Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36b356ae-0fb2-37de-bd13-ccc08c9251c5.roa
File:                     36b356ae-0fb2-37de-bd13-ccc08c9251c5.roa (raw, json)
Hash identifier:          QnqZBHd4lGyIrQXgQTC0g5QfHCWDiP//mbmODKTeMW8=
Subject key identifier:   48:3C:EA:6B:EF:0E:0E:86:B7:E6:4A:C3:D4:8D:34:51:B0:8B:54:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847670627F0E73909177D3CE800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36b356ae-0fb2-37de-bd13-ccc08c9251c5.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     174
IP address blocks:        45.38.82.0/24 maxlen: 24
                          45.38.138.0/24 maxlen: 24
                          45.38.162.0/24 maxlen: 24
                          45.38.183.0/24 maxlen: 24
                          45.39.10.0/24 maxlen: 24
                          45.39.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 15:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:27:f0:e7:39:09:17:7d:3c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=5257a031-3a66-4b6c-8ddd-b0ce19657a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:c5:23:f2:59:ef:e4:60:bb:4f:83:69:60:
                    01:e5:86:43:b3:8c:c4:cc:25:e4:95:a1:cd:34:e9:
                    bc:30:e5:fd:6e:fd:e8:57:8c:c1:1f:42:8b:94:fe:
                    d9:5a:0e:e8:0e:02:01:4e:ae:f4:8f:c2:16:26:d1:
                    5f:66:32:2d:c1:15:2f:87:d8:61:37:e1:56:aa:03:
                    9d:9f:08:d5:2d:38:99:d5:f9:aa:fa:71:82:0f:06:
                    a1:c2:14:2f:11:80:41:c0:98:e6:4c:e2:81:11:ed:
                    8e:bb:d1:9a:8c:ff:48:da:28:15:6a:ea:34:b4:38:
                    8a:57:de:20:c1:9c:78:9b:39:59:59:38:f7:79:69:
                    97:32:a6:e1:0b:49:4c:b8:6c:05:6c:40:70:40:14:
                    55:e1:81:7f:5e:d3:da:58:20:2e:a1:fa:ac:3d:c0:
                    da:33:02:ee:a8:ab:5c:82:16:2b:ed:0b:a1:db:3f:
                    32:8b:08:70:08:df:d5:b4:a7:96:0b:da:4d:33:e6:
                    25:5c:e3:2d:a2:99:54:6f:5c:46:2d:8c:bb:03:68:
                    3d:01:3c:b9:e6:d1:72:0b:71:65:95:50:dc:2a:4c:
                    81:de:2f:26:f3:58:e7:5e:35:34:85:21:7b:2f:90:
                    f1:52:b0:73:71:1a:2a:b2:23:b5:20:d2:c5:19:c6:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3C:EA:6B:EF:0E:0E:86:B7:E6:4A:C3:D4:8D:34:51:B0:8B:54:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36b356ae-0fb2-37de-bd13-ccc08c9251c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.82.0/24
                  45.38.138.0/24
                  45.38.162.0/24
                  45.38.183.0/24
                  45.39.10.0/24
                  45.39.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:18:cb:3c:66:3a:22:77:38:d0:c9:83:89:71:5b:c3:54:
         2d:96:6a:8d:be:d9:55:b3:66:c4:1a:0b:e1:56:0c:ce:ac:62:
         7e:6f:3d:78:89:63:4e:b1:6c:3e:b6:b2:53:53:33:77:55:99:
         14:69:50:c8:c9:da:07:79:75:ed:4b:f5:44:1a:b9:be:07:f7:
         a9:0a:a8:d8:ed:f9:c8:fb:e7:ac:17:ef:ea:0b:e4:a0:a9:99:
         3f:6f:1b:4f:c1:0b:43:21:af:6c:bf:3c:e4:e2:52:8f:b3:5e:
         a9:74:34:4f:c5:37:f8:14:bc:ab:39:3e:4a:a5:bf:b5:b1:ce:
         82:ac:83:d7:79:26:8c:a8:a6:bf:13:15:6c:84:19:33:bd:44:
         07:bc:57:0d:bc:41:d9:8b:2d:fa:78:30:14:61:07:06:da:63:
         a5:47:60:8c:21:cc:ea:de:77:4c:54:5a:46:5e:a7:11:15:f1:
         42:b8:bc:b6:2a:b9:a7:37:8d:59:ac:86:45:14:80:8b:b6:cb:
         18:26:24:d4:39:02:20:c3:d8:81:5d:7e:a4:4a:9b:6d:52:ad:
         33:a8:fe:ee:f9:ae:3b:64:06:6c:51:1f:f3:17:6f:25:5d:b9:
         95:30:1c:86:87:d2:f3:ed:4f:f4:3e:9a:54:42:2d:ad:47:0c:
         aa:23:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 18:49:43 2024 by rpki-client on console-fra.rpki-client.org