Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa
File:                     3137322e38322e39302e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          idW0EwUO7aRKLXfCUsIVbXkqAklPSroBMw3Z6+KUAIc=
Subject key identifier:   F9:9E:CE:21:58:F1:59:E1:32:4E:A7:F1:AF:4D:45:F3:0C:D4:3B:76
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       28A07FBCA49A5C65310C752BA8D4BAB5A7256566
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa
Signing time:             Mon 01 Jul 2024 22:31:17 +0000
ROA not before:           Mon 01 Jul 2024 22:26:17 +0000
ROA not after:            Mon 30 Jun 2025 22:31:17 +0000
asID:                     3280
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 13:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a0:7f:bc:a4:9a:5c:65:31:0c:75:2b:a8:d4:ba:b5:a7:25:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul  1 22:26:17 2024 GMT
            Not After : Jun 30 22:31:17 2025 GMT
        Subject: CN=F99ECE2158F159E1324EA7F1AF4D45F30CD43B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:7e:c9:c5:f0:7e:45:ed:cd:fb:e2:70:38:
                    80:d6:3b:42:bc:dd:ee:6c:b3:84:55:d6:0b:4a:72:
                    9f:d4:16:e4:53:6a:38:fb:de:dd:a3:01:df:45:67:
                    45:33:23:08:53:f0:92:f4:a9:56:53:b7:a8:f2:c9:
                    86:58:71:47:12:1e:26:8a:bd:4e:f6:a0:72:a7:dc:
                    1f:0d:2d:37:a3:ed:a4:ba:49:ef:e1:0a:0b:37:17:
                    f4:ff:68:47:8f:c2:e6:dc:f5:bb:cf:c5:21:a4:bc:
                    62:50:48:aa:55:c6:a9:60:e0:70:c9:95:26:00:fb:
                    16:57:b5:6e:fd:5e:0c:5b:44:85:9f:71:e1:26:82:
                    fc:e3:4d:f5:9b:ee:fe:35:d2:7e:71:c3:f6:21:67:
                    d8:05:c5:9f:8a:e7:7a:58:b0:98:d3:4c:91:b6:a0:
                    ea:c4:32:65:d9:93:d7:31:65:c3:d5:91:0c:f8:91:
                    a3:13:d0:ad:e5:98:1a:14:27:2e:c1:b9:9d:26:b2:
                    b2:21:7c:f1:6d:59:5e:09:f9:a1:ff:a1:a1:a1:69:
                    23:92:24:0c:51:f1:c7:b2:b5:07:9d:13:67:27:49:
                    e5:2c:6d:b2:c7:b1:50:5a:5a:49:cd:82:c1:4d:7f:
                    14:17:19:d6:73:0d:76:f7:45:ec:c0:ab:ba:e8:86:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9E:CE:21:58:F1:59:E1:32:4E:A7:F1:AF:4D:45:F3:0C:D4:3B:76
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:92:d3:63:84:a8:fe:8b:ff:3b:01:6d:50:14:c7:c1:c7:
         5c:3a:2e:9b:63:c0:b0:ec:02:71:44:42:f9:4f:70:40:89:60:
         00:b6:8e:d4:63:87:9b:a7:28:4f:f3:39:f8:dd:35:f7:6d:0e:
         af:10:09:74:73:94:ab:62:b3:ae:5c:9a:7d:1a:71:44:36:d5:
         50:03:a8:f1:68:fa:86:09:5b:57:e4:0b:87:47:db:f8:c0:b6:
         ea:93:74:70:e4:38:58:aa:c3:fb:61:4d:b4:7f:a1:38:12:90:
         98:38:60:48:a0:85:5c:fe:f8:ea:8a:21:ae:7d:0d:28:b8:e2:
         8b:69:03:90:31:e7:47:9c:02:28:3c:e2:62:c2:7f:5e:9e:f7:
         6f:88:a7:d8:89:1c:7a:ae:08:04:72:da:82:51:e4:36:d5:10:
         6b:ea:70:5f:b4:d4:aa:0e:cb:4a:18:ac:cd:ec:7a:0d:47:9d:
         0a:89:bf:fe:86:d1:61:9a:63:57:fe:f5:99:bc:4a:0e:76:b8:
         78:94:8a:58:57:67:0c:4e:12:bf:35:02:c1:c0:51:91:a9:73:
         8e:1b:54:13:ff:f2:83:50:6f:61:7a:ff:7b:b4:6d:d7:7e:75:
         55:ad:a9:e6:d7:7b:a6:58:02:15:9f:30:9a:c9:c7:5c:88:18:
         b4:3a:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----