Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS267888.roa
File:                     AS267888.roa (raw, json)
Hash identifier:          QKpN0xGdnMqnd5N2tfOzDX2rtn0efI6b2WTwqUvXtPI=
Subject key identifier:   6E:96:D1:84:E5:31:32:42:9C:E8:87:69:0F:87:02:1D:CA:66:0D:D4
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       714837F540F69151907C5DDA80AFAB33BE479629
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS267888.roa
Signing time:             Mon 18 Sep 2023 05:41:13 +0000
ROA not before:           Mon 18 Sep 2023 05:36:13 +0000
ROA not after:            Mon 16 Sep 2024 05:41:13 +0000
asID:                     267888
IP address blocks:        140.99.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:48:37:f5:40:f6:91:51:90:7c:5d:da:80:af:ab:33:be:47:96:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 18 05:36:13 2023 GMT
            Not After : Sep 16 05:41:13 2024 GMT
        Subject: CN=6E96D184E53132429CE887690F87021DCA660DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:f6:c9:92:28:7b:b5:9f:4f:4c:1d:7f:d0:
                    21:e9:17:60:43:4f:eb:c8:11:ed:62:05:9e:40:33:
                    ee:cf:63:fb:ab:d6:85:8f:80:d9:d4:9d:d1:3c:bd:
                    da:9b:ad:e2:f9:8c:e3:3a:f5:bb:1d:50:16:e4:17:
                    f2:c0:ce:1b:db:00:b8:19:e7:c3:71:5b:b1:6c:29:
                    ef:ff:2c:e8:00:28:e3:52:34:3b:70:7d:e2:ca:4b:
                    39:d4:2c:42:4a:12:c5:29:d8:17:da:60:e4:a2:57:
                    22:c1:87:eb:ca:e4:71:ba:b0:fb:49:e8:67:00:48:
                    df:b7:6e:53:ec:a3:b6:2e:eb:7d:2d:b3:85:79:99:
                    a6:3e:00:69:e3:5e:b1:03:da:4a:f0:0d:74:b4:e3:
                    20:ba:d8:a4:bf:81:5a:11:08:5b:04:d1:14:cc:80:
                    49:a2:d6:1d:53:cc:7e:1c:6a:ed:d6:b9:36:ee:df:
                    95:cb:1d:05:c8:b3:ab:67:46:09:51:73:4e:62:17:
                    83:97:0b:f8:bb:e9:a6:64:99:84:3a:51:bb:8c:09:
                    b1:1e:66:ba:ca:58:f8:d4:9b:7f:6d:ad:e4:ad:b2:
                    1a:0a:12:96:2d:1a:a6:70:02:5f:c6:46:dd:7d:fc:
                    35:96:4d:63:f9:53:85:c5:69:3f:a0:fa:30:cd:c5:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:D1:84:E5:31:32:42:9C:E8:87:69:0F:87:02:1D:CA:66:0D:D4
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS267888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:02:1b:f3:53:75:8b:26:9f:c9:e6:55:c2:4a:47:5d:e9:7b:
         6a:00:eb:e2:00:34:6e:31:bf:aa:fe:89:15:63:5a:93:6a:8f:
         f8:fc:5e:30:b8:a2:fd:1a:70:70:5a:96:38:7e:46:98:57:71:
         8b:fc:57:48:07:db:e1:23:21:77:19:7a:a0:85:7f:3c:61:da:
         d6:f3:55:c1:2e:d9:9b:37:7d:79:6e:d7:aa:d2:ce:33:e2:16:
         98:f2:a8:9b:bf:bc:44:07:dc:e7:46:c3:91:5a:88:c2:07:f4:
         7b:57:e6:34:a8:5b:f0:ac:9a:e1:88:d2:20:57:6f:20:dd:fa:
         52:a3:5f:fb:ee:de:31:de:08:28:ad:00:b2:5a:5e:19:c8:fe:
         4f:52:5a:8b:7c:b9:07:15:4a:42:a2:0a:cd:10:9f:76:78:e6:
         ac:5c:c2:62:4c:75:ea:a4:11:1e:b2:f7:eb:df:6c:b5:a1:9b:
         57:6b:0d:c0:93:a6:c5:97:4f:9d:fd:5d:51:bb:ac:4e:9c:20:
         5c:ee:49:67:7c:f3:10:07:1d:5f:6a:f7:cb:f3:56:97:da:88:
         82:f9:c0:c4:85:7c:69:12:9d:6a:ac:6f:50:52:dc:91:41:27:
         2b:61:89:ca:3d:79:7f:be:a6:cd:ea:d2:e2:81:ba:41:7c:15:
         53:33:23:a6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUcUg39UD2kVGQfF3agK+rM75HlikwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwOTE4MDUzNjEzWhcNMjQwOTE2MDU0MTEz
WjAzMTEwLwYDVQQDEyg2RTk2RDE4NEU1MzEzMjQyOUNFODg3NjkwRjg3MDIxRENB
NjYwREQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLf2yZIoe7Wf
T0wdf9Ah6RdgQ0/ryBHtYgWeQDPuz2P7q9aFj4DZ1J3RPL3am63i+YzjOvW7HVAW
5BfywM4b2wC4GefDcVuxbCnv/yzoACjjUjQ7cH3iyks51CxCShLFKdgX2mDkolci
wYfryuRxurD7SehnAEjft25T7KO2Lut9LbOFeZmmPgBp416xA9pK8A10tOMgutik
v4FaEQhbBNEUzIBJotYdU8x+HGrt1rk27t+Vyx0FyLOrZ0YJUXNOYheDlwv4u+mm
ZJmEOlG7jAmxHma6ylj41Jt/ba3krbIaChKWLRqmcAJfxkbdffw1lk1j+VOFxWk/
oPowzcWCOQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFG6W0YTlMTJCnOiHaQ+HAh3K
Zg3UMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzI2Nzg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxj3DANBgkqhkiG9w0BAQsFAAOC
AQEASQIb81N1iyafyeZVwkpHXel7agDr4gA0bjG/qv6JFWNak2qP+PxeMLii/Rpw
cFqWOH5GmFdxi/xXSAfb4SMhdxl6oIV/PGHa1vNVwS7Zmzd9eW7XqtLOM+IWmPKo
m7+8RAfc50bDkVqIwgf0e1fmNKhb8Kya4YjSIFdvIN36UqNf++7eMd4IKK0Aslpe
Gcj+T1Jai3y5BxVKQqIKzRCfdnjmrFzCYkx16qQRHrL3699staGbV2sNwJOmxZdP
nf1dUbusTpwgXO5JZ3zzEAcdX2r3y/NWl9qIgvnAxIV8aRKdaqxvUFLckUEnK2GJ
yj15f76mzerS4oG6QXwVUzMjpg==
-----END CERTIFICATE-----