Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77cb7029-3b25-3401-a64e-f2ab8eca918a.roa
File:                     77cb7029-3b25-3401-a64e-f2ab8eca918a.roa (raw, json)
Hash identifier:          TMXxSVRqOHGq52HEytbkyaSnbseLaAPOywKcjgdGooI=
Subject key identifier:   00:BE:B6:F4:98:04:C2:27:FE:07:E6:EB:2B:73:AF:B4:4C:CC:61:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586B42CC7A9A5FE0155F74200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77cb7029-3b25-3401-a64e-f2ab8eca918a.roa
Signing time:             Fri 12 Apr 2024 23:47:25 +0000
ROA not before:           Fri 12 Apr 2024 23:47:25 +0000
ROA not after:            Thu 11 Jul 2024 23:47:25 +0000
asID:                     44477
IP address blocks:        107.164.81.0/24 maxlen: 24
                          104.164.209.0/24 maxlen: 24
                          104.164.205.0/24 maxlen: 24
                          172.120.25.0/24 maxlen: 24
                          172.252.125.0/24 maxlen: 24
                          172.252.161.0/24 maxlen: 24
                          172.252.158.0/24 maxlen: 24
                          107.186.157.0/24 maxlen: 24
                          107.186.86.0/24 maxlen: 24
                          107.186.194.0/24 maxlen: 24
                          107.165.168.0/24 maxlen: 24
                          107.164.217.0/24 maxlen: 24
                          107.165.131.0/24 maxlen: 24
                          107.165.132.0/24 maxlen: 24
                          107.165.209.0/24 maxlen: 24
                          107.165.208.0/24 maxlen: 24
                          107.165.217.0/24 maxlen: 24
                          104.253.165.0/24 maxlen: 24
                          104.164.148.0/24 maxlen: 24
                          107.164.214.0/24 maxlen: 24
                          104.164.113.0/24 maxlen: 24
                          104.164.32.0/24 maxlen: 24
                          104.164.36.0/24 maxlen: 24
                          104.164.47.0/24 maxlen: 24
                          104.164.198.0/24 maxlen: 24
                          104.164.176.0/24 maxlen: 24
                          104.164.153.0/24 maxlen: 24
                          104.164.165.0/24 maxlen: 24
                          104.164.169.0/24 maxlen: 24
                          104.164.144.0/24 maxlen: 24
                          104.165.236.0/24 maxlen: 24
                          104.165.166.0/24 maxlen: 24
                          104.165.175.0/24 maxlen: 24
                          104.165.206.0/24 maxlen: 24
                          104.253.158.0/24 maxlen: 24
                          104.253.147.0/24 maxlen: 24
                          104.252.233.0/24 maxlen: 24
                          104.252.2.0/24 maxlen: 24
                          107.164.122.0/24 maxlen: 24
                          107.164.99.0/24 maxlen: 24
                          107.164.108.0/24 maxlen: 24
                          107.164.110.0/24 maxlen: 24
                          107.164.92.0/24 maxlen: 24
                          107.164.84.0/24 maxlen: 24
                          107.164.90.0/24 maxlen: 24
                          107.164.119.0/24 maxlen: 24
                          107.164.114.0/24 maxlen: 24
                          107.164.27.0/24 maxlen: 24
                          107.164.23.0/24 maxlen: 24
                          107.164.63.0/24 maxlen: 24
                          107.164.62.0/24 maxlen: 24
                          107.164.52.0/24 maxlen: 24
                          107.164.80.0/24 maxlen: 24
                          107.164.64.0/24 maxlen: 24
                          107.164.134.0/24 maxlen: 24
                          107.164.126.0/24 maxlen: 24
                          107.164.163.0/24 maxlen: 24
                          107.164.155.0/24 maxlen: 24
                          107.164.165.0/24 maxlen: 24
                          107.164.183.0/24 maxlen: 24
                          107.164.204.0/24 maxlen: 24
                          107.164.193.0/24 maxlen: 24
                          107.164.192.0/24 maxlen: 24
                          107.164.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 22:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:b4:2c:c7:a9:a5:fe:01:55:f7:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 23:47:25 2024 GMT
            Not After : Jul 11 23:47:25 2024 GMT
        Subject: CN=0bbce75a-578e-4650-8448-1be50c61d6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:a0:8f:a0:23:65:47:5d:89:09:76:3b:47:
                    8a:37:cc:cd:b1:3b:0f:16:c0:f8:81:9e:f5:32:05:
                    26:7a:8e:5c:b8:ab:33:82:b5:51:5c:c1:cc:c9:15:
                    8b:66:01:48:5c:c1:c9:85:b7:ca:2e:d3:d9:d2:d9:
                    df:44:e2:70:28:aa:04:04:56:85:09:3d:d9:e7:68:
                    1a:c8:e7:f8:ba:9d:b9:70:8c:2b:da:e1:2c:27:43:
                    e6:24:81:a5:5a:96:fa:16:f4:0e:71:c5:d6:9a:94:
                    2a:b7:47:4b:52:fb:64:f9:c9:cb:e8:50:bc:fb:1e:
                    f8:1a:3f:80:70:1b:9b:ca:34:fd:71:a7:d5:f4:ed:
                    7c:76:3e:40:4c:97:49:90:b7:7d:b5:93:85:e0:17:
                    e2:e3:94:40:4e:2c:f0:17:d9:b2:b8:34:71:75:3b:
                    27:b7:7b:44:60:57:6b:11:a0:c8:25:2e:08:87:60:
                    4c:80:9d:13:f4:8b:dd:fc:46:6a:b4:47:05:e7:bd:
                    85:cc:fb:97:99:5e:cb:83:50:4a:18:48:33:31:aa:
                    02:1e:a3:cc:46:91:93:bc:05:f8:9c:c2:e7:2e:d1:
                    9e:62:a9:19:8a:64:17:86:e5:88:ea:e3:c1:09:34:
                    15:ae:c0:af:3e:a5:8b:a4:a1:b8:ba:79:b2:af:e8:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:B6:F4:98:04:C2:27:FE:07:E6:EB:2B:73:AF:B4:4C:CC:61:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77cb7029-3b25-3401-a64e-f2ab8eca918a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.32.0/24
                  104.164.36.0/24
                  104.164.47.0/24
                  104.164.113.0/24
                  104.164.144.0/24
                  104.164.148.0/24
                  104.164.153.0/24
                  104.164.165.0/24
                  104.164.169.0/24
                  104.164.176.0/24
                  104.164.198.0/24
                  104.164.205.0/24
                  104.164.209.0/24
                  104.165.166.0/24
                  104.165.175.0/24
                  104.165.206.0/24
                  104.165.236.0/24
                  104.252.2.0/24
                  104.252.233.0/24
                  104.253.147.0/24
                  104.253.158.0/24
                  104.253.165.0/24
                  107.164.23.0/24
                  107.164.27.0/24
                  107.164.52.0/24
                  107.164.62.0-107.164.64.255
                  107.164.80.0/23
                  107.164.84.0/24
                  107.164.90.0/24
                  107.164.92.0/24
                  107.164.99.0/24
                  107.164.108.0/24
                  107.164.110.0/24
                  107.164.114.0/24
                  107.164.119.0/24
                  107.164.122.0/24
                  107.164.126.0/24
                  107.164.134.0/24
                  107.164.155.0/24
                  107.164.163.0/24
                  107.164.165.0/24
                  107.164.183.0/24
                  107.164.192.0/23
                  107.164.196.0/24
                  107.164.204.0/24
                  107.164.214.0/24
                  107.164.217.0/24
                  107.165.131.0-107.165.132.255
                  107.165.168.0/24
                  107.165.208.0/23
                  107.165.217.0/24
                  107.186.86.0/24
                  107.186.157.0/24
                  107.186.194.0/24
                  172.120.25.0/24
                  172.252.125.0/24
                  172.252.158.0/24
                  172.252.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:08:73:36:08:db:fe:5b:bc:30:1f:73:85:26:c1:35:4b:
         ce:cf:99:ca:0b:e2:a7:63:53:01:15:52:78:14:c0:9f:6d:60:
         23:47:3a:bf:d4:31:25:30:fa:9e:28:eb:0b:be:fa:23:3a:41:
         fd:1c:e3:6d:44:84:bc:6c:e6:e3:79:9d:5e:52:3c:f5:89:fb:
         f1:45:b3:5c:41:f8:b8:53:a9:1c:08:de:67:12:22:ae:d7:7a:
         92:83:11:b5:63:4e:e2:9c:3c:48:e6:d9:49:2f:c3:e7:71:31:
         7b:ee:37:4d:21:3a:8a:b5:73:a9:ec:97:28:b3:15:45:cf:88:
         69:69:7c:cb:e3:97:be:ed:73:99:2b:47:c9:f2:c5:72:35:80:
         b1:1f:11:c3:b8:8e:cb:3e:71:20:5f:2e:f4:09:c8:09:96:1f:
         ff:f2:b7:aa:f3:73:fe:1c:09:3d:8c:2f:63:ef:a0:4d:01:5c:
         5b:d8:9d:60:dc:eb:4c:9d:a2:1c:bb:50:07:29:61:29:6b:6d:
         29:7c:c6:c1:4a:48:87:93:c6:02:72:d6:15:3b:ac:8a:4d:c0:
         31:1c:6f:cf:e2:90:f6:12:bc:0e:b8:8d:22:af:9c:c1:f0:b2:
         8d:30:20:1a:d5:c7:f6:b7:22:13:e6:a3:9c:38:7e:f7:54:75:
         20:64:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:52:03 2024 by rpki-client on console-ams.rpki-client.org