Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec699314-b9f1-317d-b61a-f3e47de84a7f.roa
File:                     ec699314-b9f1-317d-b61a-f3e47de84a7f.roa (raw, json)
Hash identifier:          OuHBSBOgNyWd2znjqOmt1Y9CVHMiHxiR5NSrvpR9w9U=
Subject key identifier:   44:5E:93:73:0E:EC:A2:08:AD:AF:03:26:37:A8:BD:56:7A:9A:AB:C9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584769D0E9A88D3B16D1BDC870C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec699314-b9f1-317d-b61a-f3e47de84a7f.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     44893
IP address blocks:        142.252.7.0/24 maxlen: 24
                          142.252.17.0/24 maxlen: 24
                          142.252.23.0/24 maxlen: 24
                          142.252.27.0/24 maxlen: 24
                          142.252.36.0/24 maxlen: 24
                          142.252.39.0/24 maxlen: 24
                          142.252.58.0/24 maxlen: 24
                          142.252.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 12:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e9:a8:8d:3b:16:d1:bd:c8:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=ec45577b-d666-4473-b6a6-37b1e8d5695b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:c0:8c:9e:f7:a0:8c:98:7c:dd:fa:68:9d:
                    9c:a0:6b:d9:91:9f:2b:8c:a0:92:ce:c1:62:14:45:
                    89:10:7d:30:d5:d0:2a:26:af:02:1e:07:7d:20:70:
                    2f:08:7c:0e:68:1c:9b:7e:fe:d5:98:a9:5c:74:6a:
                    ac:d3:30:ad:74:84:c4:69:86:e1:d0:df:f4:d1:93:
                    8b:54:0a:ed:b1:a1:cc:14:7b:7f:b2:2d:64:ea:03:
                    5b:e4:95:2c:6d:3f:a8:b2:c0:64:bc:18:e1:26:e0:
                    01:45:b8:06:57:a7:c9:e9:53:1f:84:bc:5e:7a:9d:
                    ea:0d:b1:f3:c4:24:e5:9a:43:8a:82:d0:7d:39:6f:
                    a6:91:9d:33:b1:a9:40:26:d1:48:cb:9d:95:50:c6:
                    64:3b:6b:48:c6:87:54:73:ea:35:f0:d1:80:03:51:
                    62:d5:cd:54:f4:c5:3f:1f:d9:0b:dc:d4:03:d8:d5:
                    93:be:e0:77:be:a6:d0:ad:51:2c:54:9d:e9:cf:4e:
                    3b:61:b8:77:1a:0f:8a:ba:b6:ed:38:2e:03:95:ab:
                    f1:17:48:13:f3:49:79:ad:5d:be:04:89:c8:26:96:
                    a2:d1:38:ef:4e:47:05:b5:df:0c:81:21:bd:f0:d6:
                    73:b7:8d:c4:61:26:c3:59:92:1c:4b:06:57:af:c5:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:93:73:0E:EC:A2:08:AD:AF:03:26:37:A8:BD:56:7A:9A:AB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec699314-b9f1-317d-b61a-f3e47de84a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.7.0/24
                  142.252.17.0/24
                  142.252.23.0/24
                  142.252.27.0/24
                  142.252.36.0/24
                  142.252.39.0/24
                  142.252.58.0/24
                  142.252.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:cc:ee:60:c6:dd:f6:0a:ba:b8:66:58:1a:5f:36:13:64:
         b8:fb:6a:68:aa:2a:9d:0b:03:18:fb:ed:b6:7e:d3:4e:87:df:
         31:e6:47:f2:26:b6:43:3d:77:80:27:bc:2c:25:e9:72:96:e1:
         72:d8:8a:ad:5e:3d:06:e3:d6:cd:41:7e:b9:67:62:62:ec:cb:
         cc:86:25:d6:9f:46:30:96:5c:82:4b:1f:7b:ec:e1:9e:69:50:
         c0:6d:2e:5a:52:fa:de:56:83:1f:91:6e:21:75:9b:47:6b:5c:
         19:50:e0:8b:f4:5f:7f:bb:a6:49:2e:91:44:58:30:1d:53:b8:
         3c:90:d8:37:69:8f:98:ee:6f:8a:30:88:f0:ae:ff:40:a4:d5:
         a1:ee:be:ac:7c:22:57:c8:9b:44:e0:cd:4e:0e:0e:1a:c0:c3:
         4b:93:5a:73:38:29:f7:0a:26:84:5f:68:5a:0d:d2:60:6b:29:
         29:3e:3f:f8:e5:7d:7c:32:5c:e0:09:fd:06:d9:35:c3:ab:8c:
         44:71:02:7d:12:11:52:50:c5:17:1a:5b:0a:ca:1e:99:a3:43:
         72:26:57:8e:e4:18:be:d1:04:6a:3a:db:8a:7f:e0:db:4c:14:
         e7:14:8f:b4:cf:27:c5:2e:b8:d2:4b:5d:1d:a0:c8:17:e0:ac:
         cd:98:b2:1f
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEdp0OmojTsW0b3IcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWM0NTU3N2ItZDY2Ni00NDczLWI2YTYtMzdiMWU4ZDU2OTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg7AjJ73oIyYfN36aJ2coGvZkZ8rjKCSzsFi
FEWJEH0w1dAqJq8CHgd9IHAvCHwOaBybfv7VmKlcdGqs0zCtdITEaYbh0N/00ZOL
VArtsaHMFHt/si1k6gNb5JUsbT+ossBkvBjhJuABRbgGV6fJ6VMfhLxeep3qDbHz
xCTlmkOKgtB9OW+mkZ0zsalAJtFIy52VUMZkO2tIxodUc+o18NGAA1Fi1c1U9MU/
H9kL3NQD2NWTvuB3vqbQrVEsVJ3pz047Ybh3Gg+KurbtOC4DlavxF0gT80l5rV2+
BInIJpai0TjvTkcFtd8MgSG98NZzt43EYSbDWZIcSwZXr8UgOQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFERek3MO7KIIra8DJjeovVZ6mqvJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWM2OTkzMTQtYjlmMS0z
MTdkLWI2MWEtZjNlNDdkZTg0YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAjvwHAwQA
jvwRAwQAjvwXAwQAjvwbAwQAjvwkAwQAjvwnAwQAjvw6AwQAjvxdMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ADEczO5gxt32Crq4ZlgaXzYTZLj7amiqKp0LAxj77bZ+006H3zHmR/ImtkM9d4An
vCwl6XKW4XLYiq1ePQbj1s1BfrlnYmLsy8yGJdafRjCWXIJLH3vs4Z5pUMBtLlpS
+t5Wgx+RbiF1m0drXBlQ4Iv0X3+7pkkukURYMB1TuDyQ2Ddpj5jub4owiPCu/0Ck
1aHuvqx8IlfIm0TgzU4ODhrAw0uTWnM4KfcKJoRfaFoN0mBrKSk+P/jlfXwyXOAJ
/QbZNcOrjERxAn0SEVJQxRcaWwrKHpmjQ3ImV47kGL7RBGo624p/4NtMFOcUj7TP
J8UuuNJLXR2gyBfgrM2Ysh8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:25 2024 by rpki-client on console-ams.rpki-client.org