Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20343030383636.roa
File:                     37342e3132342e3139322e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          7TNNVSmCL5tA600Z0WYavDRzZkkc2r24j/4C7n1zjPQ=
Subject key identifier:   88:5E:AA:E3:86:7A:AB:48:98:81:80:FC:48:70:66:F3:A4:F2:CE:2C
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       4543D9216D31CDCBE71FA54CF3AB8C7484C73619
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20343030383636.roa
Signing time:             Thu 23 May 2024 11:12:25 +0000
ROA not before:           Thu 23 May 2024 11:07:25 +0000
ROA not after:            Thu 22 May 2025 11:12:25 +0000
asID:                     400866
IP address blocks:        74.124.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:43:d9:21:6d:31:cd:cb:e7:1f:a5:4c:f3:ab:8c:74:84:c7:36:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:07:25 2024 GMT
            Not After : May 22 11:12:25 2025 GMT
        Subject: CN=885EAAE3867AAB48988180FC487066F3A4F2CE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:6d:b9:18:c5:7e:b7:bf:77:20:46:4f:de:
                    f8:dd:13:b5:3a:e7:47:4a:24:85:22:88:02:fa:b4:
                    e2:1f:32:7b:62:de:a1:b8:16:a8:1f:98:cf:06:05:
                    ef:d8:36:9f:39:f8:6e:fa:39:87:6e:1a:c4:a7:a2:
                    9f:e8:35:19:72:c1:0a:32:7a:96:80:eb:87:81:19:
                    8a:60:72:99:9f:83:33:4b:ac:5b:32:b3:30:d6:35:
                    3d:5e:51:11:f6:8a:95:57:c0:bf:33:f9:cf:13:a0:
                    ec:c0:fc:22:e6:0e:e8:4e:05:3e:04:be:81:35:bf:
                    0f:de:b9:53:b2:92:01:3d:2b:3a:ab:ac:8b:71:cf:
                    93:ab:dc:90:85:88:95:ac:3b:56:98:ca:5a:58:63:
                    5b:c2:0b:63:d8:33:b9:89:ff:3a:29:3d:96:ea:49:
                    e2:63:16:f1:91:56:f0:40:50:d4:81:04:ed:c5:d6:
                    89:fd:13:a3:00:0e:29:ca:78:24:57:0a:c5:ae:aa:
                    26:7c:e4:cc:6d:6d:e7:99:15:be:77:30:be:d5:19:
                    8a:de:12:5e:c5:d0:3e:b0:3e:bc:8e:c4:37:cf:86:
                    af:89:5e:8c:5f:f9:7d:3d:56:0c:30:b0:27:ca:b7:
                    f3:a1:bf:57:de:dc:6f:b4:bd:01:c4:54:52:b6:f1:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5E:AA:E3:86:7A:AB:48:98:81:80:FC:48:70:66:F3:A4:F2:CE:2C
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:08:4b:18:05:b2:e5:52:d6:5b:e3:48:1f:0e:e1:33:c0:
         19:c9:ae:83:19:89:e4:be:6b:1f:9b:8c:5c:16:d1:59:84:93:
         29:f3:ef:ff:4e:46:81:dd:f0:3d:15:23:8c:1c:d0:7b:fe:d8:
         69:58:3a:d2:64:15:b9:1f:5a:b1:a3:24:1d:e4:f2:92:e1:fd:
         d0:a8:a4:ee:d1:67:45:be:a1:39:84:83:2e:5e:70:5b:26:f5:
         e6:50:44:26:d6:d7:eb:40:a9:0a:88:90:df:f5:78:09:90:d4:
         22:04:4c:fc:03:c6:e3:5f:35:86:65:fc:96:b8:15:ae:3f:37:
         05:25:d5:28:a6:cd:b4:88:a8:90:56:89:78:80:dd:8a:e0:7d:
         33:b9:da:96:a0:77:a7:75:96:c8:3a:ae:b9:8d:f5:cb:88:5b:
         b2:69:a8:32:bf:e3:9f:db:68:84:f2:39:e0:ea:6d:cf:26:bf:
         5a:cd:d7:a4:4a:e6:9b:4e:8f:7e:f0:51:f0:2f:99:74:93:1e:
         59:67:61:06:90:d5:93:87:9a:92:d1:56:3e:c7:e5:c8:28:8d:
         4d:88:e0:5a:17:70:79:1c:66:45:c3:6e:c4:f3:a8:42:cf:55:
         71:7f:1e:16:c0:b0:ea:a2:39:0e:f3:dd:14:03:a4:d3:f8:22:
         ed:fc:c5:e2
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIURUPZIW0xzcvnH6VM86uMdITHNhkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTEwNzI1WhcNMjUwNTIyMTExMjI1
WjAzMTEwLwYDVQQDEyg4ODVFQUFFMzg2N0FBQjQ4OTg4MTgwRkM0ODcwNjZGM0E0
RjJDRTJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIVtuRjFfre/
dyBGT9743RO1OudHSiSFIogC+rTiHzJ7Yt6huBaoH5jPBgXv2DafOfhu+jmHbhrE
p6Kf6DUZcsEKMnqWgOuHgRmKYHKZn4MzS6xbMrMw1jU9XlER9oqVV8C/M/nPE6Ds
wPwi5g7oTgU+BL6BNb8P3rlTspIBPSs6q6yLcc+Tq9yQhYiVrDtWmMpaWGNbwgtj
2DO5if86KT2W6kniYxbxkVbwQFDUgQTtxdaJ/ROjAA4pyngkVwrFrqomfOTMbW3n
mRW+dzC+1RmK3hJexdA+sD68jsQ3z4aviV6MX/l9PVYMMLAnyrfzob9X3txvtL0B
xFRStvHFPwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIhequOGeqtImIGA/EhwZvOk
8s4sMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzM3MzQyZTMxMzIzNDJlMzEzOTMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMwMzgzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnzAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjOQhLGAWy5VLWW+NIHw7hM8AZya6DGYnkvmsfm4xcFtFZhJMp8+//
TkaB3fA9FSOMHNB7/thpWDrSZBW5H1qxoyQd5PKS4f3QqKTu0WdFvqE5hIMuXnBb
JvXmUEQm1tfrQKkKiJDf9XgJkNQiBEz8A8bjXzWGZfyWuBWuPzcFJdUops20iKiQ
Vol4gN2K4H0zudqWoHendZbIOq65jfXLiFuyaagyv+Of22iE8jng6m3PJr9azdek
SuabTo9+8FHwL5l0kx5ZZ2EGkNWTh5qS0VY+x+XIKI1NiOBaF3B5HGZFw27E86hC
z1Vxfx4WwLDqojkO890UA6TT+CLt/MXi
-----END CERTIFICATE-----