Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203236393330.roa
File:                     34352e34322e34352e302f32342d3234203d3e203236393330.roa (raw, json)
Hash identifier:          dt7V44moaMqngEXP2btj+QFOZBsUs1PKQDq9PUY7vRQ=
Subject key identifier:   41:E0:BB:9F:6D:8F:53:BD:02:11:A4:28:44:F1:46:2E:A6:C9:76:A3
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       083CC9ACB450D4FD86616F78785DC4EC59F25E86
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203236393330.roa
Signing time:             Fri 05 Apr 2024 04:30:32 +0000
ROA not before:           Fri 05 Apr 2024 04:25:32 +0000
ROA not after:            Fri 04 Apr 2025 04:30:32 +0000
asID:                     26930
IP address blocks:        45.42.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 02:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3c:c9:ac:b4:50:d4:fd:86:61:6f:78:78:5d:c4:ec:59:f2:5e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Apr  5 04:25:32 2024 GMT
            Not After : Apr  4 04:30:32 2025 GMT
        Subject: CN=41E0BB9F6D8F53BD0211A42844F1462EA6C976A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:17:03:ad:48:46:aa:1d:5e:22:5a:76:82:
                    f2:77:da:c5:b6:91:36:fb:b4:d5:b3:92:7a:79:1d:
                    4f:3a:c7:39:e1:1c:f8:51:05:04:fb:b9:76:50:a7:
                    12:1c:41:32:29:c8:f9:33:af:72:6e:e4:75:d9:8d:
                    08:40:16:27:70:5c:5a:73:96:94:47:b2:ed:ce:29:
                    7a:5f:16:0e:54:a0:9b:ce:83:67:8b:84:53:f0:d2:
                    95:fe:12:20:08:ba:31:e6:46:ab:f0:8f:06:c4:07:
                    73:0a:b1:2c:ce:2e:eb:f7:55:f4:db:4e:e7:3d:d1:
                    04:80:01:88:f7:f7:3b:9f:c2:73:62:f5:28:0f:ff:
                    56:22:81:56:f7:71:67:56:be:37:0b:5f:73:67:ce:
                    8c:de:24:4a:b2:db:21:b3:ab:85:3f:b7:85:d2:c7:
                    a0:ce:7c:de:be:8f:70:50:28:4c:52:35:29:d0:ea:
                    1c:98:80:5e:47:63:0e:f3:87:d0:14:53:0d:1e:28:
                    16:ad:41:46:d1:b0:1b:19:9d:60:d5:0b:9e:23:43:
                    3b:dd:67:c6:ef:83:8e:2e:4a:f3:93:7d:6f:80:b4:
                    ca:b4:a9:0d:63:cf:ca:b5:d4:ea:8a:4d:fc:0c:f7:
                    dd:63:c8:35:ee:c4:b9:e5:90:92:f7:e9:17:e2:9d:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:BB:9F:6D:8F:53:BD:02:11:A4:28:44:F1:46:2E:A6:C9:76:A3
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203236393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:9c:4a:da:be:68:64:0b:6d:c7:41:a2:b6:60:92:34:df:
         a8:03:94:5d:50:e2:8a:e0:7c:02:ef:72:ef:07:7a:30:57:40:
         d3:5c:82:36:92:ec:d1:3b:ed:41:98:e0:c2:88:57:86:ee:f5:
         cd:f4:3b:13:5b:f3:ba:1d:e3:58:0b:53:23:a6:ea:31:e2:b0:
         09:3b:72:cd:dc:06:82:01:8d:a7:d6:80:78:e6:f5:f3:df:b4:
         94:d8:6a:6c:a0:42:17:88:4d:03:48:c7:00:99:7c:7c:cf:21:
         94:88:51:87:cb:7e:30:e5:6c:c6:bc:e6:65:15:ef:d8:40:26:
         4b:16:71:19:3c:6e:c0:bd:e2:49:19:6d:4f:47:b7:e7:a4:97:
         b0:cb:30:36:ff:a7:40:6d:59:72:47:f5:b0:62:92:81:5a:d1:
         42:e0:1d:3a:b6:64:c7:41:f0:c2:02:45:95:24:66:2e:f4:bb:
         a9:86:3f:3c:17:12:6a:4c:46:8a:e5:dc:df:18:a6:03:3e:ec:
         be:4a:d3:8c:6e:9b:d3:fe:82:d5:e5:4f:71:17:fb:ef:b1:26:
         67:29:8c:07:80:13:a2:7f:5c:af:c8:79:7a:17:f6:79:bd:03:
         52:c6:79:c0:b3:05:1f:63:32:ef:c3:20:5d:cc:e1:26:65:51:
         5f:bd:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 03:55:41 2024 by rpki-client on console-fra.rpki-client.org