Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bac5f050-7b29-30d2-befe-1e5bd1035e5f.roa
File:                     bac5f050-7b29-30d2-befe-1e5bd1035e5f.roa (raw, json)
Hash identifier:          pHckmroglJpEJtiQBS09ftVTXzsmzO++ThQ3sH7F+Uc=
Subject key identifier:   1E:40:4A:60:56:5F:46:ED:48:40:42:12:52:13:CF:EC:EC:1F:D6:E1
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584577B707A4D7F051D287F39D80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bac5f050-7b29-30d2-befe-1e5bd1035e5f.roa
Signing time:             Sun 07 Apr 2024 14:56:03 +0000
ROA not before:           Sun 07 Apr 2024 14:56:03 +0000
ROA not after:            Sat 06 Jul 2024 14:56:03 +0000
asID:                     7018
IP address blocks:        74.80.156.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.241.0/24 maxlen: 24
                          74.80.189.0/24 maxlen: 24
                          74.80.191.0/24 maxlen: 24
                          74.80.176.0/24 maxlen: 24
                          74.80.188.0/24 maxlen: 24
                          74.80.172.0/24 maxlen: 24
                          74.80.173.0/24 maxlen: 24
                          74.80.166.0/24 maxlen: 24
                          74.80.167.0/24 maxlen: 24
                          74.80.158.0/24 maxlen: 24
                          74.80.159.0/24 maxlen: 24
                          74.80.153.0/24 maxlen: 24
                          74.80.147.0/24 maxlen: 24
                          74.80.152.0/24 maxlen: 24
                          74.80.144.0/24 maxlen: 24
                          74.80.146.0/24 maxlen: 24
                          206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.249.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
                          206.212.255.0/24 maxlen: 24
                          67.214.180.0/24 maxlen: 24
                          67.214.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 16:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:b7:07:a4:d7:f0:51:d2:87:f3:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Apr  7 14:56:03 2024 GMT
            Not After : Jul  6 14:56:03 2024 GMT
        Subject: CN=ca0f48e9-0ec6-408c-a1a8-23bae86106bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:80:fe:9a:5f:4a:22:96:ad:ee:53:50:36:
                    8b:9c:dc:5c:ae:49:68:4e:ee:e8:94:4d:4b:21:fb:
                    b3:b3:5e:c6:65:2f:c1:39:6d:9c:1f:eb:9e:df:2e:
                    26:f4:54:4b:96:58:8f:4b:f4:8b:cf:7d:56:af:83:
                    bc:2c:a6:64:23:2a:6c:cc:c2:5b:e2:1f:ba:da:84:
                    10:6a:ef:4d:ad:89:e3:41:9f:6f:0b:37:55:1b:59:
                    c7:c3:42:2f:68:c2:0a:c2:66:95:b1:8f:22:70:1b:
                    f2:35:24:0d:8a:bc:1b:94:92:5e:80:fd:8c:cf:b0:
                    9c:dc:92:2d:68:45:16:8b:e4:56:5d:cb:29:a3:45:
                    9c:3a:d2:50:cb:02:cb:bc:40:00:cb:ea:fd:60:1c:
                    76:b0:a9:6f:6c:16:95:67:a8:43:f8:9d:ad:36:6a:
                    aa:89:81:29:09:94:7d:67:47:83:96:ff:21:d0:e1:
                    a3:12:52:5f:07:71:16:20:3c:5c:8b:d3:ad:13:38:
                    35:df:82:9b:a5:10:73:65:c5:e4:fc:55:18:ef:9d:
                    fd:d5:7b:12:f4:e8:b1:ff:82:14:3b:c9:37:16:ab:
                    3d:d9:d4:82:b5:a9:44:7c:2b:e1:4f:bb:e3:bd:1b:
                    48:b4:d3:d6:c9:3c:a7:14:e5:94:a2:0c:03:8d:76:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:4A:60:56:5F:46:ED:48:40:42:12:52:13:CF:EC:EC:1F:D6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bac5f050-7b29-30d2-befe-1e5bd1035e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.180.0/23
                  74.80.144.0/24
                  74.80.146.0/23
                  74.80.152.0/23
                  74.80.156.0/24
                  74.80.158.0/23
                  74.80.166.0/23
                  74.80.172.0/23
                  74.80.176.0/24
                  74.80.188.0/23
                  74.80.191.0/24
                  206.212.241.0/24
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.249.0-206.212.250.255
                  206.212.252.0/24
                  206.212.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:2e:3c:45:96:ed:60:83:7e:f4:96:78:da:e5:cc:ac:9a:
         d2:66:84:d2:59:09:b6:ac:c6:c0:82:6f:65:0f:cf:32:8d:b2:
         78:3f:8c:a0:49:f4:53:50:f8:b7:6b:d9:ae:bb:71:d1:b8:fb:
         78:29:22:c0:cd:56:55:cf:dd:17:33:ba:c1:79:55:ab:ad:ac:
         eb:6d:2f:eb:32:f5:f4:1f:09:58:f0:07:a1:b4:27:3e:73:15:
         c0:81:63:35:0a:5b:8c:47:3a:51:aa:dd:a3:ac:26:fd:20:84:
         ce:59:00:26:5c:85:e4:a4:c5:0b:04:53:d0:31:a0:9f:ff:9a:
         90:df:e5:7a:c3:70:f4:07:28:87:44:b8:c0:a2:7d:ea:b5:c7:
         fa:4e:39:28:2d:66:95:7e:1e:2c:fc:43:5a:0b:0c:60:80:ac:
         02:22:cb:0e:a8:48:a9:59:64:47:cf:87:e7:e5:01:2a:aa:1f:
         49:5b:25:62:8d:02:a2:c6:de:8d:69:4c:e0:c8:c7:cf:20:76:
         06:8b:45:b8:af:ca:b6:a6:d0:c0:ff:13:31:5a:67:b8:bb:e0:
         b4:68:15:ec:9d:d9:53:26:2f:ed:02:a3:82:6f:b3:81:9b:ae:
         2c:46:26:38:fb:b1:60:f9:4f:2b:ce:33:32:0e:d7:c3:6f:78:
         e9:69:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 19:28:52 2024 by rpki-client on console-ams.rpki-client.org