Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20323034313734.roa
File:                     34352e34322e34342e302f32342d3234203d3e20323034313734.roa (raw, json)
Hash identifier:          cik9VjTHTvpDBR6FIID86fXnpOM7duwd8wnxKcNDxfE=
Subject key identifier:   8D:03:C9:CC:30:F9:FF:3B:23:29:E8:2A:8E:F2:ED:89:54:78:DA:EF
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       5B3D284DCAE4E7B68127CC90D3145539414D20F6
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20323034313734.roa
Signing time:             Tue 02 Jul 2024 14:11:06 +0000
ROA not before:           Tue 02 Jul 2024 14:06:06 +0000
ROA not after:            Tue 01 Jul 2025 14:11:06 +0000
asID:                     204174
IP address blocks:        45.42.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 02 Aug 2024 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3d:28:4d:ca:e4:e7:b6:81:27:cc:90:d3:14:55:39:41:4d:20:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jul  2 14:06:06 2024 GMT
            Not After : Jul  1 14:11:06 2025 GMT
        Subject: CN=8D03C9CC30F9FF3B2329E82A8EF2ED895478DAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:dd:87:39:26:2a:cb:c8:7c:77:b6:50:fd:
                    d4:88:12:41:37:a4:bb:8e:e7:97:b0:7e:76:e4:76:
                    a7:24:23:2b:eb:2f:19:69:cc:6c:bf:d1:b9:e2:f8:
                    1d:4c:a5:5f:c1:a1:76:ec:9d:91:4d:61:b9:76:ec:
                    4f:b9:a2:da:f6:89:e4:4d:90:34:7d:f2:c1:13:85:
                    d1:a8:68:09:cb:1c:6d:de:d1:80:94:5d:f6:83:b9:
                    1f:5e:75:35:ef:be:61:c0:11:f7:2b:88:3a:97:4d:
                    b2:e2:0a:17:66:f9:da:62:db:3f:6c:dd:36:2d:15:
                    87:d9:85:52:4d:a1:35:97:af:a3:71:14:97:30:04:
                    bb:1a:92:2f:f9:84:69:c4:f0:fa:01:54:cb:af:56:
                    36:85:96:8c:e1:18:79:a9:db:f1:ff:f7:ae:39:2e:
                    65:47:df:07:8c:32:a9:3a:62:51:3f:f0:63:d4:23:
                    55:12:ee:07:5f:36:8b:7d:76:11:44:b8:6e:04:8c:
                    a6:67:6e:55:8c:19:b2:53:e2:61:47:52:25:ae:4b:
                    ca:1e:81:51:8b:3d:28:45:95:98:fd:4d:06:4d:d7:
                    98:1c:36:b2:e2:e9:ed:83:20:3e:2d:c4:87:57:6b:
                    7d:95:f9:47:35:b1:1f:7c:c6:72:ac:2b:16:b7:ec:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:C9:CC:30:F9:FF:3B:23:29:E8:2A:8E:F2:ED:89:54:78:DA:EF
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20323034313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:0e:be:dd:13:8a:d6:85:31:5f:cd:b6:29:07:d5:38:23:
         d6:ef:05:9c:ad:cc:fb:df:10:01:08:62:35:5e:95:6e:e7:6d:
         b4:57:70:8e:d3:15:58:cb:66:94:41:a4:5d:9c:13:ba:cf:1b:
         8e:a9:80:03:8d:99:5d:eb:9f:50:2b:65:8c:d8:bf:05:96:c1:
         ef:24:69:00:f5:a1:b4:bc:23:1d:b9:5f:79:0a:dd:d3:88:ec:
         68:54:e7:e5:a1:ed:31:f7:95:ed:94:55:58:02:a3:d0:b7:b3:
         2d:9d:19:dd:9b:a9:aa:a7:ea:e1:73:33:fb:cb:09:70:70:fd:
         4e:b7:eb:d3:c4:27:b9:fb:5e:d0:d3:ff:44:a6:eb:3c:3e:be:
         e4:c2:e4:47:48:18:59:20:20:4e:f1:64:95:15:7b:9b:5b:df:
         af:8b:44:9e:42:cc:52:8b:4b:30:8a:0d:56:2e:87:8c:ed:68:
         8d:f2:67:da:6e:41:40:7a:7a:a7:b1:0d:5c:a9:5b:fb:27:3d:
         ab:6b:2e:3f:34:20:35:6c:8e:06:32:f0:3f:28:a1:92:be:aa:
         ce:f2:94:74:2d:fb:bd:6b:e5:fb:02:bc:39:b1:ac:80:48:b0:
         60:45:20:b2:ea:c0:08:82:05:1d:16:8d:e1:61:e3:65:98:7c:
         e8:fc:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:15 2025 by rpki-client