Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ae99b82-7d02-3c20-91e6-6c8990886d70.roa
File:                     2ae99b82-7d02-3c20-91e6-6c8990886d70.roa (raw, json)
Hash identifier:          Y3B/VBx3E8C63QNtzLHpvqIQReNgJfn0aNmdHFxHlAM=
Subject key identifier:   0C:F3:ED:B3:B3:74:28:47:AB:24:32:0B:03:89:49:84:80:45:7E:48
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858470C4B1BB542420823E81D2490
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ae99b82-7d02-3c20-91e6-6c8990886d70.roa
Signing time:             Fri 30 Aug 2024 13:00:41 +0000
ROA not before:           Fri 30 Aug 2024 13:00:41 +0000
ROA not after:            Thu 28 Nov 2024 14:00:41 +0000
asID:                     149440
IP address blocks:        45.38.233.0/24 maxlen: 24
                          45.38.241.0/24 maxlen: 24
                          45.38.248.0/24 maxlen: 24
                          45.39.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:4b:1b:b5:42:42:08:23:e8:1d:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 30 13:00:41 2024 GMT
            Not After : Nov 28 14:00:41 2024 GMT
        Subject: CN=fce8b36c-21fa-49aa-808a-48165fae319a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:53:31:b2:d3:16:52:5a:7e:4f:81:96:ca:
                    79:e4:eb:c3:34:37:64:2e:2e:de:62:8c:70:47:c6:
                    b9:eb:1b:fd:c8:98:ab:3e:c1:2c:72:69:08:6a:ee:
                    21:f3:8f:46:30:ba:89:d1:07:34:5c:a8:fb:75:fa:
                    36:eb:92:0c:e5:f4:08:91:31:e8:f3:35:b3:60:52:
                    3b:bf:f3:da:bc:ab:72:dd:f4:69:42:07:62:4d:9a:
                    2d:42:bf:b4:ed:de:d6:73:ae:80:e7:be:ea:81:83:
                    51:44:e0:a9:af:08:6a:3a:88:06:c4:9a:76:bb:8f:
                    3e:3f:f2:79:6d:da:35:15:51:dc:2c:34:cd:d3:15:
                    f7:01:22:4b:48:ea:45:58:8e:69:20:ef:42:f6:be:
                    76:21:00:b2:c0:95:fe:83:ac:4d:6f:da:1a:95:a2:
                    ed:49:4b:70:5b:37:93:bb:bb:76:65:e3:8a:9e:ad:
                    ed:70:fa:42:58:0e:99:b6:5a:97:fe:f1:18:b6:2a:
                    e0:d9:08:3b:89:a6:d6:f2:3c:08:5f:04:ef:8a:c0:
                    47:6b:a3:bb:ef:26:79:0f:93:d2:8f:62:dd:77:57:
                    f3:70:54:19:7d:13:12:1e:fc:5c:30:8c:a4:d8:29:
                    61:32:d8:06:3c:f7:35:5a:d5:c8:4b:ee:6a:31:94:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F3:ED:B3:B3:74:28:47:AB:24:32:0B:03:89:49:84:80:45:7E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ae99b82-7d02-3c20-91e6-6c8990886d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.233.0/24
                  45.38.241.0/24
                  45.38.248.0/24
                  45.39.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:85:08:32:9f:b8:8c:20:10:d4:47:55:d8:ad:70:86:76:
         b2:fc:5d:9c:83:cc:6f:d2:16:4d:d2:5a:4f:8d:4d:4d:7e:e8:
         13:52:d9:ed:29:f9:73:02:c2:e9:fa:70:04:ff:d0:4a:93:3f:
         a0:3a:45:cf:ed:f8:f2:0e:ae:8d:fb:5b:68:2b:9d:f0:d6:25:
         13:dd:ee:83:53:0f:ff:17:f4:c0:e7:7e:fe:c9:70:6f:63:81:
         c2:70:cc:88:27:ff:e8:f1:48:00:3e:37:7a:1f:41:2c:c3:df:
         6c:aa:83:7a:f0:d6:12:ef:c5:1a:20:c7:91:d3:67:6c:7e:20:
         19:b0:ff:f3:11:19:0f:22:cd:7e:47:f0:3f:6c:c5:ed:df:43:
         02:ae:e6:89:53:8c:1b:8c:33:52:05:86:9b:63:a7:cc:74:e1:
         9d:a3:d7:7a:e6:a9:36:38:d8:f6:f1:61:4b:7a:80:eb:8e:b5:
         6d:e0:39:34:28:57:fb:22:2a:cb:2d:f4:3a:3e:dd:9c:e6:1d:
         3d:2f:b0:6f:e3:be:30:7f:92:d9:d9:68:61:87:26:a6:23:60:
         81:44:6f:93:51:3b:95:5d:e1:67:25:af:4d:40:ab:6c:af:28:
         dc:35:4b:34:46:68:9d:9e:09:da:af:49:ed:e4:a4:00:e4:d2:
         9b:b2:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:16 2024 by rpki-client on console-ams.rpki-client.org