Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e59af41e-3750-3900-8bfd-27d03aee9df0.roa
File:                     e59af41e-3750-3900-8bfd-27d03aee9df0.roa (raw, json)
Hash identifier:          Fgh4gj0szbk4QVC806IMp1Jz+1mNHCu5ozuTtzWvZQs=
Subject key identifier:   E2:C6:2D:2F:BF:51:4F:A2:DE:10:36:87:BD:A1:60:34:DC:E7:E0:25
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858471E12C39159BBA7EB9EA64520
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e59af41e-3750-3900-8bfd-27d03aee9df0.roa
Signing time:             Thu 05 Sep 2024 21:52:00 +0000
ROA not before:           Thu 05 Sep 2024 21:52:00 +0000
ROA not after:            Wed 04 Dec 2024 22:52:00 +0000
asID:                     6830
IP address blocks:        23.230.89.0/24 maxlen: 24
                          23.230.141.0/24 maxlen: 24
                          45.38.61.0/24 maxlen: 24
                          45.38.216.0/24 maxlen: 24
                          45.39.33.0/24 maxlen: 24
                          45.39.68.0/24 maxlen: 24
                          45.39.89.0/24 maxlen: 24
                          45.39.191.0/24 maxlen: 24
                          45.39.220.0/24 maxlen: 24
                          45.39.228.0/24 maxlen: 24
                          50.117.7.0/24 maxlen: 24
                          104.165.189.0/24 maxlen: 24
                          104.253.145.0/24 maxlen: 24
                          104.253.163.0/24 maxlen: 24
                          104.253.164.0/24 maxlen: 24
                          104.253.169.0/24 maxlen: 24
                          104.253.170.0/24 maxlen: 24
                          104.253.175.0/24 maxlen: 24
                          104.253.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 17:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:12:c3:91:59:bb:a7:eb:9e:a6:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  5 21:52:00 2024 GMT
            Not After : Dec  4 22:52:00 2024 GMT
        Subject: CN=f4e9bb3f-2049-4345-9934-27f186f652a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:2e:37:e5:bd:80:f7:0a:02:c9:97:88:1a:
                    e2:31:ab:19:f5:63:74:40:3f:b5:5b:ea:9d:0b:33:
                    42:3e:b9:62:f4:54:e3:de:4e:2c:60:57:6b:0b:d9:
                    bb:54:17:61:ff:71:d4:5b:e0:48:fb:91:0f:83:b2:
                    59:f0:b6:96:e3:86:77:ab:c5:be:dc:47:54:76:7c:
                    50:4b:71:8a:e8:9a:97:ed:2a:79:76:48:c1:32:3b:
                    fc:7b:b3:19:8c:76:dc:77:5a:47:e6:fa:09:7a:34:
                    6f:c8:12:d9:a9:5e:c5:17:15:6d:d5:9a:8f:6b:13:
                    d3:bd:f8:36:b7:f6:68:4e:fb:42:73:49:9f:14:d4:
                    3f:32:c5:eb:f3:c1:44:be:52:93:2f:3f:a6:5f:64:
                    63:0b:fe:07:fd:91:ae:8c:ac:f2:26:21:2c:38:4f:
                    3c:45:3c:95:91:1a:fb:f9:6c:d9:da:4a:26:1b:c4:
                    9f:93:93:26:e5:f9:33:52:4c:79:80:76:b0:ff:31:
                    ef:6a:23:a1:09:6f:14:95:10:73:2c:13:43:09:4f:
                    b5:9f:bc:f5:78:a4:90:09:77:38:ef:a7:c0:a0:c5:
                    ab:c0:1e:37:d2:06:df:3b:31:b6:6c:b2:b5:e1:e4:
                    0b:3c:3f:ee:8f:d8:f3:56:eb:fa:38:8d:bf:47:05:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:2D:2F:BF:51:4F:A2:DE:10:36:87:BD:A1:60:34:DC:E7:E0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e59af41e-3750-3900-8bfd-27d03aee9df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.89.0/24
                  23.230.141.0/24
                  45.38.61.0/24
                  45.38.216.0/24
                  45.39.33.0/24
                  45.39.68.0/24
                  45.39.89.0/24
                  45.39.191.0/24
                  45.39.220.0/24
                  45.39.228.0/24
                  50.117.7.0/24
                  104.165.189.0/24
                  104.253.145.0/24
                  104.253.163.0-104.253.164.255
                  104.253.169.0-104.253.170.255
                  104.253.175.0/24
                  104.253.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:0d:16:e8:51:39:3b:e1:d7:de:d1:1a:6c:84:f6:96:bd:
         b9:78:6a:3b:69:3a:2a:ff:4b:03:c6:65:44:4d:f2:74:cf:00:
         b8:13:f2:2a:2e:da:d2:50:d3:c1:e8:00:a0:6c:6f:8a:2e:bb:
         ca:e6:5b:36:b7:20:48:ba:ad:1d:52:9b:d0:72:0d:56:3d:55:
         a3:f3:72:89:b9:cc:91:fd:3a:af:4d:7a:a9:04:9e:9c:dc:0c:
         74:69:41:ba:1b:8e:61:54:a1:fc:6d:b9:8d:04:ad:40:d9:d3:
         fb:31:6f:9b:fa:ad:96:8c:91:66:10:26:c0:97:46:94:cb:b5:
         a4:57:6f:c4:69:70:8b:80:a6:57:ad:ee:1b:13:85:10:b8:47:
         9e:66:36:a0:32:06:a2:0d:37:de:3a:00:b5:f5:04:c4:e3:14:
         4e:d1:71:e0:0f:be:69:39:7e:3f:89:06:09:d4:39:d8:25:29:
         86:ce:79:70:79:a3:ca:25:fa:5b:1d:4a:21:63:09:33:64:09:
         4f:96:ac:2f:a5:cc:02:18:31:ac:1b:58:d8:bd:d9:f9:0e:c3:
         34:2b:64:3b:db:60:62:53:8f:c9:ff:16:ed:af:d3:47:79:cc:
         39:85:b6:0e:68:58:00:e3:87:20:e1:23:3c:f0:56:13:8f:d3:
         62:f4:8a:18
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgIUAQ0Mn0MoWEceEsORWbun656mRSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDkwNTIxNTIwMFoXDTI0MTIwNDIyNTIwMFowLzEtMCsGA1UEAxMk
ZjRlOWJiM2YtMjA0OS00MzQ1LTk5MzQtMjdmMTg2ZjY1MmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjcuN+W9gPcKAsmXiBriMasZ9WN0QD+1W+qd
CzNCPrli9FTj3k4sYFdrC9m7VBdh/3HUW+BI+5EPg7JZ8LaW44Z3q8W+3EdUdnxQ
S3GK6JqX7Sp5dkjBMjv8e7MZjHbcd1pH5voJejRvyBLZqV7FFxVt1ZqPaxPTvfg2
t/ZoTvtCc0mfFNQ/MsXr88FEvlKTLz+mX2RjC/4H/ZGujKzyJiEsOE88RTyVkRr7
+WzZ2komG8Sfk5Mm5fkzUkx5gHaw/zHvaiOhCW8UlRBzLBNDCU+1n7z1eKSQCXc4
76fAoMWrwB430gbfOzG2bLK14eQLPD/uj9jzVuv6OI2/RwWmPQIDAQABo4IDxzCC
A8MwHQYDVR0OBBYEFOLGLS+/UU+i3hA2h72hYDTc5+AlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTU5YWY0MWUtMzc1MC0z
OTAwLThiZmQtMjdkMDNhZWU5ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAX5lkD
BAAX5o0DBAAtJj0DBAAtJtgDBAAtJyEDBAAtJ0QDBAAtJ1kDBAAtJ78DBAAtJ9wD
BAAtJ+QDBAAydQcDBABopb0DBABo/ZEwDAMEAGj9owMEAGj9pDAMAwQAaP2pAwQA
aP2qAwQAaP2vAwQAaP2+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE+sDRboUTk74dfe0RpshPaWvbl4ajtp
Oir/SwPGZURN8nTPALgT8iou2tJQ08HoAKBsb4ouu8rmWza3IEi6rR1Sm9ByDVY9
VaPzcom5zJH9Oq9NeqkEnpzcDHRpQbobjmFUofxtuY0ErUDZ0/sxb5v6rZaMkWYQ
JsCXRpTLtaRXb8RpcIuAplet7hsThRC4R55mNqAyBqINN946ALX1BMTjFE7RceAP
vmk5fj+JBgnUOdglKYbOeXB5o8ol+lsdSiFjCTNkCU+WrC+lzAIYMawbWNi92fkO
wzQrZDvbYGJTj8n/Fu2v00d5zDmFtg5oWADjhyDhIzzwVhOP02L0ihg=
-----END CERTIFICATE-----
Generated at Tue Sep 10 18:29:06 2024 by rpki-client on console-ams.rpki-client.org