Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d3875677-cc57-379a-ab2e-e22865794dbf.roa
File:                     d3875677-cc57-379a-ab2e-e22865794dbf.roa (raw, json)
Hash identifier:          Sick7yKylhWf/0lQIJkXBKyN+VQCMradrOR70XPRH24=
Subject key identifier:   63:DF:09:CC:B5:76:93:97:EE:11:73:35:D4:56:CB:29:53:EF:64:8E
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584699E95426747E6A302E12DF00
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d3875677-cc57-379a-ab2e-e22865794dbf.roa
Signing time:             Sat 20 Jul 2024 13:41:49 +0000
ROA not before:           Sat 20 Jul 2024 13:41:49 +0000
ROA not after:            Fri 18 Oct 2024 13:41:49 +0000
asID:                     55154
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.150.0/24 maxlen: 24
                          74.80.151.0/24 maxlen: 24
                          74.80.168.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
                          206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
                          206.212.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 18:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:99:e9:54:26:74:7e:6a:30:2e:12:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 20 13:41:49 2024 GMT
            Not After : Oct 18 13:41:49 2024 GMT
        Subject: CN=7de5dcd1-bd4a-4829-aaa1-d87386b237b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:06:fb:a6:4d:23:ef:fc:16:11:0a:81:f8:
                    d1:c1:3f:27:bd:b3:1e:24:4c:e7:58:73:0f:6d:af:
                    c3:3b:d9:11:dd:1c:03:60:c0:fa:2f:8e:43:16:0f:
                    2e:20:da:36:06:76:52:67:14:11:3b:85:a2:d4:dc:
                    8d:54:de:27:54:43:f4:98:41:f4:db:e6:5a:54:42:
                    16:b2:77:d5:a7:63:19:86:a4:76:ce:39:d4:1f:76:
                    58:19:7a:08:13:09:cf:e6:22:7c:71:7c:bf:92:68:
                    a4:c8:8b:4c:ad:e1:49:4b:cf:3b:e5:03:f2:2f:6a:
                    8d:2e:e6:c5:7b:d8:1e:15:3e:85:9f:ea:72:ac:b9:
                    86:69:9f:f9:b2:57:33:36:77:8c:f8:00:d2:86:63:
                    68:f5:a1:3c:da:07:41:42:cb:a0:d0:81:8e:89:c5:
                    5e:6d:04:cf:aa:bb:92:f0:a9:a8:ce:42:6a:85:bf:
                    27:6e:32:d3:52:75:b2:0c:df:c5:97:99:ae:ef:33:
                    2a:db:a8:ea:57:d2:a6:b4:d8:0e:15:7b:95:d4:78:
                    e0:43:d3:2e:fc:6b:72:c0:fd:0b:2d:90:02:4b:7c:
                    bd:fd:1e:42:c2:ab:4f:26:98:ac:2d:5c:bb:f4:12:
                    06:9d:1b:8e:db:64:0e:53:08:21:fa:67:0a:02:02:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:09:CC:B5:76:93:97:EE:11:73:35:D4:56:CB:29:53:EF:64:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d3875677-cc57-379a-ab2e-e22865794dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.150.0/23
                  74.80.168.0/24
                  74.80.187.0/24
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.250.0/24
                  206.212.252.0/24
                  206.212.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:81:1a:b6:71:21:ac:e1:a2:23:c4:87:6a:36:ec:f7:08:42:
         d2:a5:a1:6f:42:fd:97:87:da:e0:2d:69:4b:42:00:55:00:99:
         b2:fe:2e:3c:fc:a3:46:b9:40:0b:7f:c9:17:1f:68:3c:be:26:
         2d:7d:0c:37:64:a9:f6:f2:dd:31:5e:a9:80:7c:bd:3b:5b:7b:
         d9:78:58:8d:36:d5:fd:f8:50:24:dc:1e:7e:50:45:64:8a:21:
         5e:7a:96:3b:25:86:71:48:58:90:41:b4:ca:06:80:2a:5e:5a:
         1c:1e:f5:1e:40:f6:c2:4d:c1:bf:dc:40:58:2a:ac:b3:33:e3:
         e3:7f:28:90:5c:89:20:a2:89:bf:b1:be:00:61:20:a9:2d:ef:
         f6:c3:34:b3:99:e4:2d:ef:6d:90:f9:a8:f3:0c:e4:f3:3b:18:
         9d:da:ef:5d:13:68:f0:ad:bb:bd:b4:00:8e:7c:4b:a8:52:f1:
         c4:31:b3:df:24:2f:34:59:b9:78:db:99:57:2e:95:50:b8:61:
         60:57:22:e9:da:9f:75:fa:ea:c0:c5:cb:36:30:05:cd:3a:66:
         e9:45:8b:f0:e5:5b:e5:ad:22:ae:c1:32:6a:36:9a:1e:69:1c:
         e1:7a:7b:2d:a2:ca:1f:e3:9c:5b:82:81:2c:a4:2d:40:a5:e0:
         ff:03:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 18:56:31 2024 by rpki-client on console-fra.rpki-client.org