Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          ZF4lnHQ6l9OR1DDePyQkmNzUcsomj4PwxqEUDFT1NjQ=
Subject key identifier:   72:DA:08:FA:0D:A8:8F:F0:5E:F9:E9:66:B2:BE:06:F2:06:51:3E:39
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       18D5FC4A40FE2AA09E093CDFD77CDBDAC48167B7
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16276.roa
Signing time:             Sat 16 Mar 2024 14:04:28 +0000
ROA not before:           Sat 16 Mar 2024 13:59:28 +0000
ROA not after:            Sat 15 Mar 2025 14:04:28 +0000
asID:                     16276
IP address blocks:        140.99.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 18:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d5:fc:4a:40:fe:2a:a0:9e:09:3c:df:d7:7c:db:da:c4:81:67:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 16 13:59:28 2024 GMT
            Not After : Mar 15 14:04:28 2025 GMT
        Subject: CN=72DA08FA0DA88FF05EF9E966B2BE06F206513E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:e5:17:c4:dc:97:29:86:9f:ad:65:2f:57:
                    08:79:fc:7d:8c:b9:a9:aa:43:94:b8:72:81:f7:36:
                    94:94:25:12:36:12:2e:23:f8:77:38:67:42:a2:94:
                    0b:88:9a:85:51:5d:87:3c:6b:da:a4:41:43:72:25:
                    8a:f9:9d:23:f4:ad:1e:18:63:87:ef:88:60:5c:e2:
                    cd:d4:31:9a:9b:90:6d:6c:ac:22:b7:1f:fb:74:11:
                    ad:e6:f3:37:4d:fc:e7:4b:d6:6b:2c:0f:db:6d:2d:
                    94:13:df:29:48:5c:a5:dc:3b:26:dc:21:15:32:2e:
                    39:b0:35:ee:61:67:c5:a8:ab:83:7d:f4:b0:38:96:
                    09:79:1f:d1:a2:dd:9c:00:a0:8b:38:f6:68:ab:85:
                    6d:41:cb:c3:c6:f6:eb:3c:31:bd:f1:e2:2f:61:0b:
                    c5:59:15:82:33:9c:db:68:96:c0:d6:0e:8b:7d:04:
                    03:e7:13:58:ec:d4:49:83:83:18:40:54:00:02:08:
                    5f:ac:36:1c:a0:8f:42:75:ea:cd:79:91:db:63:12:
                    c2:a2:55:13:f4:43:c0:ca:a4:af:af:06:50:b1:50:
                    1b:7d:36:3b:a8:56:5a:3c:3f:90:c8:d9:44:f3:1e:
                    30:ea:59:1f:d6:41:a9:62:a5:c3:5c:79:82:64:90:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:08:FA:0D:A8:8F:F0:5E:F9:E9:66:B2:BE:06:F2:06:51:3E:39
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:6f:eb:d2:2b:7e:84:15:11:52:4d:b6:26:9b:2a:8b:db:
         dc:e2:03:0a:6b:b3:7f:62:66:bd:b0:6a:e9:fd:8d:0f:23:78:
         79:2d:dc:35:96:50:e8:e3:0b:15:73:c8:94:bb:47:8b:06:0b:
         68:d3:05:34:e6:19:9b:89:fb:6c:a8:2e:f5:50:3e:c0:fa:3b:
         19:36:56:94:f6:41:f6:68:ca:00:40:05:3d:26:db:4c:c0:7a:
         86:13:c7:c5:e1:70:9f:a5:33:07:d2:a2:0a:15:9e:c9:89:41:
         72:6a:38:40:f2:c1:26:3c:c8:20:d1:2f:e6:0a:81:40:41:90:
         df:fe:92:d7:08:e1:ea:fe:fc:50:5e:df:0b:9d:a8:f9:12:05:
         26:79:38:85:6c:e3:c0:05:21:b7:62:fc:6a:72:d9:11:e7:dd:
         39:f7:ef:69:6a:08:37:ee:7f:a8:94:75:7a:37:52:2e:55:ac:
         67:df:fa:07:94:92:84:9e:b6:26:c0:83:67:85:4c:5a:51:55:
         3e:bf:8b:9a:7f:c2:9c:a0:85:ba:a1:b0:b9:c4:b1:f3:6f:18:
         49:5e:76:5b:d6:e8:82:b7:b5:ee:f5:54:ac:5c:c6:3d:86:0a:
         2f:14:07:be:e6:a7:a1:40:6c:94:9f:16:6d:03:0e:ed:10:74:
         e8:a5:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----