Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232392e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          4ciakt1FnNd52osgswvXe0v9pBdvxXunAF8Z425Sw3U=
Subject key identifier:   9E:03:32:8F:39:EE:C6:BD:74:A5:03:7F:17:76:14:8A:28:3A:8F:F1
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       683B4ECB5BF18CBA501383F9B2653D048B6CC0C9
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232392e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3b:4e:cb:5b:f1:8c:ba:50:13:83:f9:b2:65:3d:04:8b:6c:c0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=9E03328F39EEC6BD74A5037F1776148A283A8FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:03:b4:33:6e:46:d2:e6:4c:ef:d2:47:b5:
                    50:e3:39:61:b1:fd:43:36:1f:94:ca:10:4f:36:6c:
                    46:1d:c7:43:ab:d4:0e:30:66:48:d7:cc:a6:21:06:
                    7d:88:1d:c4:22:2f:70:45:f9:b4:75:28:c5:c8:ad:
                    e1:a3:eb:ff:0a:2a:94:cd:b1:56:65:c4:77:d1:0f:
                    2d:69:2e:ed:ca:88:4f:0d:29:c5:92:c2:02:5e:99:
                    90:a7:73:6d:87:d9:c8:0d:44:f5:0d:83:73:0c:13:
                    c8:f6:be:10:b6:0b:c8:32:5a:7f:d9:69:da:a6:a6:
                    ce:a8:13:81:35:cf:2a:06:b4:94:a7:79:d2:b9:ad:
                    25:c1:7a:d9:9d:80:2c:dd:02:19:41:0b:c7:66:c2:
                    a9:91:87:c7:23:3a:4a:1a:5b:7f:7c:48:c7:a5:80:
                    67:2d:a7:f3:9c:a9:b1:3f:aa:44:8c:7b:28:79:b9:
                    fa:81:99:f4:f9:13:3e:51:5b:3b:46:15:05:ba:a5:
                    60:84:e5:a7:60:be:e1:8f:1c:1c:85:4c:f5:92:f6:
                    1b:79:2d:6b:fd:39:1a:ab:c7:34:c3:f7:d6:19:57:
                    de:4f:1c:ba:9c:84:4f:20:a9:c3:f2:97:4e:82:2c:
                    c3:5d:83:1e:89:8e:87:8f:04:9a:62:5d:f2:40:c2:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:32:8F:39:EE:C6:BD:74:A5:03:7F:17:76:14:8A:28:3A:8F:F1
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:c8:ab:f7:98:2c:ad:a3:09:39:fd:3a:d7:95:78:3c:4f:
         2e:68:4d:24:66:8d:9c:d6:c9:47:d0:7a:96:3f:47:c4:ae:1f:
         c7:67:fb:90:70:b5:ce:32:48:57:d7:70:47:e0:92:54:9a:d2:
         08:9b:4d:e2:bf:d7:f1:c7:60:56:81:8c:87:7a:72:3f:a3:d7:
         8e:cf:58:93:2f:bd:59:db:f4:84:2f:b8:23:ee:53:df:46:37:
         2c:aa:33:d7:84:12:3e:69:4a:c0:98:fe:3a:68:b2:07:cd:88:
         11:e8:c4:7e:10:f4:7f:10:e8:bb:49:f8:28:87:2e:6e:3a:d5:
         d0:05:7c:d3:5c:51:b4:2f:54:cc:db:13:84:d8:9a:7f:97:0a:
         c4:86:ee:fb:9c:5d:7a:1c:83:70:b2:07:fe:9a:8c:7b:1d:18:
         ee:9b:b0:72:e8:2c:07:5a:2e:6d:ee:f9:54:e0:ed:c8:c5:76:
         ca:1e:2c:4d:fc:1c:33:7d:e2:b0:8f:d1:34:27:0b:ed:e7:0a:
         42:79:a7:63:71:02:34:be:40:e7:cb:ed:49:a8:c0:0e:16:3e:
         95:eb:0c:7a:ae:a8:7f:83:6d:01:62:3b:cb:83:91:95:ca:9c:
         1f:7a:84:c7:a8:05:c7:d5:98:27:77:57:31:61:03:cf:05:b0:
         76:3d:d5:47
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUaDtOy1vxjLpQE4P5smU9BItswMkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTEwMzEyWhcNMjUwNTIyMTEwODEy
WjAzMTEwLwYDVQQDEyg5RTAzMzI4RjM5RUVDNkJENzRBNTAzN0YxNzc2MTQ4QTI4
M0E4RkYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+kDtDNuRtLm
TO/SR7VQ4zlhsf1DNh+UyhBPNmxGHcdDq9QOMGZI18ymIQZ9iB3EIi9wRfm0dSjF
yK3ho+v/CiqUzbFWZcR30Q8taS7tyohPDSnFksICXpmQp3Nth9nIDUT1DYNzDBPI
9r4QtgvIMlp/2WnapqbOqBOBNc8qBrSUp3nSua0lwXrZnYAs3QIZQQvHZsKpkYfH
IzpKGlt/fEjHpYBnLafznKmxP6pEjHsoebn6gZn0+RM+UVs7RhUFuqVghOWnYL7h
jxwchUz1kvYbeS1r/Tkaq8c0w/fWGVfeTxy6nIRPIKnD8pdOgizDXYMeiY6HjwSa
Yl3yQMIO5wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJ4DMo857sa9dKUDfxd2FIoo
Oo/xMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfflMA0GCSqGSIb3DQEB
CwUAA4IBAQAj2cir95gsraMJOf0615V4PE8uaE0kZo2c1slH0HqWP0fErh/HZ/uQ
cLXOMkhX13BH4JJUmtIIm03iv9fxx2BWgYyHenI/o9eOz1iTL71Z2/SEL7gj7lPf
RjcsqjPXhBI+aUrAmP46aLIHzYgR6MR+EPR/EOi7Sfgohy5uOtXQBXzTXFG0L1TM
2xOE2Jp/lwrEhu77nF16HINwsgf+mox7HRjum7By6CwHWi5t7vlU4O3IxXbKHixN
/BwzfeKwj9E0Jwvt5wpCeadjcQI0vkDny+1JqMAOFj6V6wx6rqh/g20BYjvLg5GV
ypwfeoTHqAXH1Zgnd1cxYQPPBbB2PdVH
-----END CERTIFICATE-----