Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          4CMLExMuIcEVASpF+r84n5a0BaKJB60gKkpUf2T+OAk=
Subject key identifier:   BE:64:B9:CE:F6:00:9E:13:3B:7E:10:B0:D6:6E:BE:92:63:71:02:77
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       4ADEA43252AAE91FCD33E2EF323B8E242DCC9F4E
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 07:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:a4:32:52:aa:e9:1f:cd:33:e2:ef:32:3b:8e:24:2d:cc:9f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=BE64B9CEF6009E133B7E10B0D66EBE9263710277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:ab:55:d1:fe:31:46:77:20:57:eb:9b:48:
                    ff:25:8f:c9:f1:58:ac:a7:40:47:d7:10:39:bf:4f:
                    91:6a:4d:55:71:e7:1d:cc:e8:96:71:29:5a:25:1c:
                    90:33:38:d7:c2:99:07:1e:6d:4f:e0:85:e7:29:67:
                    d2:79:fa:4d:43:5f:0f:05:12:80:4d:dd:38:d4:01:
                    14:af:d8:39:f7:38:2c:90:9f:9f:23:88:44:3f:64:
                    e1:02:34:45:9c:e6:06:5c:68:2f:41:ab:07:7d:0e:
                    c5:d9:48:b9:0e:cc:e2:a4:13:93:59:6d:c0:b7:ac:
                    fb:4b:58:a9:50:4c:27:ee:e7:34:61:bd:03:b3:64:
                    ae:ad:c7:ae:3a:78:67:fd:0d:9a:4d:58:5f:ad:84:
                    7c:77:0e:2b:ee:b9:9a:4b:dc:01:92:5b:d4:3a:35:
                    8d:1f:d0:a7:ed:f7:ef:5d:a1:28:c4:e8:4b:9a:2c:
                    f7:79:07:bb:43:bb:76:45:8d:f2:64:b9:b4:82:a7:
                    f9:03:44:15:61:c6:10:26:db:05:1d:60:f7:f6:bf:
                    31:a0:5c:00:dc:aa:c9:3b:8d:d4:0c:56:52:2c:5b:
                    2f:4a:cc:48:fd:93:a4:f0:6f:cc:a8:60:0c:ad:a9:
                    99:47:04:0e:8c:51:3e:49:19:8d:d4:0c:1f:19:0e:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:B9:CE:F6:00:9E:13:3B:7E:10:B0:D6:6E:BE:92:63:71:02:77
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:b1:70:e3:ff:87:d5:cf:ae:cb:7b:a7:04:b3:57:f8:17:
         9e:0d:59:68:b4:38:9d:67:2e:2e:bf:92:e1:b0:79:bc:2a:a2:
         ff:99:79:f1:27:3b:f6:a4:61:15:ee:f2:f8:b2:f3:80:8d:1b:
         ce:16:9f:58:00:af:80:ca:71:6e:ac:0b:08:cf:7f:29:c1:a3:
         1c:34:b1:14:f8:95:0b:3d:5c:76:3c:55:cb:99:7b:cf:80:38:
         b1:6c:96:28:bc:43:e3:b1:61:c7:31:0a:18:46:0b:ba:8c:c0:
         5c:9c:65:0b:1f:53:bb:26:ee:8f:cc:4f:ee:59:b0:3c:e4:59:
         33:de:5d:ed:36:22:44:30:bc:2b:b6:b0:2a:9a:68:2f:39:44:
         6b:87:51:98:72:ed:60:06:02:70:92:fc:31:47:87:cd:5f:40:
         0d:47:20:16:ff:53:d6:d7:86:25:64:e6:2a:52:c3:94:4b:7d:
         9d:e8:2d:16:7e:7b:70:d5:be:40:4b:8a:66:46:19:73:f4:ef:
         f2:e0:b4:3f:c7:23:66:3c:fd:1e:26:89:c6:cc:01:88:53:46:
         05:d9:ed:f7:c1:0e:47:a4:65:05:fc:89:20:4b:f1:fb:c5:d3:
         e4:d2:ee:8c:5b:88:8d:97:97:09:4f:1e:8d:a7:1a:97:25:b3:
         25:71:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----