Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/478cf8e4-f76b-3708-a85d-23ba73a29d71.roa
File:                     478cf8e4-f76b-3708-a85d-23ba73a29d71.roa (raw, json)
Hash identifier:          FFPjP0yT060bKDvX3e1BKyg2kXXE8D5r7sBvUckeO5g=
Subject key identifier:   60:67:60:87:AF:87:EE:25:B7:59:3D:59:AC:B3:BD:D8:41:6A:DD:74
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586EF0A2CFB8722D1C7458360
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/478cf8e4-f76b-3708-a85d-23ba73a29d71.roa
Signing time:             Sat 13 Apr 2024 01:46:02 +0000
ROA not before:           Sat 13 Apr 2024 01:46:02 +0000
ROA not after:            Fri 12 Jul 2024 01:46:02 +0000
asID:                     18779
IP address blocks:        45.38.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 03:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:ef:0a:2c:fb:87:22:d1:c7:45:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 01:46:02 2024 GMT
            Not After : Jul 12 01:46:02 2024 GMT
        Subject: CN=1ed4ddae-c99c-4ce4-9b33-89adff97b7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:04:de:10:2f:14:49:ed:7f:fa:45:6b:d6:
                    e6:2c:ed:67:73:a0:61:51:45:9b:c3:20:fe:56:d7:
                    bb:cb:9e:f0:a4:03:49:23:93:20:52:1d:78:3d:0b:
                    18:49:8a:c3:be:fd:29:72:be:43:fb:ec:c1:7d:61:
                    3c:f8:f4:51:54:39:a1:0c:b5:c9:fd:4a:18:bf:44:
                    b6:68:b6:6e:4b:d3:e0:b8:69:72:97:51:0f:6f:ef:
                    75:5f:4a:71:0c:95:a1:f4:f1:6a:74:11:93:6d:e9:
                    f8:1f:47:44:4b:36:4f:21:a5:6e:13:f7:51:6e:c8:
                    75:74:a4:4f:40:95:31:be:d1:be:6b:c7:bb:2e:6a:
                    0f:e0:c6:b8:91:e0:2a:a9:ea:e1:4a:a2:eb:e5:bc:
                    43:06:e8:b9:00:e5:2c:ae:27:70:88:30:11:92:3f:
                    59:ca:94:82:b7:d4:96:30:1c:cd:0e:0f:d4:a6:b7:
                    53:62:7b:9a:e0:8c:22:ff:b5:d5:89:b2:d8:d1:ab:
                    be:60:22:73:3b:c6:95:2b:9e:85:ed:aa:c4:09:81:
                    65:13:36:45:df:e8:ff:38:b7:68:74:6e:68:50:a3:
                    b1:6b:76:fe:c8:35:16:8c:a4:5e:66:06:b1:ce:0f:
                    1c:6b:69:ef:5a:fc:d3:ce:7f:77:43:bc:eb:ef:b8:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:67:60:87:AF:87:EE:25:B7:59:3D:59:AC:B3:BD:D8:41:6A:DD:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/478cf8e4-f76b-3708-a85d-23ba73a29d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7c:fc:da:a2:51:55:b8:09:76:d1:e5:dd:eb:b8:58:d0:22:
         c7:77:72:5d:67:9a:45:b7:b8:d8:96:7a:eb:44:38:c2:99:36:
         30:7f:e2:92:e9:52:55:14:42:89:ce:99:ae:2c:64:51:34:8c:
         42:a0:bd:90:c4:1e:ec:76:4d:f1:fe:73:2c:ba:b9:63:d0:0a:
         5e:e5:e5:9c:4d:09:5f:7b:a0:86:4a:b5:da:8e:74:97:33:72:
         f7:c0:57:49:09:ab:6e:6b:e2:08:8c:bf:cb:fb:da:65:65:b1:
         ae:a0:4d:49:68:a9:fd:64:18:e0:9d:ea:8b:6c:c8:70:09:19:
         b9:da:d4:ec:09:21:d7:02:c6:f1:ea:e7:b3:e5:dc:bc:42:b6:
         4b:41:b9:0f:7d:a5:34:da:de:9f:55:d5:2c:2a:a5:f3:b0:ca:
         a8:03:1f:07:fa:c2:2c:83:63:00:94:85:48:84:55:83:ca:a0:
         5c:09:66:59:80:50:81:1b:44:4a:56:cd:e0:38:75:1f:14:80:
         ad:d7:12:43:dc:56:67:8a:98:21:52:5f:78:e8:29:33:1f:7f:
         6b:df:64:73:9c:68:6a:16:40:6c:9c:4a:96:55:fe:d8:0d:58:
         4b:1f:e1:03:b2:7b:36:a9:83:85:2c:de:d4:28:5b:76:c5:74:
         7c:d2:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----