Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/319d7da8-1d6c-31c5-8419-81aea73b9395.roa
File:                     319d7da8-1d6c-31c5-8419-81aea73b9395.roa (raw, json)
Hash identifier:          nr/GPv5j3y1KsADFcihlYdxIENBOwLX6gxyGcBwEgD4=
Subject key identifier:   CD:7F:9F:26:AE:47:0E:9D:9F:6C:12:C8:EB:B5:39:7C:E7:70:62:DB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858408CB0E042506CA775A3323A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/319d7da8-1d6c-31c5-8419-81aea73b9395.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Wed 16 Apr 2025 04:00:00 +0000
asID:                     834
IP address blocks:        45.40.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:b0:e0:42:50:6c:a7:75:a3:32:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Apr 16 04:00:00 2025 GMT
        Subject: CN=39bbe0ee-8b44-494a-96ad-86e5e93161fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:51:1b:4b:c0:cd:99:e8:ca:c2:52:cd:c0:
                    74:33:29:d8:0c:5f:3d:e8:d7:92:e9:a1:06:01:ff:
                    ee:eb:2e:4d:32:6a:7a:f5:2d:c3:d1:4d:ef:42:7c:
                    b9:76:ea:22:61:c2:f0:ee:e0:e3:95:f7:fa:4f:c5:
                    9d:c0:16:f9:96:fb:2f:04:89:75:a1:fd:41:16:fc:
                    12:95:26:75:45:fe:26:10:70:ce:15:ea:b1:a9:a2:
                    d4:ed:31:21:a4:a9:59:78:1b:f4:30:0f:55:2c:71:
                    57:15:62:00:f1:fe:6e:07:e4:9a:ab:b7:42:33:0a:
                    3a:39:7b:2f:ca:a9:cf:62:35:eb:fd:d7:be:2d:78:
                    3d:4a:1f:28:24:47:77:fc:48:9c:2c:02:ef:b9:91:
                    85:92:f2:b9:27:96:30:f9:f2:b0:49:05:85:1e:a4:
                    3f:e4:cb:27:84:9a:aa:42:d8:76:81:5b:a4:ce:6d:
                    a6:3d:88:3a:85:3d:74:80:b0:36:75:00:9a:34:e6:
                    de:6b:c7:a5:cc:25:14:7f:c1:35:13:0a:1b:fd:2b:
                    57:d2:3a:50:59:ce:2b:a7:9f:71:ef:75:d3:9e:7b:
                    a0:6d:71:79:27:c1:f0:5e:b0:15:1b:4a:d3:00:f0:
                    bc:10:08:83:00:dd:70:79:99:02:a6:99:88:34:47:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7F:9F:26:AE:47:0E:9D:9F:6C:12:C8:EB:B5:39:7C:E7:70:62:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/319d7da8-1d6c-31c5-8419-81aea73b9395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:70:39:72:21:5b:a1:88:62:d8:b2:4d:be:30:64:00:7e:e8:
         d4:cf:fa:d0:31:b9:7b:8c:b5:17:54:d4:6a:37:2d:ef:a5:32:
         a1:29:ab:b7:6f:fe:4a:0f:13:e4:86:33:63:5d:6e:6f:c5:06:
         b2:70:86:d4:99:16:a6:64:e4:ab:46:ad:05:79:03:a7:63:46:
         5f:1f:e2:31:41:59:9b:e0:4e:9a:cd:41:b7:00:ac:08:85:fb:
         9e:9a:07:c8:15:1e:aa:cb:10:94:37:d6:84:d4:45:cf:af:41:
         b6:be:75:89:42:d8:53:f7:ca:2c:bd:5a:a6:5e:e0:e6:1e:59:
         ea:d5:6c:9e:4e:19:b6:5c:54:24:89:84:d3:c8:ce:98:de:75:
         b5:c0:4f:9f:57:3f:1e:db:4d:34:b8:19:be:23:53:ef:75:20:
         fe:f6:87:af:5b:0d:40:41:43:a5:a8:02:7e:bd:10:ed:ab:e2:
         d5:fd:6d:61:b9:5c:c4:c0:96:24:b1:54:b7:a5:0f:90:bb:dc:
         af:2f:61:4a:c6:22:27:95:36:96:d5:f3:d6:61:f3:dc:3a:be:
         09:96:99:f8:69:62:f2:6f:16:3d:09:4d:76:72:8c:2c:2b:65:
         22:6d:91:64:2a:fb:ad:3e:dc:20:cf:bd:5d:5a:1a:98:80:a2:
         a2:41:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org