Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          jw9JYpeYnNPU/SpfVTVwO27xi/TTJyhhxVW2el5Fcqs=
Subject key identifier:   35:85:AF:6D:65:1E:14:A8:13:03:40:07:E6:1D:42:0D:C8:83:D2:1C
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0988CA8BA0AD47AD7221F2B79BF5B91AADE60F47
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa
Signing time:             Thu 20 Apr 2023 03:01:14 +0000
ROA not before:           Thu 20 Apr 2023 02:56:14 +0000
ROA not after:            Thu 18 Apr 2024 03:01:14 +0000
asID:                     397423
IP address blocks:        140.99.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:88:ca:8b:a0:ad:47:ad:72:21:f2:b7:9b:f5:b9:1a:ad:e6:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 20 02:56:14 2023 GMT
            Not After : Apr 18 03:01:14 2024 GMT
        Subject: CN=3585AF6D651E14A813034007E61D420DC883D21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:f8:dc:d9:c8:43:6f:0f:79:28:48:72:2f:
                    db:70:76:2f:35:6c:48:4e:e1:40:d7:7d:52:93:85:
                    23:44:0a:f9:08:c6:cf:71:ce:60:02:d1:e6:f4:df:
                    52:19:c1:08:47:a5:a3:d5:31:9a:0f:70:9d:2a:5e:
                    76:a1:d8:f7:d9:65:08:dd:53:41:7a:19:c3:42:54:
                    80:d5:1e:96:72:15:dc:d8:91:f9:2c:e7:38:02:29:
                    d0:85:a7:37:46:8f:ad:9c:41:0b:2f:e0:76:40:da:
                    26:74:a3:ab:0c:ee:8f:23:46:4b:84:59:87:7e:90:
                    f5:4a:61:0d:72:25:39:82:5f:2a:69:57:86:c8:70:
                    22:3a:5d:e6:48:92:04:79:5b:97:a1:6b:fc:ca:1f:
                    ba:a5:da:c6:be:80:1e:ae:5f:70:80:af:27:30:a3:
                    70:fd:85:c0:7e:88:c5:c2:83:b3:31:c1:67:a7:6b:
                    79:c0:f9:69:95:b6:88:8e:e6:8e:ac:e1:2d:aa:2e:
                    b8:e4:5e:91:06:3b:32:26:34:3b:7a:64:8e:8e:97:
                    47:ec:1e:9d:5b:7b:35:ce:a4:6a:17:73:1c:3f:ae:
                    8a:eb:3f:73:01:0c:d7:2a:a8:b8:b4:02:ad:e0:77:
                    79:00:9c:17:b2:47:68:a3:d6:a8:eb:c1:91:81:72:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:AF:6D:65:1E:14:A8:13:03:40:07:E6:1D:42:0D:C8:83:D2:1C
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:f6:56:4a:d9:d4:32:18:e9:80:b7:60:06:c0:f5:11:5f:
         04:b5:ea:e5:ce:4f:35:bc:62:8f:53:cf:9b:3f:7f:6f:e3:e9:
         22:2d:76:2e:af:51:88:2e:57:e0:52:1a:ed:6a:dd:02:31:47:
         d5:3d:f1:99:d7:5f:a0:f6:3d:b2:3f:9a:ba:db:4e:6d:36:96:
         96:fd:05:f1:1c:e5:7a:e5:49:05:75:63:dd:f2:3f:44:07:7a:
         34:1e:07:af:26:8f:af:de:fa:72:32:cc:47:e5:ca:3d:42:93:
         db:46:53:40:e4:d2:ec:46:6f:fb:af:8d:e3:f5:bc:35:39:71:
         c4:09:75:12:0c:1e:58:1f:d1:30:5f:3f:2f:53:9c:f9:11:ae:
         2a:3f:ac:e4:4c:e0:65:23:19:b6:b4:09:b2:74:90:5e:00:31:
         bb:8d:54:d3:4a:9b:99:db:50:82:ef:dd:15:5a:c2:76:76:d3:
         88:38:55:7b:bd:38:87:5c:1d:42:c2:a6:29:96:c8:54:0d:66:
         64:63:4d:60:2b:02:30:42:c0:97:a2:cf:d8:c6:91:a0:5c:f1:
         c3:ce:56:95:bb:3d:bb:69:cd:ae:c0:96:f3:26:35:a6:01:c8:
         e1:50:f0:d8:08:05:ff:83:2f:7b:0d:6a:a5:b8:e1:fa:65:80:
         44:1d:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----