Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa
File:                     8f17557f-53b3-3663-bcf7-6cdac667fad4.roa (raw, json)
Hash identifier:          6Oc5LyHavLG14KX/kzixdYDUz1ELMvFU5ayCQ166XdY=
Subject key identifier:   51:D3:30:EC:38:41:04:36:B0:F6:D7:11:BD:E7:AF:A1:3F:10:A1:8C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858458C6DD698A23813EE1EBE2500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     397630
IP address blocks:        172.252.231.0/24 maxlen: 24
                          172.252.224.0/24 maxlen: 24
                          192.177.93.0/24 maxlen: 24
                          172.252.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 06:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d6:98:a2:38:13:ee:1e:be:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=bd47a4fc-f9c6-4eb6-922f-af588cbcc983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:8e:09:51:6e:6b:3f:cf:9a:04:24:d5:2d:
                    0a:c8:87:df:fd:f5:0a:20:5c:b7:be:1b:60:64:12:
                    42:45:27:de:6c:99:5d:cd:6e:cc:30:16:2e:f4:33:
                    e4:e2:ee:0f:41:36:d7:86:ff:f3:89:02:7e:6c:14:
                    c7:54:28:4f:a9:72:86:28:c0:fa:3b:f7:d6:f8:29:
                    86:8d:4e:c2:e3:6b:8f:9d:f5:60:84:8f:43:d4:1f:
                    9e:56:b6:b0:c6:f3:86:c8:63:bc:31:9d:1c:86:af:
                    0b:3a:6a:2d:df:d2:eb:37:3f:c1:bd:1a:11:58:9d:
                    b1:c2:eb:53:a1:8d:db:38:83:2a:2a:87:e9:a7:71:
                    19:8b:f2:44:19:69:e4:d6:d5:e5:e6:13:54:87:0b:
                    1b:2f:f4:66:ff:e7:69:62:b5:b4:5b:93:e5:f6:a5:
                    83:fe:fa:91:8e:87:83:fe:cd:72:86:7d:9b:d7:d4:
                    f4:7e:70:8c:c4:62:3c:72:42:f5:be:c7:d1:de:56:
                    ad:8a:b0:32:18:5d:24:97:b0:16:fb:9c:2e:7d:0e:
                    ab:ad:82:5c:a1:14:c0:7b:56:b8:ec:6d:58:55:bd:
                    76:fd:d9:24:f0:62:9c:8f:17:be:95:58:40:9b:c6:
                    2d:18:16:56:e4:a7:ad:64:0e:fc:b9:f1:06:39:b7:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:30:EC:38:41:04:36:B0:F6:D7:11:BD:E7:AF:A1:3F:10:A1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.1.0/24
                  172.252.224.0/24
                  172.252.231.0/24
                  192.177.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:25:9f:e4:d3:5c:6d:80:ed:32:2e:9e:85:aa:9c:0e:45:de:
         23:9a:16:dc:a8:63:62:4f:e6:94:0c:d8:dc:62:70:d7:14:e6:
         f1:6c:9a:b8:1c:e6:b3:93:0d:60:a8:03:c4:27:c9:c4:cf:b1:
         bd:eb:ad:af:25:c6:32:f4:d4:8b:da:54:ce:e5:b5:f1:8d:57:
         ef:45:a7:38:ba:7e:a6:17:43:1d:0b:38:e9:67:9a:98:c3:05:
         c4:40:4b:23:91:0f:87:dc:64:27:9d:d6:71:9a:f1:ef:3b:1d:
         a8:8f:16:77:1d:34:8e:ec:8d:b7:5f:44:18:a2:34:85:b1:1d:
         0b:e0:dd:94:26:fd:71:c0:b6:aa:03:d8:66:e9:24:9f:b3:95:
         af:02:17:43:7a:1d:13:37:d7:3d:68:d5:af:ac:0b:8a:25:e5:
         05:5c:93:7d:82:0b:f2:e7:83:8a:6b:3c:84:fa:27:0c:c5:49:
         c1:1d:9a:4d:29:71:1c:58:35:ec:67:8c:b2:e5:43:67:96:52:
         f7:dd:9c:4d:be:0e:5b:44:31:3f:64:0f:0c:63:5a:7a:e0:23:
         50:2b:15:23:ca:35:99:a4:bd:a0:e8:66:8d:b1:59:5b:81:61:
         37:5e:20:3d:08:f9:7a:38:76:1a:40:4e:41:f6:9c:cb:b0:50:
         26:c6:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:09 2024 by rpki-client on console-ams.rpki-client.org