Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b24e18c3-bf1a-360a-9050-ca9d69f35e16.roa
File:                     b24e18c3-bf1a-360a-9050-ca9d69f35e16.roa (raw, json)
Hash identifier:          tloD1rDoignLr1dsBRL6SgQ/bT1v3NllSIKWMvbfxA0=
Subject key identifier:   18:01:EE:78:38:79:DC:52:AC:9A:A6:5F:08:AB:35:CC:52:65:03:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FC31A3A096997D21420160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b24e18c3-bf1a-360a-9050-ca9d69f35e16.roa
Signing time:             Thu 20 Feb 2025 12:24:50 +0000
ROA not before:           Thu 20 Feb 2025 12:24:50 +0000
ROA not after:            Wed 21 May 2025 11:24:50 +0000
asID:                     18779
IP address blocks:        104.253.16.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 10:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fc:31:a3:a0:96:99:7d:21:42:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:24:50 2025 GMT
            Not After : May 21 11:24:50 2025 GMT
        Subject: CN=cc620100-e863-4a55-a926-fd05c3e8e7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:71:13:18:5d:06:fb:f9:53:a9:d1:94:17:
                    54:5d:43:67:41:a1:37:b8:26:db:cc:3b:3b:54:bd:
                    57:31:a9:87:34:7f:d5:82:b7:99:04:24:0f:ed:e6:
                    dc:8c:ef:6d:8e:50:dd:21:ed:1a:00:ce:99:02:8f:
                    1c:ef:c3:3e:bb:94:ed:92:d5:6c:65:65:a1:81:08:
                    38:8b:65:45:8f:ec:fc:b7:37:f0:5e:b0:01:c6:90:
                    eb:2d:55:48:25:55:42:00:18:5b:36:71:23:33:df:
                    f9:64:c8:68:70:43:f7:6a:c0:42:5f:45:0f:da:e4:
                    67:64:b7:2c:3d:e4:54:b0:33:d3:eb:af:9e:7b:29:
                    36:b9:e3:b3:54:08:47:aa:1f:6c:43:67:62:91:82:
                    a3:e5:43:33:43:a5:1c:ed:af:2f:d6:98:89:0e:d3:
                    6e:92:c0:63:29:4e:d8:74:76:3d:e8:fc:43:75:b8:
                    11:0d:c1:0e:93:db:3d:73:da:e0:a3:76:a7:c7:1c:
                    93:47:68:e8:0b:5b:bd:87:6d:b1:d2:94:cc:91:25:
                    ca:70:c9:12:d0:33:7f:ac:b1:c2:10:6d:81:2b:33:
                    00:65:70:77:22:27:d5:a3:21:c4:69:7c:7f:6d:e1:
                    92:97:87:f7:6a:e9:15:61:d6:50:85:9c:96:0a:aa:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:01:EE:78:38:79:DC:52:AC:9A:A6:5F:08:AB:35:CC:52:65:03:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b24e18c3-bf1a-360a-9050-ca9d69f35e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:93:0c:08:9a:3b:61:7f:da:df:a7:5e:72:2d:a9:61:70:
         0d:20:20:36:46:c8:a7:14:20:cd:74:5d:4d:63:7b:4c:8a:00:
         80:54:f1:09:44:0f:10:8b:ba:27:70:91:49:08:96:76:bf:2a:
         f1:0e:ec:9a:36:b5:d5:4a:74:2f:d2:eb:5b:ce:98:48:ae:5e:
         bc:3e:63:83:58:c0:9f:a0:2f:1b:7d:a0:31:87:f3:26:10:f3:
         75:2a:1d:10:59:ff:46:23:4d:99:18:a6:17:7b:db:be:3a:f1:
         66:53:bc:c5:b1:53:71:6a:0f:1e:aa:e2:c1:c5:08:9f:d3:eb:
         d6:e0:ae:31:e9:8c:e4:f5:ed:ab:f3:29:37:5c:3e:36:29:18:
         8e:d4:9d:a2:d6:3e:fc:60:36:3e:0f:ba:cc:e7:e5:a4:93:80:
         ef:f9:2d:dc:6d:b6:bf:07:5c:75:26:8c:f4:14:8b:99:62:a7:
         43:bd:52:ee:4c:d2:4b:11:23:65:80:bb:21:34:50:cb:de:2b:
         0b:dc:23:95:18:34:d4:63:87:42:a4:38:06:89:ba:65:d6:99:
         33:90:c3:27:ab:1e:11:04:73:9a:a3:6f:fd:c4:14:e3:9a:83:
         95:6d:dd:8e:07:2b:82:bb:7e:ed:bc:be:d6:c4:7d:17:31:ef:
         8e:07:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:04 2025 by rpki-client