Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acad341f-3930-3838-bc0e-1762f7f33e53.roa
File:                     acad341f-3930-3838-bc0e-1762f7f33e53.roa (raw, json)
Hash identifier:          9TZauNkmNTsEaiysKY/J8onYrpA68EGrR9RVmAfO+4o=
Subject key identifier:   B1:7E:17:AB:20:38:D3:E1:99:AB:C4:A3:AF:91:28:37:DB:E6:94:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584717E1E10DCEF94BA60A362280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acad341f-3930-3838-bc0e-1762f7f33e53.roa
Signing time:             Tue 03 Sep 2024 16:38:40 +0000
ROA not before:           Tue 03 Sep 2024 16:38:40 +0000
ROA not after:            Mon 02 Dec 2024 17:38:40 +0000
asID:                     44477
IP address blocks:        45.38.36.0/24 maxlen: 24
                          45.38.40.0/24 maxlen: 24
                          45.38.42.0/24 maxlen: 24
                          45.38.62.0/24 maxlen: 24
                          45.38.134.0/24 maxlen: 24
                          45.38.139.0/24 maxlen: 24
                          45.38.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 08:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:e1:e1:0d:ce:f9:4b:a6:0a:36:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  3 16:38:40 2024 GMT
            Not After : Dec  2 17:38:40 2024 GMT
        Subject: CN=4d38963a-ec89-46f9-ad43-5e9d2f887f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b9:80:f8:3d:9a:13:a1:fc:e1:0a:a2:a1:86:
                    d5:eb:d8:3f:ac:d4:c0:a2:dc:ac:22:d3:3d:46:d5:
                    81:b6:40:9b:57:3a:a3:8b:b1:a8:04:84:32:b0:30:
                    29:d3:68:94:19:1a:63:e4:9f:07:ef:4f:21:2b:ba:
                    6d:4a:0b:24:9e:0c:40:1f:60:31:93:a8:39:0c:b4:
                    8f:12:10:c4:32:f8:83:63:a9:66:05:2c:44:c0:49:
                    dc:2c:95:15:ec:6d:d6:d8:32:9a:33:c1:94:ec:ec:
                    20:81:5f:c5:e3:c3:6b:c6:bd:3c:29:f3:f3:5f:4d:
                    95:8c:c4:be:e5:c6:37:18:d2:92:02:8e:3b:61:a9:
                    da:b6:f1:ab:7a:55:63:62:a9:c3:e1:68:d9:5d:84:
                    a5:f5:96:b2:09:32:52:02:cf:cc:8f:6e:05:9e:20:
                    ac:58:d5:79:34:87:68:e3:d1:be:f0:f2:4e:2e:57:
                    7a:42:97:b6:c3:00:d2:1a:4f:90:dc:d9:05:b0:68:
                    e4:87:33:2c:5a:ee:ac:86:62:6e:5d:ae:69:39:06:
                    3b:52:5b:69:87:77:6d:fb:d2:8e:bc:a5:fa:4a:9d:
                    4b:5a:3b:fd:20:b5:7c:8b:fb:fd:e0:c8:e6:37:d3:
                    61:58:ae:52:de:9f:d9:b5:4d:c0:5c:46:b5:bf:0b:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7E:17:AB:20:38:D3:E1:99:AB:C4:A3:AF:91:28:37:DB:E6:94:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acad341f-3930-3838-bc0e-1762f7f33e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.36.0/24
                  45.38.40.0/24
                  45.38.42.0/24
                  45.38.62.0/24
                  45.38.134.0/24
                  45.38.139.0/24
                  45.38.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1a:f2:99:d1:ab:2b:b1:45:bf:49:a8:60:a9:63:ba:e5:9f:
         8b:57:23:c1:a7:3a:24:54:f5:88:3a:66:5d:a6:45:29:67:e2:
         80:10:4e:68:6d:a7:b3:8a:d8:bb:53:0a:b5:fd:46:18:5d:40:
         58:26:ef:66:c2:9a:43:53:66:15:d7:59:3c:d8:09:9c:c6:f6:
         93:93:b9:b3:fc:fe:30:fd:e2:0e:cc:00:63:59:28:3e:3c:98:
         2c:e2:94:d5:99:63:5a:93:c6:39:ec:6e:19:b9:ff:2e:4a:a1:
         55:94:16:bc:d6:a7:98:38:56:74:f4:65:45:d8:5b:06:84:aa:
         15:83:c3:5c:7a:98:92:85:0c:43:80:d9:6e:48:be:03:46:44:
         07:cb:aa:af:98:bc:f0:f9:e9:8d:a5:06:d9:b0:da:c9:5a:b5:
         e2:57:5b:29:44:e3:f7:ce:4c:4a:15:1e:fb:c0:e9:08:cd:cc:
         44:1a:99:2a:0a:cf:3e:52:1e:5d:93:b6:cb:3e:d3:6e:c8:7c:
         be:8a:d2:37:f7:94:dc:7e:96:48:0f:09:de:8f:65:1f:0c:75:
         65:54:ad:ab:ca:0a:18:fd:87:d1:7f:bf:bc:bb:e1:39:a0:44:
         b8:89:f1:f1:8b:c7:5c:6b:2d:3e:d6:cb:5a:6a:da:e4:47:07:
         5c:41:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 11:20:00 2024 by rpki-client on console-ams.rpki-client.org