Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d10466b9-e87b-342e-bcf0-7bfc52a67bde.roa
File:                     d10466b9-e87b-342e-bcf0-7bfc52a67bde.roa (raw, json)
Hash identifier:          HZlsE24o2qzUE7jdEMgu7OWHubN9Rtg9DKztbtJrMKg=
Subject key identifier:   7A:B5:C8:00:4C:BD:18:54:9A:88:3E:DE:6C:0D:3A:8D:18:B2:1C:3F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845871DFF377680FB3FEBB14780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d10466b9-e87b-342e-bcf0-7bfc52a67bde.roa
Signing time:             Sat 13 Apr 2024 03:20:39 +0000
ROA not before:           Sat 13 Apr 2024 03:20:39 +0000
ROA not after:            Fri 12 Jul 2024 03:20:39 +0000
asID:                     3257
IP address blocks:        45.38.220.0/24 maxlen: 24
                          23.230.186.0/24 maxlen: 24
                          45.39.77.0/24 maxlen: 24
                          45.39.95.0/24 maxlen: 24
                          45.39.174.0/24 maxlen: 24
                          45.39.161.0/24 maxlen: 24
                          23.230.234.0/24 maxlen: 24
                          45.39.252.0/24 maxlen: 24
                          45.38.234.0/24 maxlen: 24
                          45.38.201.0/24 maxlen: 24
                          23.230.235.0/24 maxlen: 24
                          45.38.206.0/24 maxlen: 24
                          45.39.49.0/24 maxlen: 24
                          45.39.66.0/24 maxlen: 24
                          45.39.226.0/24 maxlen: 24
                          23.230.1.0/24 maxlen: 24
                          23.230.64.0/24 maxlen: 24
                          23.230.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 20:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:1d:ff:37:76:80:fb:3f:eb:b1:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 03:20:39 2024 GMT
            Not After : Jul 12 03:20:39 2024 GMT
        Subject: CN=72636c09-8782-45b6-81a7-8695c231b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:81:45:0b:5f:e2:fe:89:e1:ac:99:3e:d3:
                    08:d6:01:8a:82:63:42:1d:6f:84:1d:c6:0e:67:3a:
                    fb:da:d7:4b:74:1c:ff:06:95:34:b4:87:0d:1f:2f:
                    84:67:b7:89:01:91:0e:ee:a5:ee:84:dc:1e:07:44:
                    3e:10:50:da:75:ad:9f:a5:2d:e2:36:d4:95:71:ef:
                    52:43:d7:18:96:01:14:46:94:11:6e:1d:43:40:a7:
                    11:6d:2a:df:0f:17:46:42:7f:5f:52:1d:4a:11:c9:
                    f1:96:66:31:f7:a6:37:fe:88:63:5e:e0:7d:29:02:
                    59:f0:8f:8e:5f:c9:35:63:07:c9:6e:0c:dc:6b:4b:
                    b2:2d:9d:1f:3a:df:43:ec:c8:17:8c:45:ef:b8:ef:
                    af:8c:dd:1f:96:54:28:f5:c3:d8:2e:52:12:f8:93:
                    d9:d1:a8:03:50:90:ab:31:09:2e:b8:bd:ee:43:8a:
                    e6:2e:f0:f9:ed:f9:c6:9e:3f:e3:1f:88:53:0a:83:
                    99:e6:ef:d2:d3:01:5c:b2:02:41:72:51:6e:46:52:
                    ee:ef:7c:60:20:a1:b0:11:48:6d:d4:a3:c2:06:0d:
                    e4:f8:39:12:76:30:2c:4d:63:90:8d:d3:7f:5a:8b:
                    82:9e:15:86:9f:c3:fa:49:b3:b0:de:e1:a9:38:ce:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:C8:00:4C:BD:18:54:9A:88:3E:DE:6C:0D:3A:8D:18:B2:1C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d10466b9-e87b-342e-bcf0-7bfc52a67bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.1.0/24
                  23.230.64.0/24
                  23.230.121.0/24
                  23.230.186.0/24
                  23.230.234.0/23
                  45.38.201.0/24
                  45.38.206.0/24
                  45.38.220.0/24
                  45.38.234.0/24
                  45.39.49.0/24
                  45.39.66.0/24
                  45.39.77.0/24
                  45.39.95.0/24
                  45.39.161.0/24
                  45.39.174.0/24
                  45.39.226.0/24
                  45.39.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:a2:0a:6b:8e:f7:56:32:5b:84:f6:a9:28:28:1a:0e:b1:
         47:c2:8f:08:e8:a7:71:bc:34:88:3d:ca:43:ca:a9:b0:70:c0:
         87:f8:67:0b:94:dd:23:28:6b:81:53:cd:a7:4e:90:e6:36:07:
         6e:10:10:97:ed:28:29:ff:1b:86:bd:33:2b:8d:e0:dd:e4:b7:
         31:b4:60:34:a9:6e:bc:a9:5b:43:f9:46:34:38:88:1b:2e:13:
         cd:4b:af:0e:b5:55:3f:ff:98:e2:c8:79:56:d8:d2:3e:ca:69:
         a6:39:47:04:b3:3a:ae:a1:67:f0:74:4a:91:f4:ab:61:01:3d:
         04:47:4e:64:05:df:28:82:56:2e:08:f7:9a:4f:af:c4:e4:d3:
         90:1b:f9:67:94:ef:22:2a:bd:6d:22:78:82:20:7d:c6:5b:ba:
         6a:e1:7e:b2:ad:ad:f3:02:4d:84:ff:3c:8e:2a:d0:4d:f0:42:
         af:1d:c0:20:54:7d:3f:ff:13:8f:d8:34:cf:00:14:45:36:ca:
         06:4a:56:71:63:db:ff:d4:5d:3d:39:81:f3:23:c2:d2:a7:57:
         2d:db:96:f8:a9:67:2d:5f:74:72:cc:85:44:86:a2:bf:1c:04:
         93:d3:96:03:0e:83:9f:7a:98:fc:a0:c4:a1:e8:96:b6:61:a2:
         0a:a6:7d:e6
-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIUAQ0Mn0MoWEWHHf83doD7P+uxR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQxMzAzMjAzOVoXDTI0MDcxMjAzMjAzOVowLzEtMCsGA1UEAxMk
NzI2MzZjMDktODc4Mi00NWI2LTgxYTctODY5NWMyMzFiNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn92BRQtf4v6J4ayZPtMI1gGKgmNCHW+EHcYO
Zzr72tdLdBz/BpU0tIcNHy+EZ7eJAZEO7qXuhNweB0Q+EFDada2fpS3iNtSVce9S
Q9cYlgEURpQRbh1DQKcRbSrfDxdGQn9fUh1KEcnxlmYx96Y3/ohjXuB9KQJZ8I+O
X8k1YwfJbgzca0uyLZ0fOt9D7MgXjEXvuO+vjN0fllQo9cPYLlIS+JPZ0agDUJCr
MQkuuL3uQ4rmLvD57fnGnj/jH4hTCoOZ5u/S0wFcsgJBclFuRlLu73xgIKGwEUht
1KPCBg3k+DkSdjAsTWOQjdN/WouCnhWGn8P6SbOw3uGpOM7GNQIDAQABo4IDtTCC
A7EwHQYDVR0OBBYEFHq1yABMvRhUmog+3mwNOo0Yshw/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDEwNDY2YjktZTg3Yi0z
NDJlLWJjZjAtN2JmYzUyYTY3YmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAF+YBAwQA
F+ZAAwQAF+Z5AwQAF+a6AwQBF+bqAwQALSbJAwQALSbOAwQALSbcAwQALSbqAwQA
LScxAwQALSdCAwQALSdNAwQALSdfAwQALSehAwQALSeuAwQALSfiAwQALSf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8DogprjvdWMluE9qkoKBoOsUfCjwjop3G8NIg9ykPKqbBwwIf4ZwuU
3SMoa4FTzadOkOY2B24QEJftKCn/G4a9MyuN4N3ktzG0YDSpbrypW0P5RjQ4iBsu
E81Lrw61VT//mOLIeVbY0j7KaaY5RwSzOq6hZ/B0SpH0q2EBPQRHTmQF3yiCVi4I
95pPr8Tk05Ab+WeU7yIqvW0ieIIgfcZbumrhfrKtrfMCTYT/PI4q0E3wQq8dwCBU
fT//E4/YNM8AFEU2ygZKVnFj2//UXT05gfMjwtKnVy3blvipZy1fdHLMhUSGor8c
BJPTlgMOg596mPygxKHolrZhogqmfeY=
-----END CERTIFICATE-----
Generated at Wed Apr 24 22:48:46 2024 by rpki-client on console-ams.rpki-client.org