Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f6966ab0-7427-3e24-b945-0316d5fb6959.roa
File:                     f6966ab0-7427-3e24-b945-0316d5fb6959.roa (raw, json)
Hash identifier:          /FnMWjWup/NxpdJXSZP3LglmSHnvt0M9pHR0LHoAG8s=
Subject key identifier:   A8:DD:0C:58:63:B4:18:77:79:8E:9C:2B:92:FB:73:AA:DE:E2:5F:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845A7C96F33F4B43F0A2BD80B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f6966ab0-7427-3e24-b945-0316d5fb6959.roa
Signing time:             Wed 24 Apr 2024 20:11:56 +0000
ROA not before:           Wed 24 Apr 2024 20:11:56 +0000
ROA not after:            Tue 23 Jul 2024 20:11:56 +0000
asID:                     3561
IP address blocks:        104.164.39.0/24 maxlen: 24
                          104.164.158.0/24 maxlen: 24
                          104.165.1.0/24 maxlen: 24
                          104.165.15.0/24 maxlen: 24
                          104.165.68.0/24 maxlen: 24
                          104.165.103.0/24 maxlen: 24
                          104.165.194.0/24 maxlen: 24
                          104.165.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:c9:6f:33:f4:b4:3f:0a:2b:d8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 20:11:56 2024 GMT
            Not After : Jul 23 20:11:56 2024 GMT
        Subject: CN=4ac6cafe-78a0-47f0-a208-483ff5aee712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:9e:a6:49:a1:00:46:eb:a3:4b:1b:e7:a9:
                    5d:35:b5:76:13:72:88:ab:fe:e2:0c:d8:e4:90:9c:
                    01:ee:20:97:e7:35:d2:2e:34:0d:50:c7:51:c3:9d:
                    fb:8b:8f:1a:db:3c:04:8b:a5:50:f2:8a:6f:e9:04:
                    74:35:52:86:f7:0c:8e:f7:f1:51:c4:d3:9f:7e:4f:
                    34:41:88:ca:3a:d0:47:3b:9e:86:1d:9a:e9:20:a1:
                    24:7f:8a:b1:95:1e:ab:69:30:ea:87:d4:fe:90:a0:
                    73:8e:ec:c4:7c:03:16:d1:f2:f4:f4:b1:74:0b:fb:
                    e4:95:80:a1:4c:b8:3d:7c:26:b7:fc:7d:f8:20:fb:
                    c4:95:37:23:f7:12:a7:82:f7:40:30:26:14:0f:56:
                    b5:12:bc:a2:d9:27:a8:eb:bf:06:92:94:69:0d:10:
                    31:3f:8a:a8:a8:95:04:53:0b:b6:69:f5:27:e8:7c:
                    8e:3f:fc:0e:90:c1:00:ed:77:30:1a:ff:19:0b:de:
                    04:29:be:54:e0:ab:bf:73:5f:06:e6:4e:2e:4c:77:
                    5d:37:2d:cc:42:26:ab:e5:19:bd:f8:7c:45:a1:8d:
                    03:33:38:12:89:b3:43:b8:3e:53:ef:b0:de:1b:bf:
                    c2:e3:12:85:a0:27:58:c9:32:87:ab:12:b4:8f:cb:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DD:0C:58:63:B4:18:77:79:8E:9C:2B:92:FB:73:AA:DE:E2:5F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f6966ab0-7427-3e24-b945-0316d5fb6959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.39.0/24
                  104.164.158.0/24
                  104.165.1.0/24
                  104.165.15.0/24
                  104.165.68.0/24
                  104.165.103.0/24
                  104.165.194.0/24
                  104.165.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:2c:f3:90:98:c3:ff:90:68:85:2f:40:cd:95:7c:31:d2:
         44:6f:86:e3:e9:77:7d:40:b0:dc:6d:9a:d0:ae:0c:f3:30:4a:
         6b:b5:cf:91:35:26:57:99:f1:86:15:2d:fd:8e:f6:c2:e2:3a:
         f3:71:b2:57:18:a1:1a:bb:58:16:9a:0c:9d:0a:3a:c2:7e:59:
         48:bc:2c:58:8b:24:97:2b:a4:f1:d8:04:9c:d9:c9:d3:ab:a1:
         3e:4f:04:0e:97:52:d5:93:a7:f8:c5:a6:2c:fc:0d:d2:fc:10:
         38:5b:e3:05:e8:e6:8f:2b:21:c9:49:ae:da:e6:4e:2d:10:44:
         28:dc:6c:25:45:cb:af:ad:d0:be:af:e4:56:96:e2:7d:09:48:
         48:ff:65:3f:18:1d:25:ce:68:92:91:b6:5e:29:44:c4:61:e1:
         6e:6d:51:20:dd:d4:81:3b:1c:b3:68:4e:1a:1d:5c:2f:d2:f6:
         5d:d0:0f:c3:1a:31:d7:4f:95:58:7f:33:b2:6f:44:ae:94:66:
         73:6c:99:e2:0c:75:94:41:3b:58:5d:27:88:b8:d6:20:04:73:
         d0:0e:2f:92:e1:e8:41:27:c1:8f:97:97:25:50:da:59:b3:2a:
         dc:e3:5d:b0:92:04:45:15:ff:52:16:8d:6a:37:75:f0:3c:78:
         be:03:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:34 2024 by rpki-client on console-fra.rpki-client.org