Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3601bfd-8d08-325f-bde7-617024e28615.roa
File:                     d3601bfd-8d08-325f-bde7-617024e28615.roa (raw, json)
Hash identifier:          OrqWfS07mnaiVsdVCBOPphUG2Xjm4cnl03m3PD+X5JM=
Subject key identifier:   24:B1:4C:54:5F:5F:B2:7F:74:B1:68:62:2F:7A:5B:28:43:22:57:89
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858455F2658C28424D00E5CEEE700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3601bfd-8d08-325f-bde7-617024e28615.roa
Signing time:             Fri 29 Mar 2024 19:45:08 +0000
ROA not before:           Fri 29 Mar 2024 19:45:08 +0000
ROA not after:            Thu 27 Jun 2024 19:45:08 +0000
asID:                     399989
IP address blocks:        107.186.0.0/24 maxlen: 24
                          107.186.60.0/24 maxlen: 24
                          104.252.244.0/24 maxlen: 24
                          104.252.178.0/24 maxlen: 24
                          104.252.77.0/24 maxlen: 24
                          107.164.12.0/24 maxlen: 24
                          104.253.40.0/24 maxlen: 24
                          107.164.138.0/24 maxlen: 24
                          107.164.93.0/24 maxlen: 24
                          107.164.151.0/24 maxlen: 24
                          107.164.146.0/24 maxlen: 24
                          107.164.213.0/24 maxlen: 24
                          107.164.207.0/24 maxlen: 24
                          107.165.179.0/24 maxlen: 24
                          107.165.176.0/24 maxlen: 24
                          107.187.124.0/24 maxlen: 24
                          107.186.192.0/24 maxlen: 24
                          107.186.76.0/24 maxlen: 24
                          107.186.29.0/24 maxlen: 24
                          107.186.11.0/24 maxlen: 24
                          107.186.7.0/24 maxlen: 24
                          107.165.221.0/24 maxlen: 24
                          107.165.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 23:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:26:58:c2:84:24:d0:0e:5c:ee:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 29 19:45:08 2024 GMT
            Not After : Jun 27 19:45:08 2024 GMT
        Subject: CN=4164a4a5-6f9d-4b28-8cd7-1a5c452781aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:f3:f4:b1:37:cd:1e:89:03:ea:79:8b:53:
                    ca:47:9b:8c:18:31:08:7a:ac:65:94:88:f6:6b:9c:
                    68:65:8f:9d:77:ac:d2:4f:f1:f1:49:e4:de:2a:de:
                    6c:46:af:ff:12:45:53:bb:57:1c:ea:fe:c3:33:f7:
                    1c:a7:72:b3:e5:39:72:1e:3b:25:5a:44:05:44:71:
                    b7:d7:09:24:03:6f:4a:6b:69:38:6c:bd:1d:71:bd:
                    2e:13:25:3c:65:af:fe:ef:69:78:c6:5c:aa:79:c4:
                    93:7b:16:cc:49:a2:50:8b:1b:87:4f:39:12:de:67:
                    9f:66:a2:ca:ca:7c:53:68:6f:58:69:94:fb:36:a7:
                    4e:78:c0:a0:9b:05:87:35:1e:e4:ad:d9:e7:40:ab:
                    15:d8:d8:f1:13:ed:03:35:01:56:2e:26:c4:cc:15:
                    81:e7:42:04:5e:82:2b:f7:81:e2:ac:6f:fe:80:1a:
                    8f:da:29:34:0d:73:ad:67:61:37:00:74:d1:05:0b:
                    9e:96:62:68:e3:c7:11:63:3d:96:ae:3f:af:6c:fa:
                    78:23:04:79:50:46:b6:82:cb:06:11:f2:19:08:0e:
                    d1:f7:bf:d7:68:b2:57:a5:9e:b2:95:95:1a:89:00:
                    8a:8f:34:f5:b3:c6:6a:17:7c:5b:00:5a:c8:2b:f8:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:4C:54:5F:5F:B2:7F:74:B1:68:62:2F:7A:5B:28:43:22:57:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3601bfd-8d08-325f-bde7-617024e28615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.77.0/24
                  104.252.178.0/24
                  104.252.244.0/24
                  104.253.40.0/24
                  107.164.12.0/24
                  107.164.93.0/24
                  107.164.138.0/24
                  107.164.146.0/24
                  107.164.151.0/24
                  107.164.207.0/24
                  107.164.213.0/24
                  107.165.176.0/24
                  107.165.179.0/24
                  107.165.219.0/24
                  107.165.221.0/24
                  107.186.0.0/24
                  107.186.7.0/24
                  107.186.11.0/24
                  107.186.29.0/24
                  107.186.60.0/24
                  107.186.76.0/24
                  107.186.192.0/24
                  107.187.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:65:c9:c8:31:99:bb:7c:9b:b5:f7:90:af:92:aa:ae:21:
         f5:9d:eb:c1:f2:0d:3a:01:b3:f7:d4:eb:a3:a9:37:fe:1f:47:
         b9:0a:46:6d:cc:12:ea:b5:86:e6:4a:cb:fd:e0:2c:8f:7d:ec:
         9b:b8:85:38:81:3f:8f:52:40:34:7c:3c:1c:97:59:c8:c2:bb:
         97:28:44:d1:01:72:f3:5c:19:ee:ac:90:5b:79:b7:d6:90:0f:
         a2:de:44:ab:04:5c:78:81:3b:74:60:78:c9:bf:17:46:8e:76:
         bf:40:3c:01:db:4d:36:e8:40:52:88:6b:69:d1:57:1c:b3:fa:
         38:75:03:75:41:4d:c1:12:42:2e:c6:a0:3a:e0:01:57:72:37:
         72:63:04:89:b3:a3:7b:2c:e1:40:7b:5a:29:be:f5:80:f2:92:
         d0:1e:e5:b2:77:57:1e:1d:76:38:8b:8d:58:d3:25:3e:d7:50:
         db:8a:e9:3e:f4:f9:06:2b:7a:86:c2:74:6d:aa:41:25:f4:58:
         55:7a:67:63:6c:44:93:f4:01:50:ab:f1:70:53:0d:58:87:e3:
         0c:58:a3:0c:65:10:97:da:49:6a:a8:81:eb:84:04:5b:34:d5:
         72:6f:09:98:e0:21:0a:16:4d:45:ce:62:dd:63:1d:f7:9e:c8:
         40:9f:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:32 2024 by rpki-client on console-fra.rpki-client.org