Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          MPDDqpwNCUTNiCqWQvrTJcj6Mn8ctLxK4twrAcL4Dpk=
Subject key identifier:   33:7E:67:CD:6D:DE:1B:4C:33:D0:62:F0:B8:D1:7C:A0:7D:B3:93:19
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       65D278A8767BC4E079CA2480AF39BE82A9779CE0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS35913.roa
Signing time:             Fri 01 Sep 2023 17:00:50 +0000
ROA not before:           Fri 01 Sep 2023 16:55:50 +0000
ROA not after:            Fri 30 Aug 2024 17:00:50 +0000
asID:                     35913
IP address blocks:        140.99.38.0/24 maxlen: 24
                          140.99.40.0/24 maxlen: 24
                          140.99.41.0/24 maxlen: 24
                          140.99.42.0/24 maxlen: 24
                          140.99.43.0/24 maxlen: 24
                          140.99.44.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24
                          140.99.49.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.59.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.77.0/24 maxlen: 24
                          140.99.79.0/24 maxlen: 24
                          140.99.81.0/24 maxlen: 24
                          140.99.84.0/24 maxlen: 24
                          140.99.85.0/24 maxlen: 24
                          140.99.86.0/24 maxlen: 24
                          140.99.87.0/24 maxlen: 24
                          140.99.88.0/24 maxlen: 24
                          140.99.91.0/24 maxlen: 24
                          140.99.92.0/24 maxlen: 24
                          140.99.94.0/24 maxlen: 24
                          140.99.95.0/24 maxlen: 24
                          140.99.102.0/24 maxlen: 24
                          140.99.112.0/24 maxlen: 24
                          140.99.120.0/24 maxlen: 24
                          140.99.124.0/24 maxlen: 24
                          140.99.126.0/24 maxlen: 24
                          140.99.127.0/24 maxlen: 24
                          140.99.128.0/24 maxlen: 24
                          140.99.129.0/24 maxlen: 24
                          140.99.140.0/24 maxlen: 24
                          140.99.141.0/24 maxlen: 24
                          140.99.142.0/24 maxlen: 24
                          140.99.143.0/24 maxlen: 24
                          140.99.148.0/24 maxlen: 24
                          140.99.149.0/24 maxlen: 24
                          140.99.150.0/24 maxlen: 24
                          140.99.151.0/24 maxlen: 24
                          140.99.152.0/24 maxlen: 24
                          140.99.153.0/24 maxlen: 24
                          140.99.154.0/24 maxlen: 24
                          140.99.155.0/24 maxlen: 24
                          140.99.156.0/24 maxlen: 24
                          140.99.157.0/24 maxlen: 24
                          140.99.158.0/24 maxlen: 24
                          140.99.159.0/24 maxlen: 24
                          140.99.160.0/24 maxlen: 24
                          140.99.161.0/24 maxlen: 24
                          140.99.162.0/24 maxlen: 24
                          140.99.163.0/24 maxlen: 24
                          140.99.164.0/24 maxlen: 24
                          140.99.165.0/24 maxlen: 24
                          140.99.166.0/24 maxlen: 24
                          140.99.167.0/24 maxlen: 24
                          140.99.168.0/24 maxlen: 24
                          140.99.169.0/24 maxlen: 24
                          140.99.170.0/24 maxlen: 24
                          140.99.171.0/24 maxlen: 24
                          140.99.180.0/24 maxlen: 24
                          140.99.181.0/24 maxlen: 24
                          140.99.182.0/24 maxlen: 24
                          140.99.183.0/24 maxlen: 24
                          140.99.184.0/24 maxlen: 24
                          140.99.186.0/24 maxlen: 24
                          140.99.187.0/24 maxlen: 24
                          140.99.188.0/24 maxlen: 24
                          140.99.189.0/24 maxlen: 24
                          140.99.191.0/24 maxlen: 24
                          140.99.192.0/24 maxlen: 24
                          140.99.193.0/24 maxlen: 24
                          140.99.194.0/24 maxlen: 24
                          140.99.195.0/24 maxlen: 24
                          140.99.196.0/24 maxlen: 24
                          140.99.197.0/24 maxlen: 24
                          140.99.198.0/24 maxlen: 24
                          140.99.199.0/24 maxlen: 24
                          140.99.200.0/24 maxlen: 24
                          140.99.201.0/24 maxlen: 24
                          140.99.202.0/24 maxlen: 24
                          140.99.203.0/24 maxlen: 24
                          140.99.204.0/24 maxlen: 24
                          140.99.205.0/24 maxlen: 24
                          140.99.206.0/24 maxlen: 24
                          140.99.207.0/24 maxlen: 24
                          140.99.208.0/24 maxlen: 24
                          140.99.209.0/24 maxlen: 24
                          140.99.210.0/24 maxlen: 24
                          140.99.211.0/24 maxlen: 24
                          140.99.212.0/24 maxlen: 24
                          140.99.214.0/24 maxlen: 24
                          140.99.215.0/24 maxlen: 24
                          140.99.216.0/24 maxlen: 24
                          140.99.217.0/24 maxlen: 24
                          140.99.218.0/24 maxlen: 24
                          140.99.219.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.222.0/24 maxlen: 24
                          140.99.223.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.233.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
                          140.99.236.0/24 maxlen: 24
                          140.99.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d2:78:a8:76:7b:c4:e0:79:ca:24:80:af:39:be:82:a9:77:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  1 16:55:50 2023 GMT
            Not After : Aug 30 17:00:50 2024 GMT
        Subject: CN=337E67CD6DDE1B4C33D062F0B8D17CA07DB39319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:51:72:1e:48:91:39:bb:ba:df:02:64:51:
                    f9:fb:9a:92:29:c4:b5:58:30:73:49:13:af:c8:2e:
                    2b:d2:13:4d:60:9f:52:b0:73:48:fa:6d:da:2d:ae:
                    05:69:20:4b:48:a4:a6:7a:d8:1f:51:cf:72:c3:49:
                    69:3d:f4:3c:0b:33:fb:06:2b:39:99:55:8e:73:d0:
                    b6:b6:ac:1f:e8:2c:2c:35:1e:33:c2:a5:a6:56:c7:
                    7f:17:e2:35:62:6a:4a:4d:68:cc:5b:3f:5d:46:03:
                    57:a1:8a:dd:aa:db:61:dc:59:89:32:67:54:4b:6e:
                    cb:17:a1:75:52:b5:f4:ac:87:13:68:e9:59:bd:05:
                    11:a8:b7:5a:6b:e1:6f:9a:dd:8f:fc:3c:f8:66:0e:
                    ae:f5:1e:3b:13:e2:50:d3:68:39:95:dc:36:25:5e:
                    6e:2f:ad:a6:26:49:9e:64:ba:22:71:8b:3d:6a:de:
                    12:d8:cf:fc:70:e0:f7:85:cc:94:de:08:f9:b4:3d:
                    6b:47:b7:13:fe:2e:7b:82:6f:ce:7f:64:dc:9b:76:
                    65:e6:e6:34:95:91:a6:5e:6b:ca:b2:7d:ab:0f:3c:
                    1e:16:77:88:ce:ac:46:34:d4:d0:c6:c0:7c:59:8b:
                    bf:9a:9d:66:39:f6:d9:3d:44:29:62:3d:94:de:9d:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:67:CD:6D:DE:1B:4C:33:D0:62:F0:B8:D1:7C:A0:7D:B3:93:19
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.38.0/24
                  140.99.40.0-140.99.44.255
                  140.99.48.0-140.99.57.255
                  140.99.59.0/24
                  140.99.61.0/24
                  140.99.63.0/24
                  140.99.66.0/24
                  140.99.70.0/23
                  140.99.73.0/24
                  140.99.75.0/24
                  140.99.77.0/24
                  140.99.79.0/24
                  140.99.81.0/24
                  140.99.84.0-140.99.88.255
                  140.99.91.0-140.99.92.255
                  140.99.94.0/23
                  140.99.102.0/24
                  140.99.112.0/24
                  140.99.120.0/24
                  140.99.124.0/24
                  140.99.126.0-140.99.129.255
                  140.99.140.0/22
                  140.99.148.0-140.99.171.255
                  140.99.180.0-140.99.184.255
                  140.99.186.0-140.99.189.255
                  140.99.191.0-140.99.212.255
                  140.99.214.0-140.99.219.255
                  140.99.221.0-140.99.223.255
                  140.99.232.0-140.99.237.255

    Signature Algorithm: sha256WithRSAEncryption
         33:16:0f:76:64:86:98:e7:98:22:66:f0:6d:e6:ba:ab:4f:d7:
         46:75:d9:5f:aa:c0:fa:31:1c:b4:82:90:ce:f9:0f:1a:63:a6:
         1e:41:18:fa:63:7e:0e:98:4b:ed:3d:e8:8d:0c:97:0e:e5:d8:
         87:ab:29:df:4c:93:64:81:6b:33:44:6a:cf:e0:59:4b:18:25:
         56:b8:e4:fd:5e:10:36:60:a9:17:b8:4f:6a:51:83:4b:c7:49:
         55:41:1e:5b:e8:e5:23:3d:54:6c:f5:d9:83:ac:f2:62:73:36:
         b9:b5:d0:5c:46:2a:ce:55:d7:a6:de:26:cd:11:c1:07:f0:b5:
         6f:6e:5d:e2:f2:bf:12:9d:6f:2e:93:6a:1d:c5:2a:ef:5f:25:
         a9:48:a7:8f:cb:50:77:76:76:9b:8c:8b:16:17:74:65:c9:d6:
         47:0a:16:62:fc:1e:f1:0d:8f:af:c3:97:39:30:2e:a7:62:ff:
         4a:3b:6f:11:a5:bc:ef:da:b0:41:d4:02:ea:17:8d:5a:b5:87:
         12:39:21:d7:03:8d:29:95:a4:51:d5:b1:46:24:c4:80:e8:c2:
         06:29:78:c0:a4:51:25:24:13:5a:d9:49:cb:67:06:35:cd:a8:
         d8:ef:0b:c7:48:a9:73:b8:d4:a8:30:61:06:0a:56:dc:c6:50:
         85:cc:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 18:00:49 2023 by rpki-client on console-ams.rpki-client.org