Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce6da299-8622-3079-b9a8-f249c029f585.roa
File:                     ce6da299-8622-3079-b9a8-f249c029f585.roa (raw, json)
Hash identifier:          gIs5NaOUUR82ilEWk1iOrGgmB7UM6DDbxqKk5kwmf+s=
Subject key identifier:   FC:E7:5F:AD:59:E3:85:9E:A2:F2:D9:21:B2:07:88:D4:49:C2:52:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E85EF17226148186AD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce6da299-8622-3079-b9a8-f249c029f585.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     48031
IP address blocks:        104.165.113.0/24 maxlen: 24
                          104.165.114.0/24 maxlen: 24
                          104.165.129.0/24 maxlen: 24
                          104.165.132.0/24 maxlen: 24
                          104.165.138.0/24 maxlen: 24
                          104.165.142.0/24 maxlen: 24
                          104.165.145.0/24 maxlen: 24
                          104.165.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 14:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e8:5e:f1:72:26:14:81:86:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=18a2ed6f-8d9f-44f4-93f0-a24a8cba5683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:f8:cf:66:99:2e:d9:80:36:c7:7c:4e:c3:
                    8b:b4:73:9b:77:ad:98:88:ef:2f:37:11:c3:16:d6:
                    81:1e:57:2b:6c:ab:e7:f3:2d:20:d8:a9:38:b6:45:
                    3a:17:a5:70:68:b3:f6:4f:10:e4:6a:bc:8e:29:8b:
                    19:a3:52:19:9e:83:f3:46:67:e2:27:56:f7:55:ab:
                    22:de:88:8c:d1:dc:68:a9:c0:a5:cb:6b:42:a1:03:
                    49:61:a3:2c:d6:91:7f:48:99:c5:71:6a:74:bc:57:
                    7b:96:8e:4e:9a:52:b1:ba:66:9a:7e:74:17:ae:0e:
                    f0:c1:33:a9:ac:02:b9:68:39:f0:28:a4:38:da:c1:
                    14:fd:5f:c6:91:ee:5b:58:97:4a:3e:fd:08:5a:56:
                    52:d1:50:47:9d:09:c4:53:b2:89:e2:c2:07:3e:12:
                    5c:3e:81:28:7a:25:d0:66:81:61:00:94:b0:b4:32:
                    74:cd:88:eb:c6:db:38:94:4e:c2:fd:74:8c:21:60:
                    58:a1:60:c9:ec:f1:49:db:0a:4a:b3:9f:98:1e:0b:
                    f2:08:f2:91:92:a6:bc:af:46:fe:47:36:ee:19:78:
                    63:3c:df:d7:98:12:1c:f7:0e:f2:c0:76:9a:39:93:
                    b5:65:ec:ea:32:88:ed:29:72:93:f1:e0:fe:97:60:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:5F:AD:59:E3:85:9E:A2:F2:D9:21:B2:07:88:D4:49:C2:52:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce6da299-8622-3079-b9a8-f249c029f585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.113.0-104.165.114.255
                  104.165.129.0/24
                  104.165.132.0/24
                  104.165.138.0/24
                  104.165.142.0/24
                  104.165.145.0/24
                  104.165.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:83:e7:40:14:dc:d3:5a:5a:c6:a3:17:2a:b0:a9:3d:cd:
         15:53:01:42:4b:0f:6d:af:a5:3b:bf:7e:5b:83:5e:a6:97:31:
         c4:a1:16:0a:ba:c6:b9:a2:8e:89:8a:dd:07:2d:a6:0f:02:00:
         9b:af:88:75:0c:52:5b:56:49:2c:f6:ee:ed:60:46:e5:94:57:
         b3:cb:e4:ec:e9:0f:8e:eb:a2:a4:ac:af:9d:20:19:a9:18:a4:
         02:bd:ea:8f:92:05:a5:a9:56:76:5b:da:11:89:a2:ce:f2:74:
         a1:48:51:09:44:5d:fc:9e:91:c8:8b:b0:7d:e2:2d:31:5d:6a:
         2b:3d:0d:d5:d2:85:f8:c4:14:98:1b:0a:ea:2e:f8:ff:15:88:
         3e:c4:06:19:a4:4a:ac:fe:2d:97:b9:17:8f:49:e6:0a:69:3b:
         83:a8:81:f0:17:e1:0d:97:26:ae:56:fb:f3:00:b9:4a:14:31:
         da:47:84:ec:a8:83:a9:1d:27:03:8a:72:0e:96:23:7c:2d:68:
         01:49:c8:fe:6a:7a:ba:b1:e3:ce:3e:d3:fc:e0:72:bc:24:42:
         d2:2f:2f:08:be:72:e5:6f:c8:98:f4:00:06:49:ff:14:e7:6c:
         9f:69:c6:e3:19:61:07:84:b5:4c:a9:4a:12:41:13:8d:d1:29:
         ae:fb:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:22 2024 by rpki-client on console-ams.rpki-client.org