Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2c98874-ab6c-3684-af6a-bc2d25cb789f.roa
File:                     d2c98874-ab6c-3684-af6a-bc2d25cb789f.roa (raw, json)
Hash identifier:          9PERmCCSP8CwpY2dus1avLj4KWKZefjmp9iYkTgflHY=
Subject key identifier:   CB:F8:EE:2C:B2:2A:6E:4F:CA:84:D4:3F:82:09:21:D2:4C:65:B0:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E8E220DD228A83C44BC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2c98874-ab6c-3684-af6a-bc2d25cb789f.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     48031
IP address blocks:        104.253.63.0/24 maxlen: 24
                          104.253.96.0/24 maxlen: 24
                          104.253.109.0/24 maxlen: 24
                          104.253.111.0/24 maxlen: 24
                          104.253.140.0/24 maxlen: 24
                          104.253.141.0/24 maxlen: 24
                          104.253.143.0/24 maxlen: 24
                          104.253.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 12:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e8:e2:20:dd:22:8a:83:c4:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=138e05e2-6b7d-443f-9793-02f25446534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:aa:76:88:18:e5:47:72:cf:74:1e:48:98:
                    a9:df:f6:82:74:a8:6d:f4:01:d8:4a:6c:27:8e:0a:
                    7e:d6:f3:64:2a:7f:21:ea:9d:59:8f:7b:09:3b:39:
                    4e:47:96:4a:e7:ed:16:ee:77:24:58:01:37:02:b2:
                    00:3d:99:df:ea:9d:00:76:f2:08:fc:39:e2:0e:93:
                    b8:6c:c8:35:7d:ee:64:1d:b2:dc:92:95:14:79:55:
                    a0:52:cf:72:30:aa:fb:bd:7e:b8:6d:62:5e:0d:0b:
                    2e:fa:34:d3:ff:1e:56:ea:51:c5:86:ba:25:a3:b5:
                    27:91:dc:d5:92:84:d0:bd:c9:b9:ee:fb:f8:97:d0:
                    23:af:30:5d:ab:54:b4:84:2a:3f:3a:76:29:72:47:
                    76:d0:57:23:b7:9e:f3:6c:97:78:6a:0a:da:f6:bc:
                    43:69:33:4d:0c:e1:30:67:38:22:f1:1c:6f:52:75:
                    6e:fe:4d:b2:1c:4b:51:7f:7b:10:23:4d:18:b7:4a:
                    f4:58:51:92:01:8d:f4:1d:71:9c:85:2f:39:0d:f9:
                    4c:1f:ce:83:fa:76:9f:c8:80:90:e4:5c:a1:66:d6:
                    60:95:86:b4:8f:bb:1f:ee:74:68:40:85:b0:3a:e5:
                    3c:2d:d8:d3:a8:3d:9a:44:65:54:4a:f4:e9:6f:7c:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F8:EE:2C:B2:2A:6E:4F:CA:84:D4:3F:82:09:21:D2:4C:65:B0:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2c98874-ab6c-3684-af6a-bc2d25cb789f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.63.0/24
                  104.253.96.0/24
                  104.253.109.0/24
                  104.253.111.0/24
                  104.253.140.0/23
                  104.253.143.0/24
                  104.253.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:5f:65:2f:b3:9f:49:ba:9f:ab:15:ce:5b:7b:ca:6e:73:
         4b:f5:6e:be:88:58:bc:e2:ce:a1:e5:90:22:af:fd:6e:16:4f:
         fe:5a:4a:08:e8:10:36:9b:a7:38:0d:23:63:0d:48:ab:16:de:
         36:1a:83:f6:69:de:fa:a0:2a:b9:2c:e9:7a:18:f7:2a:f4:0a:
         dd:29:6d:fd:67:0e:fc:b8:f8:71:2f:58:41:ee:88:83:52:5a:
         a8:15:51:23:9f:4e:89:5c:1e:a8:f5:43:5d:82:e4:24:7e:93:
         63:e2:96:11:07:75:5b:07:b4:d5:58:f7:e2:2f:3c:f7:a4:2d:
         b6:21:80:20:bf:fa:b1:69:dc:ac:53:0c:fd:07:cf:66:81:40:
         53:82:a1:c8:eb:87:5c:5d:db:6b:d4:fa:5e:34:1b:9e:19:9f:
         9c:ff:73:fe:ea:35:8d:89:b4:ba:54:9a:b2:82:24:66:45:09:
         28:69:7a:df:7e:26:3e:b8:0b:0e:ce:dd:e0:11:20:39:e2:a9:
         74:dc:94:88:71:1f:e3:ed:d5:06:99:c8:ba:03:fe:7d:ec:18:
         6f:ca:04:07:c0:05:f5:02:d1:36:93:4a:7b:cc:f3:44:ec:f9:
         b9:76:f6:9d:49:d5:d9:ab:69:52:8e:a6:aa:3f:68:dc:73:c9:
         78:94:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:49 2024 by rpki-client on console-fra.rpki-client.org