Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203233343730.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          1WE5QEL4ho30smEN75CURKDPdvvZE17LbKG9VUPEZys=
Subject key identifier:   04:C3:4C:A5:E9:C2:72:67:DA:83:0A:09:98:2C:EC:85:E5:CE:72:0F
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       39D9FF6E04F0B58EEA7B46FE5D46E861FC1E2C8A
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 13 Feb 2024 14:57:44 +0000
ROA not before:           Tue 13 Feb 2024 14:52:44 +0000
ROA not after:            Tue 11 Feb 2025 14:57:44 +0000
asID:                     23470
IP address blocks:        205.211.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 13:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:ff:6e:04:f0:b5:8e:ea:7b:46:fe:5d:46:e8:61:fc:1e:2c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Feb 13 14:52:44 2024 GMT
            Not After : Feb 11 14:57:44 2025 GMT
        Subject: CN=04C34CA5E9C27267DA830A09982CEC85E5CE720F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:59:21:2a:ec:c7:c4:e0:28:02:12:97:99:
                    d2:1a:96:c4:1c:20:93:c9:de:d8:1e:16:95:aa:a2:
                    e8:e0:a4:5e:28:3b:a6:d0:5e:1c:45:05:21:d8:70:
                    5d:85:5b:d7:52:0e:d5:cd:ff:8b:42:19:94:ce:1e:
                    c2:bc:e8:ca:e5:4b:e0:22:a1:9b:8c:83:da:da:3f:
                    6b:95:65:9d:c5:e8:ef:32:3e:ac:d7:f3:51:92:56:
                    1d:da:68:70:a1:7b:2d:1f:41:cf:0b:97:5f:2c:8c:
                    f0:34:80:fd:a0:1b:25:de:2d:cc:2a:67:a5:02:88:
                    bb:e2:5e:da:a0:a2:1e:31:ba:17:0a:28:a9:83:a5:
                    40:74:f1:87:e3:c8:96:33:0d:53:82:33:f7:38:f9:
                    6d:1f:8c:93:ac:51:8c:71:56:b6:49:ba:91:e0:05:
                    d4:83:e7:b4:17:7b:cf:e2:ea:56:be:42:c4:c4:90:
                    2f:e3:d7:66:c7:08:2a:2e:c7:72:bd:f2:95:55:a8:
                    e3:45:82:ad:9a:0a:fb:a6:28:bd:bb:77:b3:e7:75:
                    a1:11:97:ac:1d:bc:c3:eb:98:9d:5f:1e:07:5d:0c:
                    53:f0:89:fe:ca:a8:d5:3d:68:c1:dd:49:6a:da:99:
                    e4:cb:cb:19:66:c8:ad:7b:ce:b3:ff:c8:a4:56:9a:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:4C:A5:E9:C2:72:67:DA:83:0A:09:98:2C:EC:85:E5:CE:72:0F
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:fb:a3:af:36:9e:92:bf:70:d9:07:47:ec:cf:e2:99:b5:8f:
         1b:f6:d9:18:92:a3:d3:2e:b6:4c:95:1a:be:27:d2:3f:7b:e3:
         7a:f0:56:ac:43:9e:e5:e9:be:e2:ae:87:74:76:3c:4e:89:3d:
         e5:bc:23:0d:f7:c1:52:f7:bf:47:2c:46:62:82:74:19:86:32:
         51:4a:a1:ca:13:8e:b1:07:b0:b3:94:ce:0d:1e:ff:fa:67:7d:
         31:29:ad:3f:f3:c2:0b:90:74:41:3d:81:1b:97:9d:ca:e6:71:
         08:14:ad:17:d9:5f:d1:4a:1a:12:e5:bc:03:75:d8:11:27:69:
         be:4a:85:0c:b6:9a:dc:45:e6:2f:db:45:6b:30:da:a8:32:a4:
         f4:30:53:14:6b:c4:20:ab:1e:41:65:7a:04:47:42:af:dd:58:
         dc:8f:46:4b:1b:dc:e9:a4:c9:d5:98:09:db:54:e5:10:75:5d:
         dd:93:b4:38:51:40:99:7c:55:a8:b3:0d:23:89:5a:d2:5d:aa:
         02:36:a7:44:6c:f3:01:64:86:69:45:05:6d:e1:87:b5:65:f8:
         c2:76:4d:3d:9b:04:9b:3e:04:ef:7f:67:95:4f:ad:52:e9:49:
         3f:af:34:d2:82:89:aa:a2:f3:ba:bb:5f:29:fa:6e:0d:f4:7e:
         18:79:f9:37
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUOdn/bgTwtY7qe0b+XUboYfweLIowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjQwMjEzMTQ1MjQ0WhcNMjUwMjExMTQ1NzQ0
WjAzMTEwLwYDVQQDEygwNEMzNENBNUU5QzI3MjY3REE4MzBBMDk5ODJDRUM4NUU1
Q0U3MjBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5RZISrsx8Tg
KAISl5nSGpbEHCCTyd7YHhaVqqLo4KReKDum0F4cRQUh2HBdhVvXUg7Vzf+LQhmU
zh7CvOjK5UvgIqGbjIPa2j9rlWWdxejvMj6s1/NRklYd2mhwoXstH0HPC5dfLIzw
NID9oBsl3i3MKmelAoi74l7aoKIeMboXCiipg6VAdPGH48iWMw1TgjP3OPltH4yT
rFGMcVa2SbqR4AXUg+e0F3vP4upWvkLExJAv49dmxwgqLsdyvfKVVajjRYKtmgr7
pii9u3ez53WhEZesHbzD65idXx4HXQxT8In+yqjVPWjB3Ulq2pnky8sZZsite86z
/8ikVpqSWwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFATDTKXpwnJn2oMKCZgs7IXl
znIPMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdOaMA0GCSqGSIb3DQEB
CwUAA4IBAQAl+6OvNp6Sv3DZB0fsz+KZtY8b9tkYkqPTLrZMlRq+J9I/e+N68Fas
Q57l6b7irod0djxOiT3lvCMN98FS979HLEZignQZhjJRSqHKE46xB7CzlM4NHv/6
Z30xKa0/88ILkHRBPYEbl53K5nEIFK0X2V/RShoS5bwDddgRJ2m+SoUMtprcReYv
20VrMNqoMqT0MFMUa8Qgqx5BZXoER0Kv3Vjcj0ZLG9zppMnVmAnbVOUQdV3dk7Q4
UUCZfFWosw0jiVrSXaoCNqdEbPMBZIZpRQVt4Ye1ZfjCdk09mwSbPgTvf2eVT61S
6Uk/rzTSgomqovO6u18p+m4N9H4Yefk3
-----END CERTIFICATE-----