Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45ab8519-3b90-346c-bdb8-68edb6db7128.roa
File:                     45ab8519-3b90-346c-bdb8-68edb6db7128.roa (raw, json)
Hash identifier:          MMqJcbRcac1uCskn9wrbNZAR/w2+ZH9iaADwc0Z/Sww=
Subject key identifier:   06:72:A3:FC:03:B7:E7:F1:B5:38:7E:46:59:C6:3B:6B:ED:18:10:39
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849221B1C9D0B319D0C99019B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45ab8519-3b90-346c-bdb8-68edb6db7128.roa
Signing time:             Sun 09 Mar 2025 18:05:56 +0000
ROA not before:           Sun 09 Mar 2025 18:05:56 +0000
ROA not after:            Sat 07 Jun 2025 18:05:56 +0000
asID:                     29802
IP address blocks:        45.40.98.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 09 Mar 2025 18:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:1b:1c:9d:0b:31:9d:0c:99:01:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  9 18:05:56 2025 GMT
            Not After : Jun  7 18:05:56 2025 GMT
        Subject: CN=1e8462ac-4164-4cbb-8031-3a5656a3e870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:3f:10:1e:95:06:34:19:da:0c:3e:31:78:
                    37:e5:2f:05:f5:71:53:f6:a7:2e:c9:47:2a:b0:99:
                    d0:e1:e0:9c:05:2a:ba:ca:76:41:4c:6d:af:67:90:
                    79:f3:34:5c:ac:dc:93:fc:b0:48:2b:56:12:43:b7:
                    1c:c3:47:12:b7:9e:6b:d0:29:1e:6f:20:64:f1:3c:
                    14:51:70:04:d2:42:f4:3c:6b:49:12:06:0b:6b:16:
                    c2:3b:85:c2:b8:07:79:c5:c0:41:70:d6:07:8f:b4:
                    14:ee:95:94:64:29:80:eb:0b:4c:36:72:4b:25:c5:
                    aa:69:58:cb:22:21:96:f0:84:66:e4:c9:5d:c9:e9:
                    47:e1:cc:51:87:82:18:be:2f:91:11:7c:77:d6:52:
                    33:8d:21:ac:a3:65:8e:59:ea:23:32:df:94:bf:e3:
                    45:59:82:ff:53:88:63:65:56:1f:a5:b9:e4:2d:5b:
                    3a:dd:68:33:6b:20:7b:68:4d:10:a3:3e:67:3e:68:
                    c9:ef:40:50:82:5f:83:ef:db:03:2e:f1:51:e2:b0:
                    bc:ae:63:5d:c6:f8:e4:0b:19:97:21:53:c3:7b:20:
                    b2:49:64:db:91:bd:e5:00:6f:a4:cf:9d:4a:ab:7d:
                    9c:05:96:d0:9c:34:2d:b2:bb:d3:f6:22:b3:20:b7:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:A3:FC:03:B7:E7:F1:B5:38:7E:46:59:C6:3B:6B:ED:18:10:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45ab8519-3b90-346c-bdb8-68edb6db7128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:c8:83:85:da:59:1b:01:8b:96:ea:f3:38:18:db:a8:3b:
         d1:2a:32:5a:97:e0:6c:88:c3:1a:1a:4d:ef:56:ca:b4:fe:46:
         c2:e2:67:29:4f:ff:37:19:41:d9:74:8d:fb:3b:4d:a9:07:da:
         0c:8b:ed:aa:ed:d0:75:fd:b1:33:76:d1:b0:69:96:51:30:d2:
         c4:6d:2c:73:4a:0a:d1:df:58:81:4c:d2:c2:45:0b:50:77:32:
         a3:7e:72:d0:7d:f1:6e:49:d7:a6:96:ff:06:f8:dc:f7:a4:21:
         1e:a7:c7:d7:64:fb:20:77:b2:73:5f:e8:99:e1:d8:32:1c:a5:
         ce:d0:27:8f:15:b7:fe:1d:d7:d9:0a:9b:7c:e7:cb:db:3e:5e:
         81:57:89:09:cf:35:16:2b:7d:77:66:b2:af:bc:97:ac:80:8d:
         fc:54:38:ae:3c:33:20:fd:6b:04:9a:65:8a:89:e0:03:fe:ad:
         0c:c1:2c:d3:70:7a:de:c6:1c:8e:c6:95:54:b4:6f:e9:64:2a:
         66:02:d4:3a:d0:ac:dc:8e:c4:20:8d:b6:ed:23:e1:64:c1:5b:
         f4:3d:1c:87:de:88:b4:fa:d7:23:f8:db:f5:59:b0:0d:31:35:
         85:54:ce:68:30:51:bc:ea:fa:d0:0e:a5:28:10:2e:93:89:2c:
         d8:08:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:13 2025 by rpki-client