Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0f3649e-5b26-3472-a6cd-8f2126928188.roa
File:                     f0f3649e-5b26-3472-a6cd-8f2126928188.roa (raw, json)
Hash identifier:          PyKMQDNAJeTtRm6vL6xhGIL1oJJOT9qEv37k2opZUk8=
Subject key identifier:   B2:29:DF:B2:1A:5F:63:7B:13:CC:BA:50:0D:53:B8:2E:36:D9:CE:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858454C380A026A50C407E27FDB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0f3649e-5b26-3472-a6cd-8f2126928188.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     203061
IP address blocks:        45.39.106.0/24 maxlen: 24
                          23.230.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 23:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0a:02:6a:50:c4:07:e2:7f:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=a000e9de-22e4-4f9c-a9ea-38f37b32ff8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:ff:85:20:3b:6a:41:46:3f:62:4c:47:0b:
                    8c:d2:1a:82:ba:86:bf:53:7a:fd:03:69:64:34:2e:
                    cc:75:db:c4:42:e5:3f:60:03:d5:ae:50:b2:2d:44:
                    5d:d7:2c:43:65:e1:77:1a:31:2b:1b:ee:40:8f:80:
                    09:0e:1a:c9:54:67:9c:6c:26:75:a4:bf:3f:df:3a:
                    1e:54:b6:16:d6:29:54:c2:c4:15:e5:70:37:d5:b3:
                    22:7d:38:d9:01:12:58:1d:4c:5a:46:85:67:24:86:
                    59:eb:e8:35:fe:a6:88:8e:7e:0f:e3:ef:f3:b2:67:
                    6d:a9:a1:44:93:59:42:a7:27:aa:d5:cc:db:b1:30:
                    61:2c:6c:2d:ca:36:69:8b:00:7f:c4:c7:fc:a4:97:
                    45:08:20:0f:9d:1e:51:6c:de:4e:75:4a:01:c9:dc:
                    98:1e:a0:55:9c:d1:73:56:27:83:c5:97:b1:ae:9f:
                    7f:63:5b:d7:36:89:5a:9d:c0:1b:4e:54:3e:fa:41:
                    59:48:32:94:d1:d0:d8:27:34:1b:71:68:9e:95:10:
                    ff:8d:16:9a:1c:9e:56:01:ce:b0:b8:1c:f9:b6:f1:
                    ee:d3:3c:21:f2:b5:8a:b8:eb:f6:8d:5d:73:0c:b5:
                    13:d7:b0:dc:a8:8e:20:42:f4:ee:d0:81:6d:61:47:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:29:DF:B2:1A:5F:63:7B:13:CC:BA:50:0D:53:B8:2E:36:D9:CE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0f3649e-5b26-3472-a6cd-8f2126928188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.104.0/24
                  45.39.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:18:9b:93:c1:34:2f:90:22:ed:2a:45:53:82:13:e8:1b:
         61:e4:8d:2c:cc:d3:4d:4e:0e:26:be:7f:76:48:66:40:a4:4c:
         0c:61:19:48:7c:9a:47:ff:da:82:d8:61:8d:02:93:52:c8:a7:
         0e:ed:f0:66:28:46:e2:85:64:0d:a8:da:36:77:10:16:19:3e:
         87:06:84:58:c7:ae:f9:35:01:21:36:48:04:1c:e7:3c:77:f6:
         06:17:3c:f6:fb:9b:de:0f:35:4c:59:77:3e:42:fa:b3:be:a4:
         17:ee:ed:01:c8:d3:00:58:c9:08:f0:d3:c2:73:e9:8a:13:b9:
         65:2e:26:b1:8c:1f:42:1a:47:d5:89:b3:70:7b:61:21:1d:99:
         78:12:d9:0d:ae:07:a6:26:2e:ec:3e:92:34:af:5a:3e:ea:86:
         dc:4f:13:a5:cb:4b:e0:8e:ce:ba:26:b4:2a:40:b4:f7:ca:6d:
         11:a5:2d:38:d3:4d:c3:6e:a5:0c:95:f5:a1:9b:ef:d3:72:4a:
         77:96:ea:b7:95:1a:6c:42:53:f3:6a:ca:a2:a9:91:40:48:24:
         6e:94:ea:c0:61:4b:2a:ac:e7:1e:b1:e8:d5:cd:56:eb:38:e9:
         6e:ea:a4:85:8b:63:3c:32:1f:a4:34:a9:64:8c:d3:00:98:22:
         be:09:7d:20
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVMOAoCalDEB+J/24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
YTAwMGU5ZGUtMjJlNC00ZjljLWE5ZWEtMzhmMzdiMzJmZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn7/hSA7akFGP2JMRwuM0hqCuoa/U3r9A2lk
NC7MddvEQuU/YAPVrlCyLURd1yxDZeF3GjErG+5Aj4AJDhrJVGecbCZ1pL8/3zoe
VLYW1ilUwsQV5XA31bMifTjZARJYHUxaRoVnJIZZ6+g1/qaIjn4P4+/zsmdtqaFE
k1lCpyeq1czbsTBhLGwtyjZpiwB/xMf8pJdFCCAPnR5RbN5OdUoBydyYHqBVnNFz
VieDxZexrp9/Y1vXNolancAbTlQ++kFZSDKU0dDYJzQbcWielRD/jRaaHJ5WAc6w
uBz5tvHu0zwh8rWKuOv2jV1zDLUT17DcqI4gQvTu0IFtYUceTQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLIp37IaX2N7E8y6UA1TuC422c78MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjBmMzY0OWUtNWIyNi0z
NDcyLWE2Y2QtOGYyMTI2OTI4MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+ZoAwQA
LSdqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJemGJuTwTQvkCLtKkVTghPoG2HkjSzM001ODia+f3ZIZkCk
TAxhGUh8mkf/2oLYYY0Ck1LIpw7t8GYoRuKFZA2o2jZ3EBYZPocGhFjHrvk1ASE2
SAQc5zx39gYXPPb7m94PNUxZdz5C+rO+pBfu7QHI0wBYyQjw08Jz6YoTuWUuJrGM
H0IaR9WJs3B7YSEdmXgS2Q2uB6YmLuw+kjSvWj7qhtxPE6XLS+COzromtCpAtPfK
bRGlLTjTTcNupQyV9aGb79NySneW6reVGmxCU/NqyqKpkUBIJG6U6sBhSyqs5x6x
6NXNVus46W7qpIWLYzwyH6Q0qWSM0wCYIr4JfSA=
-----END CERTIFICATE-----
Generated at Wed Apr 24 01:13:13 2024 by rpki-client on console-fra.rpki-client.org