Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/45032a97-13c9-307f-ac73-e9f70f015088.roa
File:                     45032a97-13c9-307f-ac73-e9f70f015088.roa (raw, json)
Hash identifier:          m2V+QVtNucwioC8GVQRDf5LrloyXHEXFXaV6XW3Xbb8=
Subject key identifier:   BD:66:78:A1:12:6A:06:2A:0F:BD:F5:EE:86:C5:E4:8E:1A:8A:0F:35
Certificate issuer:       /CN=dbd6bd60-20b4-40eb-8504-81745a54a188
Certificate serial:       010D0C9F4328583E66E0A7CE0141171D294D8600
Authority key identifier: FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/45032a97-13c9-307f-ac73-e9f70f015088.roa
Signing time:             Tue 28 Jun 2022 13:25:58 +0000
ROA not before:           Tue 28 Jun 2022 13:25:58 +0000
ROA not after:            Mon 30 Sep 2024 04:00:00 +0000
asID:                     12189
IP address blocks:        45.62.152.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 09 Sep 2022 18:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:66:e0:a7:ce:01:41:17:1d:29:4d:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd6bd60-20b4-40eb-8504-81745a54a188
        Validity
            Not Before: Jun 28 13:25:58 2022 GMT
            Not After : Sep 30 04:00:00 2024 GMT
        Subject: CN=9a023f0a-1508-4d48-9789-353d5b473d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:f1:a3:af:0e:5e:52:0d:16:87:96:1e:3c:
                    d3:a4:91:07:73:c5:7f:fa:10:11:0d:ce:83:d3:0f:
                    da:48:99:31:38:d3:75:0b:16:b4:7e:24:e6:e1:7d:
                    f1:68:49:69:2c:34:af:66:c9:74:c1:85:31:83:78:
                    6e:30:39:a4:0e:42:72:4b:8d:f2:ac:fe:bd:02:f4:
                    e3:8c:ee:92:cf:92:78:f0:bb:70:cf:a8:d8:dc:1c:
                    8e:22:c6:75:6a:72:88:76:8f:bd:8a:e1:62:01:9c:
                    1a:f6:ff:84:f0:35:09:92:a3:94:35:53:46:5b:5f:
                    68:36:4f:07:17:4d:35:65:cf:ef:8a:c3:94:52:c4:
                    42:5b:ff:98:55:a7:d4:4c:d0:f9:cb:6d:37:a9:8f:
                    5d:0a:82:6f:42:e2:13:c5:e2:09:ae:1e:08:24:62:
                    8e:8b:5e:5d:e3:a6:1e:c9:34:5c:ce:83:ad:5e:ab:
                    88:de:28:14:de:83:fe:b8:d8:69:87:f5:a0:35:09:
                    96:2f:52:89:41:ce:7c:f8:0d:bc:d9:5f:01:8b:63:
                    07:c1:6a:be:63:3d:d2:c1:13:9f:75:ee:be:7a:f6:
                    a6:e0:71:14:cf:9f:4d:42:d9:04:eb:e4:9e:ff:51:
                    d8:bc:6f:d3:09:a9:b5:13:fb:da:9b:00:92:6e:0d:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:66:78:A1:12:6A:06:2A:0F:BD:F5:EE:86:C5:E4:8E:1A:8A:0F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/45032a97-13c9-307f-ac73-e9f70f015088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/dbd6bd60-20b4-40eb-8504-81745a54a188.crl

            X509v3 Authority Key Identifier:
                keyid:FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:d5:9b:28:2e:0b:c9:87:bd:ae:37:3c:60:05:77:4e:ba:
         de:e4:77:b6:fa:d0:7d:e8:1f:66:30:90:66:f2:e9:ca:87:76:
         6a:08:79:60:48:2a:7d:1e:fc:fa:35:f2:bf:5a:76:43:d3:bc:
         d4:8c:d3:a2:cf:0b:e6:6e:4c:06:1d:10:87:94:f5:c2:b1:18:
         b2:ca:b1:bc:fa:b7:cc:40:29:db:a8:26:29:08:e2:9b:c7:66:
         c5:10:a1:60:2c:95:58:72:c3:c7:af:54:3c:b9:bd:ba:89:f0:
         19:a1:a1:4e:4c:d5:ea:67:3c:a7:c8:d7:3a:1e:e8:f4:7e:57:
         c0:95:ba:94:3c:94:c5:0e:1c:aa:eb:4a:f7:e2:fa:57:b9:1d:
         49:9f:11:26:5a:87:bd:83:9a:55:2b:c3:b0:b8:57:76:95:a7:
         bb:84:7e:d4:6a:c7:1c:96:a1:50:95:b1:1f:55:e4:a6:52:fa:
         9a:ce:e0:e4:46:45:d5:5d:85:3b:0b:c9:c2:5e:eb:14:b3:b3:
         60:58:2a:94:68:1f:4c:37:84:2d:57:8f:ba:31:60:6e:e5:13:
         fd:cc:d9:91:33:a7:a6:b9:5e:7d:ef:31:76:f1:f3:e3:e5:32:
         5f:3d:a1:3f:a3:c2:57:41:97:17:c3:97:f1:c0:d5:2e:f1:61:
         15:d2:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----