Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48c66351-5f62-3782-a29a-9128cfc28224.roa
File:                     48c66351-5f62-3782-a29a-9128cfc28224.roa (raw, json)
Hash identifier:          DrekxB8Asx2vl6vflanTFizxCkDGcbqybUJYXK9Lb0s=
Subject key identifier:   27:B4:63:81:A6:3F:DF:62:BF:9F:89:67:F0:EF:A6:CD:5C:A9:6D:D8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845A7C96F831203822E7DF57718
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48c66351-5f62-3782-a29a-9128cfc28224.roa
Signing time:             Wed 24 Apr 2024 20:11:56 +0000
ROA not before:           Wed 24 Apr 2024 20:11:56 +0000
ROA not after:            Tue 23 Jul 2024 20:11:56 +0000
asID:                     3561
IP address blocks:        142.252.6.0/24 maxlen: 24
                          142.252.21.0/24 maxlen: 24
                          142.252.31.0/24 maxlen: 24
                          142.252.55.0/24 maxlen: 24
                          142.252.116.0/24 maxlen: 24
                          142.252.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 May 2024 17:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:c9:6f:83:12:03:82:2e:7d:f5:77:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 20:11:56 2024 GMT
            Not After : Jul 23 20:11:56 2024 GMT
        Subject: CN=201179e8-b54b-46d9-9d9e-f1b027a9e544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:d1:7f:7c:c3:4d:4d:17:09:c1:4a:e3:57:
                    5c:11:2f:de:5e:f7:dd:3b:b1:1f:0d:06:12:00:42:
                    25:cd:a2:67:bd:97:35:3a:d7:fd:7b:bb:6d:2f:56:
                    f2:e0:ab:7a:f7:03:a5:51:1a:80:ec:77:d5:c8:6e:
                    73:c4:f2:7b:3a:1c:2c:a5:fb:f0:3c:23:1b:1e:fd:
                    21:78:49:8e:a0:c6:99:1e:23:9c:4c:9c:88:f0:97:
                    ff:85:0a:2b:fc:ed:0d:d4:c6:21:0f:ed:ae:0c:18:
                    7a:0b:f2:d0:78:c3:b3:f1:6e:5a:2f:72:89:1a:bb:
                    ec:22:1b:8b:bc:ec:c0:8b:73:8f:5d:59:cb:ce:b4:
                    25:52:13:76:fd:3a:ef:8d:17:33:f3:51:e6:5a:7a:
                    65:c7:60:85:90:4f:ce:aa:7f:80:b2:20:5d:41:58:
                    e5:d5:78:6d:e0:97:49:29:c2:b2:02:b8:04:63:f4:
                    24:cc:97:19:bc:46:91:b7:35:8e:0b:44:4b:67:11:
                    58:1f:90:3f:53:3d:df:a7:e7:7b:41:50:d7:35:6c:
                    cb:23:c4:17:e5:c9:ee:f3:ac:3c:57:05:3a:83:cd:
                    26:f6:b2:be:66:ca:6a:f5:94:39:2d:c3:ee:e0:db:
                    a6:64:be:2b:21:67:60:5a:be:f6:4b:3f:83:70:25:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:63:81:A6:3F:DF:62:BF:9F:89:67:F0:EF:A6:CD:5C:A9:6D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48c66351-5f62-3782-a29a-9128cfc28224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.6.0/24
                  142.252.21.0/24
                  142.252.31.0/24
                  142.252.55.0/24
                  142.252.116.0/24
                  142.252.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:15:0f:a6:c8:a1:3f:cd:ac:79:ce:ad:89:de:72:55:cd:
         42:48:0d:ba:52:11:f4:32:a1:27:6f:33:d6:21:2a:d9:61:d2:
         ba:a7:f6:76:df:b7:70:4c:ae:20:16:ea:2b:66:bf:65:70:c7:
         9e:b6:dd:00:9d:d4:3e:03:c1:dd:a2:33:cd:de:a3:87:cd:2b:
         11:8d:b1:8e:bd:9c:87:c9:7c:eb:de:29:5b:59:3e:6a:96:5b:
         30:a3:23:56:42:f8:73:79:57:0a:49:ac:bc:24:02:d3:27:8a:
         ec:9d:37:e2:d3:13:aa:34:b3:bc:9b:da:fe:bd:4c:83:ca:a9:
         6d:8b:d2:44:86:d4:c7:d9:cb:b9:e7:a3:de:a9:ac:ce:68:24:
         08:b0:04:94:ef:74:31:a3:9e:00:3d:38:be:c2:d4:e8:c4:3a:
         8e:f0:09:b4:15:4e:ee:ef:cf:4b:fc:fa:01:69:93:0b:01:b4:
         0b:65:79:b6:0b:88:c5:7b:ad:68:88:db:55:88:a1:4d:cc:76:
         6f:c0:8f:e2:70:26:3c:29:bb:d6:f7:a3:09:63:bf:43:78:4e:
         ba:bf:bc:b7:f7:77:1e:7c:8d:eb:03:10:4b:65:da:0f:0f:55:
         ca:5e:99:b4:c4:36:f7:5c:55:29:af:16:78:12:b7:a7:e0:9f:
         42:a9:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org