Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc17d1c9-81bc-3e6e-b952-69d84934dbf1.roa
File:                     bc17d1c9-81bc-3e6e-b952-69d84934dbf1.roa (raw, json)
Hash identifier:          MsQEU57xstvx7spaNNWRq8yatlpjrYhFG7cMajjd4qA=
Subject key identifier:   5B:05:20:2D:AD:24:8F:D8:6E:B5:21:06:63:B8:44:EF:82:89:57:F6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858474462DA71375B585150A33D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc17d1c9-81bc-3e6e-b952-69d84934dbf1.roa
Signing time:             Thu 19 Sep 2024 15:14:06 +0000
ROA not before:           Thu 19 Sep 2024 15:14:06 +0000
ROA not after:            Wed 18 Dec 2024 16:14:06 +0000
asID:                     395839
IP address blocks:        45.38.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 11:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:62:da:71:37:5b:58:51:50:a3:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 15:14:06 2024 GMT
            Not After : Dec 18 16:14:06 2024 GMT
        Subject: CN=a12644db-2865-4f1d-b0ba-eebd37730c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:31:b6:3b:d6:f2:12:fc:af:2e:3b:f6:15:
                    4a:88:0c:5d:fe:74:0d:8b:8a:71:eb:f1:7f:3b:40:
                    f3:41:59:30:1f:15:3a:01:ed:64:de:0e:ea:5a:7c:
                    4b:68:71:af:6f:e4:a2:45:93:5c:c4:87:f8:22:9c:
                    c0:9e:d8:07:cb:f2:bc:6e:3b:4e:bd:88:86:0d:ec:
                    60:e3:6f:e0:63:7c:2a:1f:7c:e0:50:68:77:9e:9d:
                    37:cc:52:62:4f:e2:e9:f7:2c:95:ce:c6:18:92:c3:
                    88:17:28:07:d8:f0:0e:4f:a2:7a:34:76:c9:c1:c0:
                    76:d8:67:ea:8b:28:0e:01:46:0c:e0:78:48:93:f3:
                    47:2a:fd:10:63:b2:c4:4a:2b:9d:ea:77:51:af:7c:
                    c2:0e:e2:2a:ec:98:29:9d:0e:07:48:2b:9a:88:15:
                    95:00:43:bf:1b:de:84:2c:ac:15:ba:d5:21:c2:ae:
                    0e:dc:6d:88:ba:58:b3:7c:99:16:20:cd:5f:eb:e6:
                    f7:e0:f0:bc:0d:e6:a3:53:12:7e:03:aa:ab:10:53:
                    d4:64:e2:11:60:37:78:9a:d2:62:33:35:aa:f1:4a:
                    12:a2:35:36:3b:ed:9f:e4:9d:bc:b9:d5:be:8d:e7:
                    7e:14:27:f4:08:e6:d4:12:40:ff:a4:cb:c3:76:2c:
                    e7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:20:2D:AD:24:8F:D8:6E:B5:21:06:63:B8:44:EF:82:89:57:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc17d1c9-81bc-3e6e-b952-69d84934dbf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:59:78:f6:28:76:0d:06:f9:34:9c:77:91:82:b6:c7:fa:2b:
         ba:6d:11:93:79:8b:31:c6:bb:bd:22:21:9f:72:d5:84:4b:52:
         89:b7:8b:ce:af:f5:4a:8b:0e:a8:4d:95:65:8a:e8:25:8e:d3:
         a0:69:3d:d1:4e:b1:6e:eb:e3:3e:04:1f:ed:86:a7:05:18:d2:
         a2:b3:75:bc:0e:25:35:72:c0:cd:a9:0b:d8:e3:42:83:5b:8c:
         24:d2:62:05:b6:d3:57:75:3c:8f:b6:eb:11:ab:cb:90:fc:78:
         0c:51:40:4c:1e:e4:a1:87:af:76:b0:9c:4d:77:ac:3f:97:4a:
         28:bc:62:aa:7b:7e:e5:5d:03:e3:8d:a8:33:fe:d7:d5:fd:7b:
         2c:4e:ba:42:07:23:04:45:34:30:43:6f:40:24:2e:1a:92:cb:
         4f:d6:24:aa:a0:73:3c:31:d5:e4:87:be:ce:91:c0:9d:62:fd:
         d4:bd:ab:41:b2:2f:4b:39:5c:d8:e0:ee:1f:70:4c:f9:f1:3f:
         bd:a6:5d:c8:3b:4c:21:a0:f1:28:60:00:a9:fa:19:72:87:6f:
         0f:7e:ad:97:c6:8d:35:29:49:81:4d:34:f0:d6:a8:5a:59:58:
         a9:c1:f6:99:2d:d9:89:d3:68:f3:1f:9c:44:e2:69:87:05:56:
         8b:f8:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----