Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4579d7c-9c67-328c-b664-abdf76fb2dde.roa
File:                     d4579d7c-9c67-328c-b664-abdf76fb2dde.roa (raw, json)
Hash identifier:          XPhOWOP/o99EAo8OzD1jc1EZZaepllaIVyUpOB3GUbk=
Subject key identifier:   AB:27:EB:12:21:EA:63:B5:67:BE:33:41:4D:45:A6:5D:CA:06:9F:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858476C9F13B2F64E4DEBDD64BB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4579d7c-9c67-328c-b664-abdf76fb2dde.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397630
IP address blocks:        104.164.183.0/24 maxlen: 24
                          104.165.127.0/24 maxlen: 24
                          104.165.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 18:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9f:13:b2:f6:4e:4d:eb:dd:64:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ef39aa5d-038b-4842-bf72-ee18e0e3c067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:26:21:a9:12:dc:fd:5e:b0:88:d7:35:01:
                    cb:59:39:f6:56:f3:b4:c8:24:d6:b7:e7:8a:df:f9:
                    b5:c8:02:e7:2c:36:a7:cf:f1:b3:cc:fc:d1:33:4a:
                    ee:b4:44:e8:6a:82:c5:91:b0:36:77:4e:b5:f3:86:
                    cf:55:81:1d:9e:f2:f4:e5:6d:76:b7:70:65:50:29:
                    f2:a2:af:74:85:1e:90:84:f0:74:23:a0:6b:e1:39:
                    f1:b4:d6:e2:4a:2d:53:82:a2:e6:0f:bf:8e:5f:6c:
                    ca:5c:e1:10:4b:da:f5:94:23:0c:7e:9c:7c:9a:5e:
                    74:41:ec:c5:23:f9:4f:15:e9:52:66:68:b9:b9:54:
                    b8:13:59:3b:41:bd:7f:36:f5:1e:b7:f3:2b:91:8c:
                    23:a3:15:e7:88:a5:49:50:97:56:ea:d8:f4:fe:37:
                    43:18:46:a1:e0:74:bb:a9:a3:d9:34:ca:fe:e3:a4:
                    08:8f:51:53:c8:37:75:a8:43:f4:1b:66:e6:fe:c8:
                    92:84:95:20:f5:86:5a:86:f2:d9:3c:17:07:7c:be:
                    64:e8:cd:f6:bc:77:65:15:1b:6e:e4:62:2e:c2:a6:
                    15:00:02:1f:ad:d9:47:a3:55:60:a0:ed:77:99:bb:
                    73:b5:5a:ef:8a:f7:a8:7c:51:ed:25:44:8d:34:68:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:EB:12:21:EA:63:B5:67:BE:33:41:4D:45:A6:5D:CA:06:9F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4579d7c-9c67-328c-b664-abdf76fb2dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.183.0/24
                  104.165.127.0/24
                  104.165.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:d5:31:d2:d2:c1:32:9b:35:ac:ec:9e:72:35:e8:88:90:
         64:5c:2f:2b:a1:67:35:91:f8:44:c8:fc:8b:8d:13:bf:75:12:
         d7:e3:7b:61:7d:7a:b1:2b:58:36:71:7c:b5:36:ea:31:b5:50:
         ed:56:90:2a:ec:e0:6f:03:63:fa:bd:e3:dc:b2:4e:29:93:28:
         77:9a:f1:a7:d6:48:d0:c8:e2:ac:ad:0a:ea:b6:eb:b1:9e:85:
         be:80:3a:f5:38:31:39:b6:1a:94:02:ff:55:54:b7:63:d2:05:
         0d:77:5e:07:77:22:97:58:26:ea:db:01:89:41:1c:d3:e9:c6:
         67:18:4e:70:42:05:4a:91:c8:15:32:69:b5:22:4c:c5:71:7b:
         90:19:3a:73:10:a6:81:26:93:ce:75:8f:2f:7d:92:01:5b:96:
         1b:11:3a:4b:b3:a5:d0:ef:e3:06:3d:14:5f:49:35:c5:29:ef:
         22:59:38:ba:b9:b7:af:11:8c:5e:9f:77:36:8c:c0:a3:64:0e:
         04:64:f3:7d:46:96:97:4d:01:0d:0f:ea:fb:8e:89:99:d8:a7:
         0c:18:d9:fd:66:a8:bc:df:f5:a3:69:ad:b6:55:0e:d4:38:a7:
         0c:c5:10:fc:48:2d:0c:cc:4c:4b:25:2e:88:1c:01:e1:59:00:
         e1:81:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 20:57:38 2024 by rpki-client on console-fra.rpki-client.org