Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203239383032.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          3YojAUJoLR4iz/Eu0AX3nBvqppp6xhZHTQhyfQhkCTY=
Subject key identifier:   99:EA:F9:77:58:99:DF:CD:7F:68:08:05:38:BA:41:56:0A:23:B9:EB
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       4F375A2D4B1B34AA838CF2B67E428CDA8D9C881D
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203239383032.roa
Signing time:             Mon 09 Oct 2023 16:16:28 +0000
ROA not before:           Mon 09 Oct 2023 16:11:28 +0000
ROA not after:            Mon 07 Oct 2024 16:16:28 +0000
asID:                     29802
IP address blocks:        205.211.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 08:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:37:5a:2d:4b:1b:34:aa:83:8c:f2:b6:7e:42:8c:da:8d:9c:88:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Oct  9 16:11:28 2023 GMT
            Not After : Oct  7 16:16:28 2024 GMT
        Subject: CN=99EAF9775899DFCD7F68080538BA41560A23B9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:bf:50:c1:9a:2c:1a:9b:cd:20:fd:81:b9:
                    1f:c6:77:9f:5c:c3:19:ac:5e:a9:73:65:c1:f7:52:
                    18:9f:77:0d:ec:98:75:2b:7a:15:a5:67:f7:9c:d8:
                    2a:21:1a:37:36:68:a1:d0:86:86:12:c5:ac:bd:7d:
                    f4:89:e3:40:b4:06:a1:87:61:e7:d3:48:34:f4:6a:
                    16:1c:e4:8f:53:59:63:c5:f5:9d:c2:b5:76:a0:0d:
                    33:3a:53:bb:37:7d:e6:1c:55:a8:a3:04:1a:a3:29:
                    a4:64:c9:6d:f5:dd:85:8b:95:3b:09:5b:fb:07:73:
                    f9:f5:e8:e9:8a:72:84:44:cf:fb:d4:fb:2f:75:a6:
                    ac:13:36:8b:3b:4d:b6:4a:7e:dc:ed:64:da:3c:4c:
                    a3:f1:2a:c5:46:ca:da:44:82:ab:38:8a:30:97:9f:
                    e0:6d:2d:16:d2:88:be:14:c9:65:3d:b6:19:b5:f5:
                    02:77:36:95:a1:f6:81:c7:bf:5d:54:65:8f:b2:3b:
                    a1:94:22:39:50:22:b1:0f:22:21:e5:8e:a6:99:89:
                    95:53:d7:c4:6d:94:40:93:8c:0b:9a:02:f5:d5:07:
                    33:b6:64:c3:c2:a1:23:40:d3:27:ab:f3:25:3c:48:
                    0b:8a:1f:7b:ee:1b:3f:2d:c3:d9:ab:18:13:5a:51:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:F9:77:58:99:DF:CD:7F:68:08:05:38:BA:41:56:0A:23:B9:EB
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:a7:7c:e7:df:e4:fe:f8:ab:76:37:60:5f:16:5c:cb:fd:
         31:1e:5b:91:10:e8:79:fc:e0:a3:a8:9a:cf:7c:0a:2e:4d:39:
         dc:a2:24:c4:15:e5:fe:cc:67:bd:74:0b:69:3c:2f:e6:d9:72:
         7f:31:01:64:52:b1:37:9b:fc:93:1f:91:0d:b6:87:0d:46:c2:
         77:67:2c:88:bd:2b:3a:ba:ab:9b:f6:b7:7d:b4:15:ea:4c:cc:
         30:8a:44:1d:be:03:d8:fb:05:20:2d:37:dd:e9:c4:88:09:97:
         37:c1:1f:f7:b0:c0:69:a5:84:19:ea:55:18:b7:eb:a7:44:a6:
         0e:a3:e0:50:b8:c8:bb:f9:a1:29:49:37:15:e8:30:87:94:68:
         b9:35:d2:80:49:2f:53:43:17:4b:8f:b7:d1:74:60:14:5c:77:
         c1:fd:90:c8:b2:a3:d9:33:f9:3c:a0:4d:3a:db:4d:f0:a7:d8:
         df:2c:d9:75:30:b6:ac:9a:e1:28:04:23:ce:d2:4c:5e:82:39:
         a2:4f:2b:97:88:95:bc:f8:8e:51:c7:fe:67:9e:a5:e4:22:a4:
         73:e8:02:9c:05:f6:79:2f:c4:d6:c9:fb:c6:79:67:c9:2d:8f:
         08:5f:d2:f3:ff:02:1b:1c:e9:7b:4e:a8:cb:20:29:2b:fb:6e:
         aa:71:8c:19
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUTzdaLUsbNKqDjPK2fkKM2o2ciB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjMxMDA5MTYxMTI4WhcNMjQxMDA3MTYxNjI4
WjAzMTEwLwYDVQQDEyg5OUVBRjk3NzU4OTlERkNEN0Y2ODA4MDUzOEJBNDE1NjBB
MjNCOUVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKe/UMGaLBqb
zSD9gbkfxnefXMMZrF6pc2XB91IYn3cN7Jh1K3oVpWf3nNgqIRo3Nmih0IaGEsWs
vX30ieNAtAahh2Hn00g09GoWHOSPU1ljxfWdwrV2oA0zOlO7N33mHFWoowQaoymk
ZMlt9d2Fi5U7CVv7B3P59ejpinKERM/71PsvdaasEzaLO022Sn7c7WTaPEyj8SrF
RsraRIKrOIowl5/gbS0W0oi+FMllPbYZtfUCdzaVofaBx79dVGWPsjuhlCI5UCKx
DyIh5Y6mmYmVU9fEbZRAk4wLmgL11QcztmTDwqEjQNMnq/MlPEgLih977hs/LcPZ
qxgTWlGM7wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJnq+XdYmd/Nf2gIBTi6QVYK
I7nrMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdOaMA0GCSqGSIb3DQEB
CwUAA4IBAQBun6d859/k/virdjdgXxZcy/0xHluREOh5/OCjqJrPfAouTTncoiTE
FeX+zGe9dAtpPC/m2XJ/MQFkUrE3m/yTH5ENtocNRsJ3ZyyIvSs6uqub9rd9tBXq
TMwwikQdvgPY+wUgLTfd6cSICZc3wR/3sMBppYQZ6lUYt+unRKYOo+BQuMi7+aEp
STcV6DCHlGi5NdKASS9TQxdLj7fRdGAUXHfB/ZDIsqPZM/k8oE06203wp9jfLNl1
MLasmuEoBCPO0kxegjmiTyuXiJW8+I5Rx/5nnqXkIqRz6AKcBfZ5L8TWyfvGeWfJ
LY8IX9Lz/wIbHOl7TqjLICkr+26qcYwZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org