Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9087.roa
File:                     AS9087.roa (raw, json)
Hash identifier:          FmIWtjgoI0479eCgIzcYe3SgtXtyuACfudaszIKuYz4=
Subject key identifier:   6F:12:87:AD:C4:3F:A2:56:8B:23:31:52:D2:E7:9D:CE:8B:0F:87:2D
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       3D89C128D5600569E63C7ACC7E00FBB234D33FA9
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9087.roa
Signing time:             Fri 26 Jan 2024 23:28:33 +0000
ROA not before:           Fri 26 Jan 2024 23:23:33 +0000
ROA not after:            Fri 24 Jan 2025 23:28:33 +0000
asID:                     9087
IP address blocks:        140.99.84.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 27 Jan 2024 12:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:89:c1:28:d5:60:05:69:e6:3c:7a:cc:7e:00:fb:b2:34:d3:3f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 26 23:23:33 2024 GMT
            Not After : Jan 24 23:28:33 2025 GMT
        Subject: CN=6F1287ADC43FA2568B233152D2E79DCE8B0F872D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0a:0b:73:c3:03:54:54:4e:00:a3:83:e3:12:
                    b8:d4:04:23:f4:e6:34:35:cc:46:0d:85:0f:44:6d:
                    f7:4d:a1:d8:c7:b7:82:45:f7:fd:e3:fe:ee:be:03:
                    e3:7b:d2:05:08:2c:cc:ab:c4:8e:03:c8:e3:fe:9e:
                    20:83:34:79:8c:3a:da:a5:25:a2:54:95:76:07:b9:
                    4a:f4:df:e4:62:b7:26:13:7a:ab:11:ae:17:b6:31:
                    fc:60:3b:5e:16:34:71:ae:66:bd:07:25:7f:7d:a3:
                    4e:c7:fc:21:b3:f1:83:b1:1b:64:7c:19:96:1c:0a:
                    30:9f:9b:bc:1f:2d:36:3b:20:5b:66:35:7e:2a:79:
                    6a:25:3c:8f:e9:4e:56:ba:51:16:60:d2:4c:46:46:
                    aa:cd:7e:ed:85:1c:ef:17:cf:ec:4c:ab:ae:b6:c3:
                    fa:78:fb:94:9b:30:ad:4c:d4:60:2b:18:3f:55:58:
                    90:0c:6f:f7:51:98:c4:a4:1e:ad:d4:62:bd:8c:d3:
                    9d:f3:9e:a4:ae:25:00:59:04:48:44:71:07:c2:dd:
                    43:e1:d5:18:f8:b7:78:4e:c5:c4:7d:2c:e8:a1:ac:
                    32:cd:1d:a6:d0:49:58:d3:2a:22:11:cf:39:12:e6:
                    d9:22:2c:d3:19:75:8f:f0:a4:91:88:d0:6a:0d:08:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:87:AD:C4:3F:A2:56:8B:23:31:52:D2:E7:9D:CE:8B:0F:87:2D
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9087.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:5f:a4:65:81:06:1c:64:85:ef:25:74:5d:92:d5:4e:1c:
         55:73:f5:6b:b4:ba:b7:aa:3e:6b:2b:ec:4b:8c:82:c1:2b:cb:
         99:03:49:a0:2b:97:f1:af:36:a2:1c:e1:62:b7:db:36:88:19:
         a4:0b:ed:1b:98:04:fc:87:ba:57:62:8f:cd:74:bd:49:c8:38:
         e8:e8:af:00:04:0d:7c:a4:14:d2:b9:ea:03:68:00:75:d9:3f:
         51:53:5b:65:b5:81:09:23:56:54:8e:5f:42:97:fb:1b:d1:bd:
         73:9e:33:f8:39:22:b9:8a:f3:09:30:d9:cd:02:e5:dc:cb:05:
         9f:a7:4c:32:78:73:5e:dd:4f:1c:ce:3b:9d:9e:44:d0:31:1b:
         99:14:63:f9:be:d5:e2:37:d6:a4:9f:6b:be:06:df:40:13:25:
         02:b6:e1:67:51:a9:dd:a1:e4:ee:d9:ea:e1:d1:69:a8:65:cc:
         b3:d4:ab:5f:60:6f:7e:35:df:f4:78:d0:2d:21:ad:6a:b3:cf:
         ac:7e:6a:a6:89:de:0c:3f:ca:91:bd:81:b7:04:77:05:75:c1:
         00:8b:b0:20:a7:dd:ca:61:bb:0a:18:c4:d8:84:8d:3c:4c:c5:
         b5:c3:fd:52:23:c4:11:a6:d6:66:4e:f6:e5:9a:d8:69:fd:bf:
         1a:7d:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----