Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8b36c73-d749-391e-9584-e7b79eb265bf.roa
File:                     c8b36c73-d749-391e-9584-e7b79eb265bf.roa (raw, json)
Hash identifier:          7jfhOwDclxa5YtKeUIl9V/fFHS0YqJk2J36pkHXImJ4=
Subject key identifier:   74:D4:97:8C:B7:E9:D7:7E:F4:54:5E:54:9F:2D:AE:C5:76:A0:F3:7A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858466FF4BC64E73FE186B994AAC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8b36c73-d749-391e-9584-e7b79eb265bf.roa
Signing time:             Fri 05 Jul 2024 13:00:35 +0000
ROA not before:           Fri 05 Jul 2024 13:00:35 +0000
ROA not after:            Thu 03 Oct 2024 13:00:35 +0000
asID:                     209854
IP address blocks:        172.120.56.0/24 maxlen: 24
                          172.120.69.0/24 maxlen: 24
                          172.120.99.0/24 maxlen: 24
                          172.120.142.0/24 maxlen: 24
                          172.120.174.0/24 maxlen: 24
                          172.120.178.0/24 maxlen: 24
                          172.120.227.0/24 maxlen: 24
                          172.121.107.0/24 maxlen: 24
                          172.121.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 05:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6f:f4:bc:64:e7:3f:e1:86:b9:94:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 13:00:35 2024 GMT
            Not After : Oct  3 13:00:35 2024 GMT
        Subject: CN=9c8ebbf8-bae6-479d-b95e-a9bf66c8482b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:81:1d:da:88:09:16:a3:c3:65:21:b0:c1:
                    c0:9e:09:9b:0c:9e:67:44:55:c9:5d:f8:6f:4b:9d:
                    80:d2:77:94:6d:d1:95:89:c7:45:51:e8:5c:f6:d1:
                    c1:86:e6:78:5e:27:8d:b7:14:ec:3a:9d:62:84:46:
                    15:25:15:03:d9:26:ce:9b:99:bf:b9:83:61:f3:2e:
                    ff:0e:be:b6:38:8e:9b:e0:37:63:c7:ff:24:6c:5e:
                    2e:88:20:cf:57:fd:4f:04:0a:d9:e0:23:05:4d:39:
                    69:9d:6d:cb:82:b9:f8:7b:74:45:58:fc:92:9d:3a:
                    50:dc:a8:ee:61:22:af:e7:1b:4b:1c:a3:19:6f:5b:
                    b5:a7:f3:85:2d:bb:53:33:5d:ab:6d:21:e9:46:05:
                    fb:91:89:71:47:8d:b0:92:91:38:ea:51:a1:e5:a5:
                    2d:d9:10:35:8b:50:5c:9c:37:2f:02:73:4a:63:76:
                    f8:7e:c1:08:0c:4d:ff:c3:53:95:5a:46:2f:a5:54:
                    08:3a:06:4e:fa:e2:ca:74:49:db:44:bd:73:e9:e6:
                    3b:32:9b:57:07:81:a8:d2:28:63:cf:e9:07:d4:9b:
                    5e:2b:54:62:64:58:69:e7:b4:ca:53:83:f6:0e:a5:
                    c0:d3:38:82:86:c7:c6:39:a2:11:5f:8b:4f:c3:cd:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:97:8C:B7:E9:D7:7E:F4:54:5E:54:9F:2D:AE:C5:76:A0:F3:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8b36c73-d749-391e-9584-e7b79eb265bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.56.0/24
                  172.120.69.0/24
                  172.120.99.0/24
                  172.120.142.0/24
                  172.120.174.0/24
                  172.120.178.0/24
                  172.120.227.0/24
                  172.121.107.0/24
                  172.121.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:80:c3:a9:7e:96:69:e1:4a:c9:c9:b5:6c:18:d8:1a:66:
         fa:62:20:b1:14:88:5a:d7:92:b9:13:03:eb:15:34:78:49:08:
         93:75:d7:09:d3:c4:21:65:80:0d:b6:39:76:ac:12:23:b0:33:
         37:0f:2a:21:7a:b6:1a:e7:02:29:6e:23:c7:cb:fe:29:dc:dc:
         27:29:75:8c:53:0a:0c:ce:8d:7b:a8:16:ce:af:99:ef:b5:e1:
         74:7c:3e:aa:49:c9:ce:61:dd:db:d0:95:72:d0:1f:33:24:48:
         3b:5d:36:7a:d9:86:7c:40:96:8b:01:1b:fd:e0:eb:8b:40:ec:
         fd:3e:18:8d:1f:4c:d2:59:66:e2:27:8a:01:8b:4b:59:db:f4:
         5b:e0:27:a1:9c:8c:9a:4b:ff:92:d8:ec:1f:32:c7:12:9b:62:
         21:5f:5e:f0:d1:fd:65:b6:d6:c7:46:25:bf:78:ac:c1:38:72:
         4d:45:b1:4a:65:39:2c:c2:98:c2:e9:e7:56:57:83:67:a8:b2:
         6d:33:3e:09:8c:75:1d:f2:b9:68:2e:e9:77:9d:81:5c:aa:a2:
         92:4c:2c:e8:4a:2e:12:48:d3:3e:ff:19:b1:80:8c:c9:08:4d:
         09:59:43:79:7f:03:ac:9e:83:cc:72:d4:0d:c2:ff:18:43:ba:
         9c:b3:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org