.0/24 maxlen: 24
                          172.252.153.0/24 maxlen: 24
                          107.164.9.0/24 maxlen: 24
                          104.253.130.0/24 maxlen: 24
                          104.253.43.0/24 maxlen: 24
                          104.253.41.0/24 maxlen: 24
                          104.253.36.0/24 maxlen: 24
                          107.164.167.0/24 maxlen: 24
                          142.252.21.0/24 maxlen: 24
                          142.252.6.0/24 maxlen: 24
                          172.252.165.0/24 maxlen: 24
                          107.164.13.0/24 maxlen: 24
                          172.121.17.0/24 maxlen: 24
                          172.121.131.0/24 maxlen: 24
                          172.121.28.0/24 maxlen: 24
                          172.121.6.0/24 maxlen: 24
                          172.120.24.0/24 maxlen: 24
                          107.164.103.0/24 maxlen: 24
                          142.252.31.0/24 maxlen: 24
                          172.120.6.0/24 maxlen: 24
                          142.252.184.0/24 maxlen: 24
                          142.252.55.0/24 maxlen: 24
                          142.252.116.0/24 maxlen: 24
                          172.252.186.0/24 maxlen: 24
                          172.252.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 20:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:b2:36:10:dd:9c:0f:ff:14:6a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 23:43:28 2024 GMT
            Not After : Jul 11 23:43:28 2024 GMT
        Subject: CN=60fe1cc2-ad9d-4d42-a5cd-66d0caf0f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:0a:40:ee:0b:d6:1d:32:c1:fe:9b:9b:74:
                    8f:48:92:ae:60:d5:6c:02:41:91:2a:fd:2f:e2:46:
                    cc:89:54:15:e5:0f:e4:0a:e6:20:33:f7:8b:c1:88:
                    ab:32:06:a9:db:fa:14:d1:60:2b:f6:6c:f0:25:e3:
                    42:83:2a:3a:c1:7d:7e:a5:17:af:bb:31:9d:2d:4f:
                    bf:fc:a4:90:c4:f0:4c:e1:8b:7d:eb:e6:73:ea:fb:
                    e3:90:54:4b:6b:81:a5:5f:99:df:15:6c:b0:60:bb:
                    68:f0:19:e7:94:2d:20:3f:40:00:92:fc:45:c6:22:
                    64:f8:24:f8:4c:1b:1c:6c:dd:bf:07:61:55:3e:57:
                    63:f9:41:d8:56:d4:f9:66:bb:29:7a:94:64:fa:c3:
                    2d:23:44:58:9c:70:06:a0:3f:f6:68:d8:06:33:8b:
                    0b:0d:a4:bd:06:8f:9d:cc:e8:4b:f8:72:a1:c8:75:
                    47:9d:c9:fb:1b:ef:d9:b6:0e:a8:83:d5:6e:56:d6:
                    40:e2:3f:59:5c:63:23:56:89:87:a1:20:88:71:85:
                    d6:c5:73:66:7c:03:2e:20:ce:f5:67:10:16:b9:6a:
                    53:ef:59:74:ff:68:10:fe:45:88:b1:c3:4d:0b:39:
                    dd:cb:2e:0c:95:eb:02:ee:38:b3:8d:0e:33:11:90:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:73:68:39:41:B5:61:CC:57:45:95:1E:7C:3A:57:33:85:F5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.36.0/24
                  104.253.41.0/24
                  104.253.43.0/24
                  104.253.130.0/24
                  107.164.9.0/24
                  107.164.13.0/24
                  107.164.103.0/24
                  107.164.167.0/24
                  142.252.6.0/24
                  142.252.21.0/24
                  142.252.31.0/24
                  142.252.55.0/24
                  142.252.116.0/24
                  142.252.184.0/24
                  172.120.6.0/24
                  172.120.22.0/24
                  172.120.24.0/24
                  172.121.6.0/24
                  172.121.17.0/24
                  172.121.28.0/24
                  172.121.131.0/24
                  172.252.153.0/24
                  172.252.165.0/24
                  172.252.184.0/24
                  172.252.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:35:fb:d5:b1:7f:67:80:32:d2:b0:0b:50:96:6f:b9:63:
         fe:68:a5:47:ab:e7:20:7e:1b:b0:c1:49:55:b4:e7:c2:7d:86:
         a2:d8:db:b4:2f:f5:31:0e:89:8e:e1:35:b0:39:f7:b4:6a:74:
         c8:03:a0:17:2d:e8:6e:f7:d9:0c:35:ce:ea:27:19:03:82:6e:
         32:cc:7e:59:16:e7:e8:d4:35:96:bb:ed:d4:a7:37:59:a4:25:
         31:51:be:20:ea:90:c9:99:18:c8:a6:52:d5:06:47:63:c4:19:
         9f:3f:a8:77:8b:d6:00:7f:f5:de:c3:51:a7:ab:83:5a:db:e8:
         c5:7b:fa:05:2f:04:a2:53:20:d4:7f:ce:86:4c:1d:d1:b7:9b:
         59:a9:4e:48:c6:70:f8:32:39:61:ea:57:db:ec:35:7d:2a:ce:
         de:d0:a5:e4:ca:0e:8d:ec:72:d8:22:9e:c2:0d:95:83:66:89:
         29:42:23:f1:52:b6:80:27:bc:22:7a:62:81:79:ff:23:60:f5:
         25:9a:dc:94:e9:48:bd:e7:09:9e:19:f7:86:28:e3:63:59:56:
         4d:1c:b6:22:7e:b9:04:01:a3:da:30:87:8d:ef:0f:5a:45:bc:
         48:b8:aa:63:f4:c4:8c:87:40:1a:2d:ee:07:55:40:e2:52:05:
         d7:0e:e7:bb
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWEWGsjYQ3ZwP/xRqqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQxMjIzNDMyOFoXDTI0MDcxMTIzNDMyOFowLzEtMCsGA1UEAxMk
NjBmZTFjYzItYWQ5ZC00ZDQyLWE1Y2QtNjZkMGNhZjBmMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhecKQO4L1h0ywf6bm3SPSJKuYNVsAkGRKv0v
4kbMiVQV5Q/kCuYgM/eLwYirMgap2/oU0WAr9mzwJeNCgyo6wX1+pRevuzGdLU+/
/KSQxPBM4Yt96+Zz6vvjkFRLa4GlX5nfFWywYLto8BnnlC0gP0AAkvxFxiJk+CT4
TBscbN2/B2FVPldj+UHYVtT5ZrspepRk+sMtI0RYnHAGoD/2aNgGM4sLDaS9Bo+d
zOhL+HKhyHVHncn7G+/Ztg6og9VuVtZA4j9ZXGMjVomHoSCIcYXWxXNmfAMuIM71
ZxAWuWpT71l0/2gQ/kWIscNNCzndyy4MlesC7jizjQ4zEZC8WQIDAQABo4ID6jCC
A+YwHQYDVR0OBBYEFFelc2g5QbVhzFdFlR58OlczhfUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDQ3NzdlZTAtNjNjOS0z
YjI2LWJiM2ItZjFhZDVmZTI0MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBABo
/SQDBABo/SkDBABo/SsDBABo/YIDBABrpAkDBABrpA0DBABrpGcDBABrpKcDBACO
/AYDBACO/BUDBACO/B8DBACO/DcDBACO/HQDBACO/LgDBACseAYDBACseBYDBACs
eBgDBACseQYDBACseREDBACseRwDBACseYMDBACs/JkDBACs/KUDBACs/LgDBACs
/LowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAHds1+9Wxf2eAMtKwC1CWb7lj/milR6vnIH4bsMFJVbTnwn2G
otjbtC/1MQ6JjuE1sDn3tGp0yAOgFy3obvfZDDXO6icZA4JuMsx+WRbn6NQ1lrvt
1Kc3WaQlMVG+IOqQyZkYyKZS1QZHY8QZnz+od4vWAH/13sNRp6uDWtvoxXv6BS8E
olMg1H/Ohkwd0bebWalOSMZw+DI5YepX2+w1fSrO3tCl5MoOjexy2CKewg2Vg2aJ
KUIj8VK2gCe8InpigXn/I2D1JZrclOlIvecJnhn3hijjY1lWTRy2In65BAGj2jCH
je8PWkW8SLiqY/TEjIdAGi3uB1VA4lIF1w7nuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org