Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/783fa6f4-aa1a-3d97-9501-081d74d88777.roa
File:                     783fa6f4-aa1a-3d97-9501-081d74d88777.roa (raw, json)
Hash identifier:          KxKJv8T2Hbea1CBA8pgdU0eth6sT80D+Jhpli6YXw7k=
Subject key identifier:   B9:DC:87:C1:77:14:8D:7E:EF:6F:28:61:C3:41:8D:3C:48:19:69:8D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845867C656732C6EB21F71C886E
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/783fa6f4-aa1a-3d97-9501-081d74d88777.roa
Signing time:             Fri 12 Apr 2024 21:55:02 +0000
ROA not before:           Fri 12 Apr 2024 21:55:02 +0000
ROA not after:            Thu 11 Jul 2024 21:55:02 +0000
asID:                     18779
IP address blocks:        142.252.0.0/16 maxlen: 24
                          104.252.0.0/15 maxlen: 24
                          107.164.0.0/15 maxlen: 24
                          107.186.0.0/15 maxlen: 24
                          172.120.0.0/15 maxlen: 24
                          172.252.0.0/16 maxlen: 24
                          173.245.64.0/19 maxlen: 24
                          192.177.0.0/16 maxlen: 24
                          205.164.0.0/18 maxlen: 24
                          209.73.128.0/19 maxlen: 24
                          216.172.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 17:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:7c:65:67:32:c6:eb:21:f7:1c:88:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 21:55:02 2024 GMT
            Not After : Jul 11 21:55:02 2024 GMT
        Subject: CN=cb336d70-e51c-4382-9117-d9ebb25d33e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:7a:e0:bf:11:1f:43:b2:95:3a:2f:a6:51:
                    e3:9a:57:2f:af:69:c6:a6:53:6b:5e:41:3f:4b:ca:
                    bb:8c:1e:64:d2:de:ef:a2:34:60:ae:e1:7c:57:bd:
                    03:83:47:64:e6:a5:8e:ea:66:29:ef:4e:1d:9a:4d:
                    ec:b3:4d:74:bb:18:45:7e:fe:6a:db:06:9c:92:3c:
                    b7:e0:10:13:88:de:e4:3a:68:0c:47:0c:e3:70:91:
                    cc:66:d7:6c:47:72:d2:34:79:8f:5c:7e:2e:cb:b8:
                    96:65:f6:ef:f1:c0:b6:f7:cb:22:3a:28:10:c2:83:
                    27:7d:e8:63:cb:19:23:1f:ae:58:6d:71:fc:56:17:
                    a5:9a:25:d5:0d:4b:79:c6:f5:d4:9e:af:0d:98:bc:
                    0c:c3:d4:a9:62:94:42:1f:81:57:11:42:3d:3b:4c:
                    75:5f:d8:1a:49:50:5d:41:4c:17:39:33:bd:92:57:
                    be:34:5f:9b:f9:6e:cc:2e:8b:6f:66:99:b1:6f:43:
                    e2:99:c7:f5:5b:8f:e7:b1:06:97:8f:6a:b2:8a:91:
                    c7:d6:41:95:43:da:8b:77:51:43:b1:48:69:97:e6:
                    79:e7:f4:1a:25:24:e7:c1:97:f1:d9:27:b5:5e:13:
                    81:09:d0:f6:54:0c:70:5b:eb:f8:96:22:37:f5:26:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:87:C1:77:14:8D:7E:EF:6F:28:61:C3:41:8D:3C:48:19:69:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/783fa6f4-aa1a-3d97-9501-081d74d88777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.0.0/15
                  107.164.0.0/15
                  107.186.0.0/15
                  142.252.0.0/16
                  172.120.0.0/15
                  172.252.0.0/16
                  173.245.64.0/19
                  192.177.0.0/16
                  205.164.0.0/18
                  209.73.128.0/19
                  216.172.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1c:d8:91:e2:87:d9:7d:6e:b4:75:1f:53:fd:11:a4:ea:8a:
         af:7b:85:c6:41:6c:bf:76:55:8b:c4:73:95:4b:98:73:7a:52:
         cd:dd:e3:78:cc:67:b5:09:21:0c:b3:a7:2e:5d:3c:e8:61:40:
         63:19:90:7b:41:51:68:83:6c:88:41:30:66:fc:8f:e9:e5:ca:
         0a:bb:c5:64:bd:d2:7e:f2:b4:a3:dc:6b:a6:e4:60:6b:72:76:
         c5:08:a5:e5:1a:4c:5b:53:d4:7a:a0:a4:d3:3a:a0:4f:2e:6c:
         12:46:a0:7d:6e:f6:e2:89:d5:cd:f3:e5:96:4e:0d:0c:13:51:
         cd:64:ec:a1:d8:3e:ca:07:af:71:52:77:51:b6:73:33:30:22:
         87:c4:47:2f:5f:a4:a2:cc:e7:04:c4:d1:dd:8f:6f:af:aa:d3:
         2b:14:1d:b1:fb:ae:5c:d0:f1:5e:c0:16:bb:a8:0c:de:bd:0a:
         35:14:06:9a:16:c8:dc:8d:8d:dc:e4:8c:0e:46:73:c7:e0:a3:
         3a:51:ed:98:b6:bb:17:42:1e:33:87:61:3d:d8:33:e4:a4:7d:
         40:ed:0e:d7:55:28:83:ba:00:c6:73:b8:8b:f6:54:1f:dd:a3:
         3e:61:82:d1:b0:c1:e6:00:7c:32:c2:5e:d3:e7:fb:81:0a:9f:
         1a:c8:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:48:47 2024 by rpki-client on console-fra.rpki-client.org