Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/832c6f40-a0af-33d6-b306-469137f46fea.roa
File:                     832c6f40-a0af-33d6-b306-469137f46fea.roa (raw, json)
Hash identifier:          /DYPbQ2Lic/VfTLxxjAQchcOGB7tOZCr0Pn1xGo5hZ0=
Subject key identifier:   26:67:4C:14:1B:63:27:30:B4:6A:94:EB:ED:5D:BB:57:C2:13:7D:80
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AAE1D8C2A3D6F065C6CC7180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/832c6f40-a0af-33d6-b306-469137f46fea.roa
Signing time:             Thu 25 Apr 2024 22:48:33 +0000
ROA not before:           Thu 25 Apr 2024 22:48:33 +0000
ROA not after:            Wed 24 Jul 2024 22:48:33 +0000
asID:                     397373
IP address blocks:        107.165.160.0/24 maxlen: 24
                          107.165.167.0/24 maxlen: 24
                          107.165.220.0/24 maxlen: 24
                          107.165.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 02:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:e1:d8:c2:a3:d6:f0:65:c6:cc:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:48:33 2024 GMT
            Not After : Jul 24 22:48:33 2024 GMT
        Subject: CN=6e6cf8f6-dd37-4541-8806-bd83fd81533e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:a4:ef:d1:56:8b:0b:5e:fd:dd:09:84:97:
                    e9:c0:51:e1:9e:3b:68:c9:23:92:50:77:c7:3c:92:
                    1e:bb:9a:29:7c:31:1e:31:2a:be:61:a4:ec:43:b3:
                    9d:06:26:db:46:ba:83:fc:a1:a3:85:a9:f1:95:c7:
                    f6:36:94:e4:d4:cb:63:18:f7:51:0f:a9:82:e2:7f:
                    4e:3c:17:db:1a:67:a6:b1:d8:c2:d9:0e:75:85:c4:
                    23:76:a2:72:95:a6:84:c0:0d:1e:b7:f7:4a:77:e7:
                    70:db:88:f5:a1:82:f5:8c:33:6b:94:85:b8:48:4d:
                    89:c6:53:94:ee:5d:b8:52:3d:2b:c7:0f:93:70:c8:
                    a7:8a:e3:fc:5a:b8:c3:3e:78:45:00:e9:1f:8b:f9:
                    89:53:e0:9b:d9:ec:ad:6d:f5:61:e2:fa:1d:32:cf:
                    e5:5b:1c:e0:46:77:1b:24:ef:be:2f:8f:c2:70:2f:
                    20:3b:99:a1:1c:5b:a5:ec:2f:55:cf:43:8e:9e:6e:
                    45:55:ca:a3:9b:26:b1:ca:c0:a7:2b:f1:4f:db:aa:
                    64:49:c7:56:bc:aa:87:b1:0f:ad:44:08:0f:ce:e7:
                    d4:4d:89:11:bb:8d:9f:d9:41:e4:53:15:37:b0:38:
                    cb:52:35:49:18:c6:30:cf:b3:33:32:32:8f:d5:ca:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:4C:14:1B:63:27:30:B4:6A:94:EB:ED:5D:BB:57:C2:13:7D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/832c6f40-a0af-33d6-b306-469137f46fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.165.160.0/24
                  107.165.167.0/24
                  107.165.220.0/24
                  107.165.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:01:bf:d8:78:04:53:79:cc:d6:9c:20:26:ad:43:cf:7a:
         bb:49:ec:e0:dc:02:49:9a:a8:9b:af:40:37:64:31:04:73:27:
         fc:e8:88:7b:15:17:67:4c:a7:1d:b2:44:51:9a:b4:9e:7c:9e:
         5b:0b:87:89:7e:87:b1:6f:56:cf:22:30:77:42:fa:4a:40:be:
         ac:59:96:6a:93:51:a0:69:f5:43:aa:ca:be:b3:41:5b:1f:60:
         58:f9:46:f0:f3:9e:f1:de:f5:30:f5:88:41:52:3f:54:d5:79:
         8f:d5:3b:64:eb:c5:2d:64:a7:8e:45:49:3c:73:71:98:89:74:
         11:1a:1c:5c:41:6a:ff:7e:0c:83:b7:7c:73:a2:e2:e5:27:94:
         77:b7:b4:af:e5:13:6e:31:4a:30:29:13:fe:ff:46:c0:e1:b2:
         66:cb:32:1e:3e:1d:60:c2:01:56:0b:ab:f2:4c:a2:04:a7:df:
         25:2f:81:02:bd:39:70:25:8a:92:78:1b:8b:1b:3f:27:61:da:
         d4:cf:56:11:bd:6b:c7:13:7e:43:ab:77:4c:1e:d9:a9:51:ac:
         d4:9e:39:dc:ec:23:22:ee:06:e6:a7:98:4a:c3:c0:ba:51:d4:
         5f:6c:b9:d9:d4:85:03:5d:c6:2e:6c:c5:3f:35:3e:a8:3e:c8:
         d6:46:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:26 2024 by rpki-client on console-fra.rpki-client.org