Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee0e8263-fb5c-39fb-b84e-7359a26b985f.roa
File:                     ee0e8263-fb5c-39fb-b84e-7359a26b985f.roa (raw, json)
Hash identifier:          4/qmqRAZYFmbPVoXQmq1cVjrdsOqVfgOhW4EBoZ9f44=
Subject key identifier:   D2:7C:8C:D2:03:F2:20:49:D8:5A:26:65:D7:97:2F:8A:B8:0E:86:64
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845F27E7B4A3F3350DFF68C0040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee0e8263-fb5c-39fb-b84e-7359a26b985f.roa
Signing time:             Tue 21 May 2024 14:26:32 +0000
ROA not before:           Tue 21 May 2024 14:26:32 +0000
ROA not after:            Mon 19 Aug 2024 14:26:32 +0000
asID:                     3561
IP address blocks:        104.253.36.0/24 maxlen: 24
                          50.117.97.0/24 maxlen: 24
                          23.230.194.0/24 maxlen: 24
                          23.230.240.0/24 maxlen: 24
                          23.230.243.0/24 maxlen: 24
                          68.68.99.0/24 maxlen: 24
                          69.46.65.0/24 maxlen: 24
                          50.117.73.0/24 maxlen: 24
                          50.117.64.0/24 maxlen: 24
                          45.38.219.0/24 maxlen: 24
                          50.117.48.0/24 maxlen: 24
                          50.117.100.0/24 maxlen: 24
                          50.117.105.0/24 maxlen: 24
                          50.117.110.0/24 maxlen: 24
                          104.253.173.0/24 maxlen: 24
                          142.252.6.0/24 maxlen: 24
                          142.252.21.0/24 maxlen: 24
                          142.252.116.0/24 maxlen: 24
                          142.252.31.0/24 maxlen: 24
                          142.252.55.0/24 maxlen: 24
                          142.252.184.0/24 maxlen: 24
                          172.120.6.0/24 maxlen: 24
                          172.121.6.0/24 maxlen: 24
                          172.121.28.0/24 maxlen: 24
                          172.252.153.0/24 maxlen: 24
                          172.252.165.0/24 maxlen: 24
                          172.252.184.0/24 maxlen: 24
                          172.252.186.0/24 maxlen: 24
                          192.177.53.0/24 maxlen: 24
                          192.177.72.0/24 maxlen: 24
                          192.177.84.0/24 maxlen: 24
                          192.177.90.0/24 maxlen: 24
                          104.253.41.0/24 maxlen: 24
                          23.230.17.0/24 maxlen: 24
                          23.230.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 00:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:7e:7b:4a:3f:33:50:df:f6:8c:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 21 14:26:32 2024 GMT
            Not After : Aug 19 14:26:32 2024 GMT
        Subject: CN=54f726a9-88cf-40b9-aba1-19ab21a43aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:a8:8a:c3:10:b7:82:ed:9f:6a:aa:cd:55:
                    41:9b:88:b8:c9:b8:0a:1d:db:23:9d:98:a7:b4:b4:
                    06:45:da:d3:aa:58:61:2c:97:93:a5:5b:76:14:b9:
                    55:ac:52:0d:76:81:32:b9:c6:ca:07:5c:85:99:4d:
                    a1:6d:7f:1e:f6:9e:d1:33:4d:4c:07:b7:24:14:c6:
                    8e:9a:8a:30:95:56:8b:75:0b:9f:2c:a1:5e:c3:3a:
                    d6:94:4f:6e:6d:9a:0a:bf:ef:fc:09:85:31:55:9a:
                    ca:99:03:74:9e:97:ed:50:89:26:db:04:34:54:1a:
                    72:57:b8:f3:c4:63:28:07:cb:37:47:c6:b3:c3:cf:
                    4d:ca:19:fd:b5:54:57:11:49:7f:77:d9:90:7e:a8:
                    0f:09:b8:fe:7d:f3:de:99:37:07:ac:e0:9c:6b:1d:
                    fb:34:f0:5d:91:ed:d5:61:36:52:5a:08:a1:7b:53:
                    17:0b:5c:dc:a9:a6:f4:ae:4d:d4:9b:f4:1d:ba:49:
                    9d:68:7f:bb:71:a6:97:fc:1c:76:37:44:54:9c:8f:
                    c4:81:f7:75:a2:8a:a6:99:c2:94:06:6c:6d:8d:13:
                    74:c7:89:33:0d:b8:e2:03:1c:93:3c:21:56:b5:c4:
                    db:b1:a8:52:e1:f3:9b:95:c4:29:01:61:91:1a:40:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:8C:D2:03:F2:20:49:D8:5A:26:65:D7:97:2F:8A:B8:0E:86:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee0e8263-fb5c-39fb-b84e-7359a26b985f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.17.0/24
                  23.230.137.0/24
                  23.230.194.0/24
                  23.230.240.0/24
                  23.230.243.0/24
                  45.38.219.0/24
                  50.117.48.0/24
                  50.117.64.0/24
                  50.117.73.0/24
                  50.117.97.0/24
                  50.117.100.0/24
                  50.117.105.0/24
                  50.117.110.0/24
                  68.68.99.0/24
                  69.46.65.0/24
                  104.253.36.0/24
                  104.253.41.0/24
                  104.253.173.0/24
                  142.252.6.0/24
                  142.252.21.0/24
                  142.252.31.0/24
                  142.252.55.0/24
                  142.252.116.0/24
                  142.252.184.0/24
                  172.120.6.0/24
                  172.121.6.0/24
                  172.121.28.0/24
                  172.252.153.0/24
                  172.252.165.0/24
                  172.252.184.0/24
                  172.252.186.0/24
                  192.177.53.0/24
                  192.177.72.0/24
                  192.177.84.0/24
                  192.177.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:5b:54:cb:2f:77:c2:9d:eb:33:e1:00:25:b0:c8:1d:30:
         d1:a7:ae:e3:85:29:c0:3e:f2:c5:28:49:99:18:8d:af:66:a1:
         60:66:4e:5d:8a:fd:d8:10:57:54:27:36:a6:4e:29:b8:ba:45:
         0f:2b:10:f4:08:f4:fd:2a:b4:c0:87:ca:76:fb:67:55:f5:fb:
         77:e5:b2:aa:d4:b5:9d:84:a1:61:af:cd:14:e0:74:97:29:e2:
         6f:f0:26:de:07:ab:e0:d4:80:8e:cc:06:b3:29:46:62:a5:a8:
         92:21:31:5d:02:72:30:19:7f:bb:90:58:6a:44:a6:f0:b4:16:
         11:b9:35:50:36:7a:ea:e5:a4:92:6e:99:99:35:d5:1f:a7:bd:
         da:a7:2d:e2:52:ef:05:bf:ba:52:ae:db:f2:6b:d9:a4:a7:2b:
         46:1f:9c:d1:1c:d7:aa:f3:8a:d2:e3:39:4c:33:a0:f6:11:24:
         aa:a0:6b:15:85:9e:c8:1a:0d:ed:eb:21:e8:9c:d6:9a:58:d7:
         ec:0d:ab:cb:11:ab:79:cd:db:8c:f2:36:5f:02:44:aa:5b:2e:
         d8:15:c5:4d:94:b3:d8:e5:72:c5:c1:fe:cc:25:fc:ba:4e:12:
         c8:5d:7e:4b:ee:b2:a4:6c:ca:44:4c:5d:d2:e1:f2:67:d1:02:
         ba:f5:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 03:18:33 2024 by rpki-client on console-ams.rpki-client.org