Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6h0dKjuLhdkPKgutggsPXHxSEudae+WNC74avQZdUYU=
Subject key identifier:   50:CA:0F:39:9B:6A:86:C8:8C:22:24:D0:88:DD:14:8F:AB:4B:88:F7
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       096CA3CBE838FA33F68E746741A62BE1245B8936
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e20383334.roa
Signing time:             Tue 30 Apr 2024 00:02:02 +0000
ROA not before:           Mon 29 Apr 2024 23:57:02 +0000
ROA not after:            Tue 29 Apr 2025 00:02:02 +0000
asID:                     834
IP address blocks:        209.87.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 15:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6c:a3:cb:e8:38:fa:33:f6:8e:74:67:41:a6:2b:e1:24:5b:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr 29 23:57:02 2024 GMT
            Not After : Apr 29 00:02:02 2025 GMT
        Subject: CN=50CA0F399B6A86C88C2224D088DD148FAB4B88F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:ad:3f:59:19:9f:a1:db:a9:7c:25:f6:12:
                    5a:a9:78:c1:3a:3a:28:0f:f0:b3:73:00:79:99:c9:
                    9b:e5:3f:e7:4a:16:cf:95:ac:76:bd:16:0e:7d:f1:
                    a3:ab:4f:41:2a:9e:d4:e8:2d:5a:ac:76:6a:91:9f:
                    cb:fc:19:71:f7:26:cc:3d:17:e7:f5:a7:43:20:06:
                    10:6e:35:c0:3b:7b:9f:10:1c:6f:62:a2:da:96:01:
                    da:57:0f:a6:71:64:98:f1:8f:54:3e:1e:e1:ed:f4:
                    aa:6a:85:c5:5f:53:35:31:e8:15:f1:c7:a9:b2:a5:
                    6d:d3:cd:9e:b2:c8:14:20:48:ad:9c:b9:16:10:b5:
                    5d:ce:c3:05:40:14:69:f3:82:fc:b0:53:50:90:38:
                    be:22:ee:d6:6d:54:2c:41:ca:b1:70:90:5a:c1:49:
                    05:fe:0b:c6:b7:a2:fb:2b:9d:2b:dd:c6:42:78:f7:
                    52:14:96:94:88:63:31:e1:f3:91:5d:78:7f:9a:fa:
                    ed:b0:37:92:6b:6f:e6:86:b3:ef:e1:db:a9:57:32:
                    ad:c8:95:26:ef:01:0f:0a:d9:3c:e0:b4:11:e6:95:
                    df:3f:2b:ef:6d:6b:f1:97:a3:18:ac:f2:46:0a:dc:
                    c1:36:41:a9:d4:34:6e:32:c6:6b:e9:21:2d:5c:d2:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:0F:39:9B:6A:86:C8:8C:22:24:D0:88:DD:14:8F:AB:4B:88:F7
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:ff:9f:11:a3:0e:42:9c:da:52:fa:9c:db:3a:6b:ad:07:
         da:2f:be:a3:8b:48:60:91:86:d1:b3:6c:da:54:fa:f1:38:34:
         b3:76:fc:2f:ed:21:32:2e:e3:db:9c:5b:c5:6c:3e:45:36:da:
         b4:e6:57:3c:2a:c1:0d:10:d7:8a:4c:e4:46:7f:68:b0:62:03:
         26:fa:ba:34:93:91:6e:62:9a:34:21:16:b0:8b:99:ce:48:d6:
         2a:72:64:5d:aa:ba:6b:e4:bf:05:0c:ca:03:84:e1:ff:f5:b2:
         22:d0:16:71:e8:3e:16:b9:67:6c:d3:9c:b9:19:1d:a4:f7:4b:
         34:ea:62:44:e6:55:69:f9:48:c0:c9:43:e5:8b:e8:b8:b4:2c:
         a0:36:4c:de:4e:15:76:5e:c5:69:5d:8a:a1:e7:b7:69:24:67:
         b4:f6:96:7e:84:38:f0:f9:3c:43:b8:d6:16:7f:5c:24:52:dc:
         9b:d7:56:47:09:52:e2:ca:47:20:c4:4d:ed:bf:a0:40:d9:e9:
         9e:68:11:4b:a3:31:77:52:6f:f4:a1:4a:7d:7f:51:d7:e4:53:
         26:aa:c8:0f:36:84:7e:cb:e3:66:77:93:3f:78:da:82:21:15:
         39:22:4f:17:b0:a3:03:f1:98:1e:6e:74:02:61:74:e6:fe:53:
         2c:49:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----