Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa
File:                     293e8554-09ba-31aa-b67a-31a1bab4d060.roa (raw, json)
Hash identifier:          eD7ZauNPiK1+H8tzHdlgqAoE3cAaNYugSUZVFiZNQG8=
Subject key identifier:   BD:46:82:61:4B:F0:15:7C:D1:62:96:C1:12:F7:D7:E9:DF:D6:52:3C
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F432858489BA0B3FD30E6191BFF5E68A0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     26658
IP address blocks:        45.41.80.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 01:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b3:fd:30:e6:19:1b:ff:5e:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=c64bce15-b8c7-4b0e-ba0e-35d25813942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:09:32:f1:f5:5d:f7:7a:50:16:2a:70:0c:
                    6a:dd:78:05:13:25:00:8f:00:ec:14:21:67:f5:ec:
                    4d:62:cf:98:42:02:77:9c:30:16:71:e6:95:d7:6c:
                    a9:48:f0:e8:1d:d9:7d:cf:fb:37:f6:e6:a4:90:ec:
                    6b:bd:47:39:5f:66:1c:f9:1e:c6:e0:34:91:7a:6c:
                    f4:ca:e6:df:74:9b:4c:93:78:b8:ac:f2:f2:24:12:
                    fd:9a:c7:5b:b9:74:15:6f:f0:2b:b0:89:ac:e6:d1:
                    cc:37:90:61:a4:65:09:38:e5:a0:45:22:62:dd:72:
                    34:2a:1f:be:78:3b:86:d0:c1:e1:0d:26:dd:44:eb:
                    5d:6f:d0:4c:cc:c3:71:60:3f:fa:37:45:a2:03:fb:
                    c0:8c:3a:ba:ad:6c:c7:d5:8e:a0:62:72:c2:7b:61:
                    ce:e0:40:6a:a3:23:15:ac:ba:67:23:94:e0:01:46:
                    cd:ca:c7:d0:5e:ab:5b:f7:91:2a:21:8b:51:ae:06:
                    5d:e4:b1:4f:f9:99:64:16:29:c9:33:f0:be:95:8a:
                    a1:02:ba:40:0d:16:12:d8:d3:d9:d1:71:8a:c4:54:
                    b6:17:e8:f4:73:12:c4:44:d5:3a:6f:d8:a5:47:03:
                    2c:0d:44:30:45:11:62:02:52:d6:33:4e:b4:82:90:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:82:61:4B:F0:15:7C:D1:62:96:C1:12:F7:D7:E9:DF:D6:52:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:21:24:d3:3a:fb:bf:2a:45:5d:28:b9:d4:e8:09:18:46:f4:
         d4:00:1b:60:c0:86:f4:5b:41:bd:87:e4:67:21:5f:a4:f1:ce:
         7f:60:b0:20:b4:6b:e6:cb:a9:11:5b:45:2c:3d:40:a1:72:51:
         5e:24:d7:9e:50:55:96:cd:f9:df:54:e5:4e:ad:88:02:40:cd:
         0c:6a:2e:6a:48:45:67:7d:47:d4:c3:9e:bb:a7:9b:db:e8:17:
         75:f4:3e:76:68:56:7a:d5:8b:d9:98:a1:bb:8d:ee:cd:27:0f:
         76:ca:51:27:b8:72:89:75:50:3a:6b:14:bc:2a:a9:bf:a2:ac:
         ca:74:84:5e:30:03:d3:dc:e1:21:90:18:a0:12:23:29:0a:41:
         0d:f0:7a:77:91:67:d7:f3:bc:f8:5a:8b:cc:c2:4b:1d:49:51:
         b9:60:8f:cd:90:1f:a5:e4:4c:ad:43:5d:07:ba:eb:5f:38:9e:
         89:b1:e3:7b:30:98:05:e0:78:7f:19:0c:d2:66:08:8a:18:8d:
         d1:d5:67:31:a2:d5:20:25:d9:b6:ef:fe:50:0b:ff:ee:fe:45:
         41:ff:f5:34:2a:ec:5d:9d:53:60:62:c5:e0:cc:1e:45:ad:92:
         8d:c8:37:8f:96:3f:a7:2c:57:22:28:b4:66:c1:bf:0f:da:0b:
         da:e7:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:23:03 2025 by rpki-client