Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/83de99f9-9a68-332d-b3bc-380ef4dc9b6e.roa
File:                     83de99f9-9a68-332d-b3bc-380ef4dc9b6e.roa (raw, json)
Hash identifier:          ZKz6hsDqByRc9HUPNTXGWhwvnkj4d3to2DLr0uhssQU=
Subject key identifier:   60:B7:66:D4:7E:C1:D8:F3:4E:6E:EF:09:BA:91:20:16:A6:BE:CD:FF
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584577B555BD0A503624D5815558
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/83de99f9-9a68-332d-b3bc-380ef4dc9b6e.roa
Signing time:             Sun 07 Apr 2024 14:52:38 +0000
ROA not before:           Sun 07 Apr 2024 14:52:38 +0000
ROA not after:            Sat 06 Jul 2024 14:52:38 +0000
asID:                     7029
IP address blocks:        74.80.156.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.241.0/24 maxlen: 24
                          74.80.189.0/24 maxlen: 24
                          74.80.191.0/24 maxlen: 24
                          74.80.176.0/24 maxlen: 24
                          74.80.188.0/24 maxlen: 24
                          74.80.172.0/24 maxlen: 24
                          74.80.173.0/24 maxlen: 24
                          74.80.166.0/24 maxlen: 24
                          74.80.167.0/24 maxlen: 24
                          74.80.158.0/24 maxlen: 24
                          74.80.159.0/24 maxlen: 24
                          74.80.153.0/24 maxlen: 24
                          74.80.147.0/24 maxlen: 24
                          74.80.152.0/24 maxlen: 24
                          74.80.144.0/24 maxlen: 24
                          74.80.146.0/24 maxlen: 24
                          206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.249.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
                          206.212.255.0/24 maxlen: 24
                          67.214.180.0/24 maxlen: 24
                          67.214.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 16:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:b5:55:bd:0a:50:36:24:d5:81:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Apr  7 14:52:38 2024 GMT
            Not After : Jul  6 14:52:38 2024 GMT
        Subject: CN=035fa08d-d01d-4ec9-8f86-4577e1eb3900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:36:e9:20:3c:ff:28:07:47:81:bf:8b:61:
                    60:6b:75:23:91:9f:5f:ea:08:ea:c9:d9:43:88:92:
                    54:6c:ba:23:c6:ea:5c:d7:9d:2f:58:d1:5b:11:04:
                    c4:57:e6:5b:f4:33:05:5a:66:02:2a:38:88:8d:1c:
                    b0:8d:d3:44:78:46:2a:e1:4a:08:31:e6:da:56:f8:
                    e0:09:24:af:f9:08:6c:94:89:22:bb:a6:59:dc:b1:
                    63:3c:00:ce:41:9c:76:cd:10:d9:60:d3:55:25:c6:
                    8d:2a:92:1f:ba:09:e7:19:33:24:22:01:dc:b4:4d:
                    e5:d4:3d:43:40:16:80:f0:69:3d:d6:3e:39:5f:54:
                    73:e2:06:31:f8:86:86:47:da:79:78:21:e5:dc:4f:
                    e1:b2:02:b4:32:78:7d:77:de:f1:b0:05:ac:32:f0:
                    04:e7:5e:f7:ec:99:98:7e:17:ed:51:df:72:8a:61:
                    55:bc:81:fc:56:77:bb:e9:b8:6e:ff:ec:bd:f5:a0:
                    eb:f4:3f:bd:a7:06:54:40:50:23:93:96:10:22:af:
                    ea:a5:5a:af:1d:f1:06:23:52:96:00:2b:6e:aa:09:
                    39:d2:74:8d:35:39:1b:c8:3e:34:c4:3f:b9:5f:9d:
                    c6:8a:80:a4:79:e5:0f:2b:7e:87:c7:75:85:47:57:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:66:D4:7E:C1:D8:F3:4E:6E:EF:09:BA:91:20:16:A6:BE:CD:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/83de99f9-9a68-332d-b3bc-380ef4dc9b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.180.0/23
                  74.80.144.0/24
                  74.80.146.0/23
                  74.80.152.0/23
                  74.80.156.0/24
                  74.80.158.0/23
                  74.80.166.0/23
                  74.80.172.0/23
                  74.80.176.0/24
                  74.80.188.0/23
                  74.80.191.0/24
                  206.212.241.0/24
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.249.0-206.212.250.255
                  206.212.252.0/24
                  206.212.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:62:8d:5d:aa:10:a7:12:0b:f0:eb:58:65:38:f5:b8:21:
         a2:e9:ed:43:61:bd:c8:39:f5:91:a6:b9:33:a0:15:e9:1f:13:
         ee:b8:ec:72:94:78:a6:f2:ea:16:f4:3b:2a:ce:a5:1c:53:0a:
         0a:93:45:aa:cb:12:bb:d4:ff:44:92:21:a3:ed:66:ad:8d:8d:
         eb:7b:8c:6e:d6:60:c8:fd:38:6f:20:63:43:e5:c6:a3:1a:63:
         6d:4d:56:12:87:5a:07:e7:86:4d:48:bc:f3:8c:51:21:8d:e6:
         35:66:1c:af:c1:51:f7:04:8a:3c:af:6f:5c:6a:fa:11:c8:58:
         b7:e1:0a:b1:ff:67:8f:16:74:96:32:de:eb:30:ea:4e:52:33:
         7f:5f:d7:34:c4:e1:24:e7:ea:04:9e:d2:18:7d:e2:3f:2f:80:
         c7:35:93:96:a7:cc:69:97:c7:14:65:14:1b:77:39:cd:25:33:
         ab:1e:a1:92:2f:70:9e:06:4f:20:d3:89:ae:2a:7f:c2:f8:30:
         3a:40:43:86:89:d1:16:b8:cb:1f:d8:a0:43:0d:36:95:e0:74:
         20:d8:0c:f4:ce:a9:d3:bb:4c:81:87:53:97:71:df:b4:a0:30:
         47:0b:33:a1:60:ac:d9:fa:54:cb:38:59:69:1b:5e:74:ba:4a:
         92:94:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 19:28:52 2024 by rpki-client on console-ams.rpki-client.org