Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77424618-c557-3923-a389-eaf1b8843550.roa
File:                     77424618-c557-3923-a389-eaf1b8843550.roa (raw, json)
Hash identifier:          LEa37C8lbEGsuDVwsWQyBcxd2A55VbFDQlj5wrkZbzA=
Subject key identifier:   7C:B0:73:95:20:B0:1E:8B:D5:A0:4F:3A:FE:83:39:54:86:B5:A7:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E94C6686D93615C94780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77424618-c557-3923-a389-eaf1b8843550.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     44477
IP address blocks:        104.164.91.0/24 maxlen: 24
                          104.164.137.0/24 maxlen: 24
                          104.165.48.0/24 maxlen: 24
                          104.165.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e9:4c:66:86:d9:36:15:c9:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=998ccdaa-0ef5-4510-93d7-a0e4fa783d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:5a:d1:75:ba:29:b0:1f:42:27:1f:97:75:
                    c2:ea:f9:1f:06:d8:76:6b:c8:6d:ac:0d:9d:9f:a2:
                    54:7e:9f:2d:cb:e6:24:95:78:b6:f9:47:62:d3:5a:
                    e2:c6:7a:23:1f:0b:07:72:0a:07:64:ca:be:88:af:
                    46:f1:6a:f7:17:13:9d:09:04:f4:5f:a4:07:8d:ae:
                    33:ef:a6:a5:3a:84:77:39:97:2e:00:0c:ef:a2:71:
                    a4:a9:70:65:7d:20:d7:52:46:e3:24:1f:e0:51:d6:
                    9a:3e:6d:3c:df:a0:7e:59:cc:6b:f3:05:a5:84:fd:
                    38:6f:31:9c:8c:2f:4e:19:58:3c:00:8e:97:63:3f:
                    19:a5:af:56:b7:58:4d:df:01:99:33:86:ae:2e:d9:
                    cb:74:9d:4f:e2:42:6b:6c:35:d0:fd:f8:8a:2d:74:
                    51:7c:fa:4f:47:27:63:2f:83:b8:6b:3f:dd:49:b3:
                    4a:45:2b:23:f5:81:4a:24:ba:4e:18:b9:d9:05:41:
                    d5:a2:2d:b9:8c:61:1d:a8:cd:df:3a:7f:04:8b:ab:
                    b2:50:19:36:a4:82:08:7a:21:d2:02:0a:a5:71:49:
                    9e:7d:9b:34:bc:db:2d:1f:44:2f:b7:4c:a9:bb:bf:
                    cc:e4:d2:80:66:41:54:71:40:e3:94:d3:cf:73:b1:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:73:95:20:B0:1E:8B:D5:A0:4F:3A:FE:83:39:54:86:B5:A7:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77424618-c557-3923-a389-eaf1b8843550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.91.0/24
                  104.164.137.0/24
                  104.165.48.0/24
                  104.165.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:ad:ef:e7:31:5f:3f:a7:30:3f:db:46:63:f6:43:2e:74:
         67:c9:ce:90:c3:de:da:e4:a1:cb:bc:d1:72:b7:11:87:0a:11:
         b0:08:0b:32:b0:6a:f2:f1:f0:8d:4c:7a:42:83:c8:b3:33:15:
         52:db:79:13:05:83:3c:7b:ba:82:83:d1:af:87:96:49:5b:2d:
         49:62:f9:13:62:f3:8a:20:b6:de:9b:69:5f:0e:d3:1f:d2:31:
         e1:c1:52:a3:46:96:f1:80:0c:59:5b:73:6e:89:17:c0:ef:d1:
         9e:9a:e7:c7:47:11:80:5b:8b:f3:15:2f:2b:95:db:7a:da:87:
         89:dd:61:02:d8:e5:2d:fc:c9:0f:50:50:72:17:31:54:6a:a0:
         09:73:c7:aa:16:01:48:eb:7e:0e:05:42:ab:dc:ed:22:7e:94:
         12:fb:fc:7e:8b:2f:25:34:ab:f6:f2:7b:c1:11:bd:6e:64:87:
         ac:b7:c2:d2:46:62:d7:8b:10:9b:14:de:b9:0f:44:d8:84:86:
         f7:23:2a:00:26:76:80:f4:12:9e:e6:fe:4c:d8:ab:ec:8f:a3:
         7c:45:6c:62:c6:98:ec:c5:59:f3:9e:61:83:ff:59:b1:35:50:
         91:e7:c8:6d:8a:ec:63:c3:6e:55:38:18:8f:77:24:88:1c:39:
         6b:4a:9b:28
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEdp0OlMZobZNhXJR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
OTk4Y2NkYWEtMGVmNS00NTEwLTkzZDctYTBlNGZhNzgzZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhJa0XW6KbAfQicfl3XC6vkfBth2a8htrA2d
n6JUfp8ty+YklXi2+Udi01rixnojHwsHcgoHZMq+iK9G8Wr3FxOdCQT0X6QHja4z
76alOoR3OZcuAAzvonGkqXBlfSDXUkbjJB/gUdaaPm0836B+Wcxr8wWlhP04bzGc
jC9OGVg8AI6XYz8Zpa9Wt1hN3wGZM4auLtnLdJ1P4kJrbDXQ/fiKLXRRfPpPRydj
L4O4az/dSbNKRSsj9YFKJLpOGLnZBUHVoi25jGEdqM3fOn8Ei6uyUBk2pIIIeiHS
AgqlcUmefZs0vNstH0Qvt0ypu7/M5NKAZkFUcUDjlNPPc7EydQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFHywc5UgsB6L1aBPOv6DOVSGtacDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzc0MjQ2MTgtYzU1Ny0z
OTIzLWEzODktZWFmMWI4ODQzNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaKRbAwQA
aKSJAwQAaKUwAwQAaKU9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACULre/nMV8/pzA/20Zj9kMudGfJzpDD
3trkocu80XK3EYcKEbAICzKwavLx8I1MekKDyLMzFVLbeRMFgzx7uoKD0a+Hlklb
LUli+RNi84ogtt6baV8O0x/SMeHBUqNGlvGADFlbc26JF8Dv0Z6a58dHEYBbi/MV
LyuV23rah4ndYQLY5S38yQ9QUHIXMVRqoAlzx6oWAUjrfg4FQqvc7SJ+lBL7/H6L
LyU0q/bye8ERvW5kh6y3wtJGYteLEJsU3rkPRNiEhvcjKgAmdoD0Ep7m/kzYq+yP
o3xFbGLGmOzFWfOeYYP/WbE1UJHnyG2K7GPDblU4GI93JIgcOWtKmyg=
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:25 2024 by rpki-client on console-ams.rpki-client.org