Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b05c16bc-4f65-3b51-b88e-db4590d0cb0d.roa
File:                     b05c16bc-4f65-3b51-b88e-db4590d0cb0d.roa (raw, json)
Hash identifier:          v7avILScPGnEywY5tL4SgU+FAhHs9Rg6aeG9lFdTjT4=
Subject key identifier:   93:10:04:7B:B5:E8:74:10:B7:24:A9:BA:D2:BD:79:91:BC:D1:49:84
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584587225F1B3B06F9C694849E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b05c16bc-4f65-3b51-b88e-db4590d0cb0d.roa
Signing time:             Sat 13 Apr 2024 03:29:27 +0000
ROA not before:           Sat 13 Apr 2024 03:29:27 +0000
ROA not after:            Fri 12 Jul 2024 03:29:27 +0000
asID:                     12271
IP address blocks:        104.165.16.0/24 maxlen: 24
                          45.39.178.0/24 maxlen: 24
                          45.39.52.0/24 maxlen: 24
                          45.39.87.0/24 maxlen: 24
                          45.39.171.0/24 maxlen: 24
                          45.39.185.0/24 maxlen: 24
                          45.39.188.0/24 maxlen: 24
                          45.39.239.0/24 maxlen: 24
                          104.252.51.0/24 maxlen: 24
                          104.252.158.0/24 maxlen: 24
                          104.252.240.0/24 maxlen: 24
                          107.165.213.0/24 maxlen: 24
                          107.165.230.0/24 maxlen: 24
                          107.186.6.0/24 maxlen: 24
                          107.186.54.0/24 maxlen: 24
                          107.186.65.0/24 maxlen: 24
                          107.186.232.0/24 maxlen: 24
                          107.187.126.0/24 maxlen: 24
                          142.252.3.0/24 maxlen: 24
                          142.252.154.0/24 maxlen: 24
                          172.120.23.0/24 maxlen: 24
                          205.164.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 20:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:22:5f:1b:3b:06:f9:c6:94:84:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 03:29:27 2024 GMT
            Not After : Jul 12 03:29:27 2024 GMT
        Subject: CN=0aabecbe-293f-4425-ad9f-29e465e66a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:08:4d:c3:bf:c5:ae:8e:33:bf:73:24:06:
                    31:77:c2:bd:1d:61:5d:dc:0c:9b:60:95:e8:fd:df:
                    9c:1c:1f:48:61:8f:99:03:d5:06:1b:b9:6f:90:24:
                    99:a7:85:a7:fa:ee:fc:23:5f:88:f1:e9:d8:24:5c:
                    a6:e9:f0:f2:13:bf:75:82:5f:f0:52:61:dd:ed:08:
                    67:11:83:1b:3c:c1:7c:9c:5c:cb:55:ad:04:7c:aa:
                    2d:e9:15:09:5d:94:be:ee:f0:2f:ad:da:5d:d7:34:
                    3d:9b:23:14:74:99:5b:86:fd:ec:00:e3:fe:47:80:
                    cd:12:5a:de:c8:40:d9:2b:1c:19:3e:c5:c7:32:bc:
                    f1:6f:38:d5:c0:d6:1f:d0:41:3d:45:12:9d:b8:fc:
                    3a:ba:68:18:2f:c6:5f:73:af:b4:d4:6b:04:5f:8d:
                    a7:f1:49:84:56:15:27:bc:55:89:1d:52:a5:64:b1:
                    d6:9f:51:e0:a1:c5:0c:25:af:ce:7c:dc:af:09:cb:
                    79:73:6f:e1:9c:80:06:90:03:07:e4:f7:fc:45:65:
                    1d:d5:3e:05:45:a2:ff:40:be:7c:59:67:f1:43:b1:
                    a9:70:53:38:6a:ff:e0:f8:11:a7:c0:b0:64:4b:f4:
                    23:09:37:5c:c4:43:5f:1e:8e:3d:2c:f0:30:73:85:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:04:7B:B5:E8:74:10:B7:24:A9:BA:D2:BD:79:91:BC:D1:49:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b05c16bc-4f65-3b51-b88e-db4590d0cb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.52.0/24
                  45.39.87.0/24
                  45.39.171.0/24
                  45.39.178.0/24
                  45.39.185.0/24
                  45.39.188.0/24
                  45.39.239.0/24
                  104.165.16.0/24
                  104.252.51.0/24
                  104.252.158.0/24
                  104.252.240.0/24
                  107.165.213.0/24
                  107.165.230.0/24
                  107.186.6.0/24
                  107.186.54.0/24
                  107.186.65.0/24
                  107.186.232.0/24
                  107.187.126.0/24
                  142.252.3.0/24
                  142.252.154.0/24
                  172.120.23.0/24
                  205.164.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:37:49:c0:2a:68:ee:15:5f:fc:8b:7a:19:7a:a3:6c:10:8a:
         e3:66:d2:67:31:8b:34:43:f0:6a:84:17:c0:88:49:7c:d1:6f:
         4b:14:e7:2b:5b:d6:70:34:0b:1e:01:67:7b:b6:5d:6e:c7:4a:
         9d:82:89:cf:c2:e6:77:b0:0e:82:f2:47:c5:34:37:a9:6b:7e:
         bb:2a:86:75:67:15:8b:c7:87:ae:73:e4:4f:52:67:55:f9:9e:
         65:6b:9e:f1:fb:dd:b2:b7:d4:a6:0e:43:d0:87:48:b4:83:42:
         48:82:3c:bd:c0:39:74:e1:e6:d6:65:0a:a7:d2:1f:21:92:53:
         27:71:15:04:cf:aa:67:17:a9:01:d8:18:71:9e:df:0e:98:db:
         81:51:73:02:c2:1c:d4:02:a9:d7:59:4b:c0:96:e0:a4:54:df:
         37:45:ab:e9:b7:0b:91:26:57:77:b7:e5:c4:21:06:b2:3d:ed:
         00:8a:6e:53:84:93:84:9d:9a:2f:f1:5e:23:4b:53:80:70:f7:
         aa:65:d5:30:79:56:82:44:89:00:74:10:b1:be:f0:de:e9:e1:
         80:62:27:d0:09:29:d0:1b:31:84:68:54:20:17:e6:31:a8:56:
         9b:ee:7b:87:4c:4b:9f:52:69:16:42:ec:d1:b1:9f:ec:43:73:
         04:6f:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:54:55 2024 by rpki-client on console-fra.rpki-client.org