Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS151490.roa
File:                     AS151490.roa (raw, json)
Hash identifier:          8vXbEu59yDSbyPEpYzg8WMuumOAXlOL1I/n8p89ENOc=
Subject key identifier:   94:0A:96:BD:E3:2A:48:AE:0D:6D:96:DE:12:9A:A0:6B:EC:50:3C:A8
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       598092D100B43F2BF305D1A2F9F942678FBFB672
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS151490.roa
Signing time:             Mon 27 May 2024 15:01:04 +0000
ROA not before:           Mon 27 May 2024 14:56:04 +0000
ROA not after:            Mon 26 May 2025 15:01:04 +0000
asID:                     151490
IP address blocks:        23.156.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:80:92:d1:00:b4:3f:2b:f3:05:d1:a2:f9:f9:42:67:8f:bf:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 27 14:56:04 2024 GMT
            Not After : May 26 15:01:04 2025 GMT
        Subject: CN=940A96BDE32A48AE0D6D96DE129AA06BEC503CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:79:c5:f4:dd:02:86:83:ed:98:59:46:e3:84:
                    30:92:4a:f1:88:bc:43:a1:c6:77:3e:12:4a:bb:dd:
                    cd:a5:4a:bb:d5:84:20:bb:11:af:ce:2f:6f:ae:a0:
                    c5:eb:80:3f:0c:0c:b9:37:2d:75:e0:8c:a9:d7:ee:
                    86:56:68:3d:5a:1f:02:fa:2f:e4:08:45:40:0d:96:
                    92:58:b6:6f:6a:a4:c9:4d:a2:ec:8a:a7:84:a2:88:
                    0a:4d:a6:b2:d5:3e:32:02:cc:10:f8:e9:4a:a6:c9:
                    89:2b:52:c0:b3:50:83:a5:86:de:8f:6a:63:45:63:
                    b5:fa:bd:1c:b0:9a:96:d7:e5:99:64:cb:88:64:4c:
                    31:1d:1c:8c:20:ec:8a:d9:e1:77:09:43:82:69:5b:
                    1a:4b:b6:e6:06:59:d1:7a:fa:38:10:b9:df:c9:20:
                    e3:80:1a:77:5e:05:50:b8:45:f3:1d:23:ac:d4:bb:
                    4a:df:77:c2:1b:c9:e4:0f:07:4a:01:a9:5b:c8:0c:
                    63:ae:27:2b:8b:85:c9:8c:ee:8d:10:27:f0:ea:7d:
                    50:c7:c1:61:b6:e0:ed:8f:0c:b2:37:83:f4:54:0c:
                    1d:29:8a:a3:50:08:00:0f:c0:f0:fa:cc:a4:ae:0e:
                    f7:50:64:7a:74:19:4d:ad:b3:e8:ee:62:0d:0b:53:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0A:96:BD:E3:2A:48:AE:0D:6D:96:DE:12:9A:A0:6B:EC:50:3C:A8
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS151490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:36:88:15:27:71:86:bf:38:86:dd:1d:1a:ee:ea:23:78:
         46:73:69:3e:8a:a6:15:d6:3e:bd:1e:3d:2e:03:1f:df:73:55:
         85:7b:3a:01:0a:4d:7d:da:a1:79:2c:33:3d:96:92:b0:4e:67:
         50:82:64:82:30:9f:8e:28:33:d6:4e:77:b6:e8:7e:07:4b:53:
         00:6f:dc:94:fd:c1:13:1d:23:85:8c:96:9c:50:5b:d1:3b:b5:
         32:37:40:2b:fe:c6:62:45:a5:29:a7:42:d4:b7:c6:e3:ac:ef:
         e3:1f:b0:64:22:7f:4d:ff:30:7d:0e:36:e7:65:2e:e7:86:04:
         c6:43:ab:0e:11:45:0f:d9:b1:04:11:9a:3b:42:10:39:23:95:
         7e:69:00:46:e6:dd:54:d7:f9:d2:69:92:72:48:4f:f0:6a:ce:
         32:43:c8:1a:1a:93:fa:d4:d5:e2:80:4e:81:3f:0f:d9:92:97:
         50:72:11:e7:ac:11:5b:40:8d:fa:e0:13:d3:3f:2d:00:64:c7:
         3e:aa:bc:c9:3a:65:81:67:24:7a:d9:37:47:3c:b6:c9:c9:f0:
         1d:0f:7e:3f:ca:10:ea:36:6a:c2:1d:5f:d4:c1:e6:71:32:d4:
         eb:66:fc:9d:3c:c4:71:79:7d:7b:81:f0:4e:f5:35:12:de:00:
         a8:19:db:77
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWYCS0QC0PyvzBdGi+flCZ4+/tnIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNTI3MTQ1NjA0WhcNMjUwNTI2MTUwMTA0
WjAzMTEwLwYDVQQDEyg5NDBBOTZCREUzMkE0OEFFMEQ2RDk2REUxMjlBQTA2QkVD
NTAzQ0E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinnF9N0ChoPt
mFlG44QwkkrxiLxDocZ3PhJKu93NpUq71YQguxGvzi9vrqDF64A/DAy5Ny114Iyp
1+6GVmg9Wh8C+i/kCEVADZaSWLZvaqTJTaLsiqeEoogKTaay1T4yAswQ+OlKpsmJ
K1LAs1CDpYbej2pjRWO1+r0csJqW1+WZZMuIZEwxHRyMIOyK2eF3CUOCaVsaS7bm
BlnRevo4ELnfySDjgBp3XgVQuEXzHSOs1LtK33fCG8nkDwdKAalbyAxjricri4XJ
jO6NECfw6n1Qx8FhtuDtjwyyN4P0VAwdKYqjUAgAD8Dw+sykrg73UGR6dBlNrbPo
7mINC1Mk5QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJQKlr3jKkiuDW2W3hKaoGvs
UDyoMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzE1MTQ5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABec8DANBgkqhkiG9w0BAQsFAAOC
AQEAq382iBUncYa/OIbdHRru6iN4RnNpPoqmFdY+vR49LgMf33NVhXs6AQpNfdqh
eSwzPZaSsE5nUIJkgjCfjigz1k53tuh+B0tTAG/clP3BEx0jhYyWnFBb0Tu1MjdA
K/7GYkWlKadC1LfG46zv4x+wZCJ/Tf8wfQ4252Uu54YExkOrDhFFD9mxBBGaO0IQ
OSOVfmkARubdVNf50mmSckhP8GrOMkPIGhqT+tTV4oBOgT8P2ZKXUHIR56wRW0CN
+uAT0z8tAGTHPqq8yTplgWcketk3Rzy2ycnwHQ9+P8oQ6jZqwh1f1MHmcTLU62b8
nTzEcXl9e4HwTvU1Et4AqBnbdw==
-----END CERTIFICATE-----
Generated at Sat Jul 27 02:03:47 2024 by rpki-client on console-ams.rpki-client.org