Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b3be2b89-a475-33ee-a11d-d2a904f1046e.roa
File:                     b3be2b89-a475-33ee-a11d-d2a904f1046e.roa (raw, json)
Hash identifier:          RYRuc/A4nyjbitnZwlAf2H19Pt7uG5bcEe0X9GOeWHA=
Subject key identifier:   75:BD:DE:91:A6:16:84:48:5D:67:F2:C1:28:B9:F2:6F:70:D8:D5:78
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E885713CCF15755DFBC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b3be2b89-a475-33ee-a11d-d2a904f1046e.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     48031
IP address blocks:        104.165.205.0/24 maxlen: 24
                          104.165.230.0/24 maxlen: 24
                          104.165.244.0/24 maxlen: 24
                          104.165.247.0/24 maxlen: 24
                          104.165.248.0/24 maxlen: 24
                          104.165.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 12:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e8:85:71:3c:cf:15:75:5d:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=64fb6233-c66d-4c36-b479-34e538f5b72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:7a:b3:bf:0a:40:6a:7d:75:cb:5d:60:58:
                    68:17:1b:96:98:55:e8:77:ad:17:e3:dd:93:ba:9f:
                    45:58:50:64:d5:a4:f2:28:8f:06:c3:7e:d7:e1:07:
                    31:4c:49:88:d2:7d:f2:01:a2:77:6c:ab:07:ac:1b:
                    d7:28:ec:04:e3:d4:88:df:7c:78:35:d5:d9:58:06:
                    c4:d1:e5:24:9c:27:28:20:a1:a8:b7:9a:15:0e:7d:
                    c4:a7:a4:c7:d5:98:8a:c3:71:8a:e8:e8:39:07:e0:
                    90:f2:b1:73:51:82:96:a6:ce:71:b3:bb:55:e1:e0:
                    e5:5e:11:71:a7:c6:61:17:ad:47:8d:13:34:f2:68:
                    2f:d8:7a:d5:70:20:5f:94:52:c4:db:9e:6e:db:14:
                    5e:a6:be:8a:81:59:a5:36:e1:85:b5:9e:90:f2:78:
                    b9:70:fa:58:72:84:24:27:fd:4c:2c:bd:dc:cb:0e:
                    98:b1:76:95:81:82:f2:15:67:df:fc:db:47:61:8d:
                    c4:d4:96:00:a3:a4:ef:4e:bf:d9:c5:dc:fd:9f:43:
                    1b:57:23:d7:ef:26:46:a1:ee:ba:f1:21:bb:d4:e1:
                    94:c2:58:08:ae:95:b6:eb:94:7e:88:3e:c0:9b:e7:
                    82:f8:f5:fd:ad:4c:ec:b8:bc:84:ce:27:60:c1:3c:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BD:DE:91:A6:16:84:48:5D:67:F2:C1:28:B9:F2:6F:70:D8:D5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b3be2b89-a475-33ee-a11d-d2a904f1046e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.205.0/24
                  104.165.230.0/24
                  104.165.244.0/24
                  104.165.247.0-104.165.249.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:55:20:c6:25:a2:9a:07:4d:a4:62:86:6d:20:dd:bf:dd:
         ee:1b:22:e0:a7:16:a9:57:b0:32:d1:a0:2f:20:a6:f3:fa:8d:
         1f:ee:14:a4:c9:08:dc:82:c2:8f:21:a9:06:c7:bb:3b:32:97:
         b9:05:ce:38:36:5f:88:a5:8d:ab:7b:83:ad:d3:09:fa:a5:86:
         d3:44:20:d6:07:76:4d:c6:22:ba:4d:ce:55:e3:f8:ad:93:6f:
         67:15:ff:10:8c:4e:d3:33:e7:86:1f:58:5b:29:c6:a5:7d:1d:
         cc:e4:d0:77:ee:4a:05:b5:e3:77:42:b4:e1:a2:fd:99:bc:bc:
         e4:14:7e:5a:2c:e1:ba:66:40:c2:4e:3d:b1:b8:ff:7a:f4:31:
         e1:1c:68:4d:6b:c8:30:64:6f:8f:05:5d:89:b5:cd:f3:42:69:
         cc:ad:21:83:c1:f5:e1:58:76:73:ea:15:e7:75:60:fc:1d:49:
         6d:e0:36:2a:48:3b:85:cc:c1:0f:1a:8a:eb:cc:44:63:86:28:
         56:c0:0a:fb:3e:31:cf:ae:e1:a2:b9:36:9f:44:b0:40:40:c8:
         13:1f:a7:f0:ac:da:2b:ef:e4:b5:78:12:80:a3:ff:89:a5:0a:
         92:59:d7:dd:f6:cf:aa:d9:72:ef:e6:38:72:de:99:e0:a0:6d:
         bf:06:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:58:43 2024 by rpki-client on console-ams.rpki-client.org