Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20323136323533.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier:          8rlvN9oB7DvURIecL3F/83y49ZIuH4o5HhPot8F6unU=
Subject key identifier:   14:64:47:54:C4:BC:D4:C8:21:14:6F:ED:F0:B3:D3:3E:C7:52:F1:25
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       5447A483B348AC33D3B4B15A510103953E73A91F
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20323136323533.roa
Signing time:             Fri 02 Feb 2024 04:01:25 +0000
ROA not before:           Fri 02 Feb 2024 03:56:25 +0000
ROA not after:            Fri 31 Jan 2025 04:01:25 +0000
asID:                     216253
IP address blocks:        205.211.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:47:a4:83:b3:48:ac:33:d3:b4:b1:5a:51:01:03:95:3e:73:a9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Feb  2 03:56:25 2024 GMT
            Not After : Jan 31 04:01:25 2025 GMT
        Subject: CN=14644754C4BCD4C821146FEDF0B3D33EC752F125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:4c:c3:b3:44:1f:67:77:83:a4:8f:ff:f0:
                    e2:52:94:94:45:d9:b4:ba:ad:7a:f8:33:53:eb:19:
                    39:95:1f:5d:69:02:0f:d7:e2:0a:a9:a3:90:5c:cf:
                    11:5f:7d:f7:4c:fb:de:cf:9c:5f:f8:8f:53:2d:e7:
                    88:bf:6e:b5:59:13:5c:e5:b5:d9:50:a2:09:45:f8:
                    66:e2:38:eb:4e:a9:18:13:1b:6e:fe:46:01:f0:e5:
                    31:95:a0:c5:65:25:bc:9a:f0:e0:11:47:7f:9c:17:
                    e7:9f:ed:c8:b8:9e:5e:d2:f3:b4:74:d8:ab:d8:36:
                    4a:81:6c:1a:70:74:e5:a9:49:94:69:69:8a:50:6e:
                    8a:53:43:fe:1a:ed:78:95:0d:04:4f:58:9b:b2:ea:
                    51:b7:2b:d7:87:c4:a6:81:2c:71:04:c0:92:2f:be:
                    ca:dd:58:f3:2d:72:2e:66:89:ea:7f:25:10:0a:d8:
                    b5:5e:f1:8a:08:ae:bd:03:9a:e5:d3:10:3b:93:1c:
                    f9:68:2f:89:6f:0f:e3:9d:45:b4:f1:a7:4c:49:b1:
                    f7:a6:88:78:56:03:13:7f:bf:1c:2d:96:10:ad:5b:
                    b0:55:07:7e:56:10:65:da:86:40:e0:99:a2:da:2c:
                    05:de:ba:e4:b4:5d:b9:d8:34:88:63:39:0d:38:ff:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:47:54:C4:BC:D4:C8:21:14:6F:ED:F0:B3:D3:3E:C7:52:F1:25
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20323136323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:56:5d:09:a3:f1:9b:57:66:7a:10:d2:c7:64:94:f0:88:97:
         60:58:a3:d6:3d:a8:4e:de:d2:3d:bd:72:62:1d:08:75:97:60:
         19:c4:82:02:fc:05:fa:07:15:a1:f1:fc:32:8f:63:0b:87:ae:
         d2:05:12:a3:e1:3f:09:19:58:c5:4a:a5:fb:b8:5e:fb:44:61:
         97:7c:a8:a9:c3:26:bc:b4:73:26:b3:13:ec:47:a1:8c:ac:c5:
         c9:1f:9c:15:8b:e8:d0:4f:1d:78:0b:5f:63:3c:42:57:03:ea:
         f4:44:f5:97:bb:7b:8c:cd:f1:5a:ec:9e:51:d5:3a:9b:fc:35:
         d0:7c:25:f5:6d:8d:5e:36:50:ef:c8:ef:46:9f:f0:96:ca:e2:
         e9:ab:0b:4c:26:c1:35:ea:96:d8:b7:a9:10:d3:33:c4:9a:6a:
         fc:12:21:d7:05:3e:66:0e:f5:dc:b3:64:c7:52:46:4f:54:ed:
         16:e1:d2:c6:51:53:86:68:db:f3:03:42:c0:5c:9a:ee:dc:88:
         c8:e4:cc:fb:d6:19:68:25:7d:14:2c:63:b8:d9:1a:19:20:42:
         1a:56:db:09:3d:a6:f2:64:33:e6:e2:e5:f8:0c:ad:6d:5f:81:
         b8:10:de:d2:35:32:fb:f2:6f:bd:26:7e:d4:5a:58:54:3a:d6:
         c7:22:8c:44
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUVEekg7NIrDPTtLFaUQEDlT5zqR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjQwMjAyMDM1NjI1WhcNMjUwMTMxMDQwMTI1
WjAzMTEwLwYDVQQDEygxNDY0NDc1NEM0QkNENEM4MjExNDZGRURGMEIzRDMzRUM3
NTJGMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSNMw7NEH2d3
g6SP//DiUpSURdm0uq16+DNT6xk5lR9daQIP1+IKqaOQXM8RX333TPvez5xf+I9T
LeeIv261WRNc5bXZUKIJRfhm4jjrTqkYExtu/kYB8OUxlaDFZSW8mvDgEUd/nBfn
n+3IuJ5e0vO0dNir2DZKgWwacHTlqUmUaWmKUG6KU0P+Gu14lQ0ET1ibsupRtyvX
h8SmgSxxBMCSL77K3VjzLXIuZonqfyUQCti1XvGKCK69A5rl0xA7kxz5aC+Jbw/j
nUW08adMSbH3poh4VgMTf78cLZYQrVuwVQd+VhBl2oZA4Jmi2iwF3rrktF252DSI
YzkNOP9jawIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBRkR1TEvNTIIRRv7fCz0z7H
UvElMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzYzMjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN05swDQYJKoZIhvcN
AQELBQADggEBABFWXQmj8ZtXZnoQ0sdklPCIl2BYo9Y9qE7e0j29cmIdCHWXYBnE
ggL8BfoHFaHx/DKPYwuHrtIFEqPhPwkZWMVKpfu4XvtEYZd8qKnDJry0cyazE+xH
oYysxckfnBWL6NBPHXgLX2M8QlcD6vRE9Ze7e4zN8VrsnlHVOpv8NdB8JfVtjV42
UO/I70af8JbK4umrC0wmwTXqlti3qRDTM8SaavwSIdcFPmYO9dyzZMdSRk9U7Rbh
0sZRU4Zo2/MDQsBcmu7ciMjkzPvWGWglfRQsY7jZGhkgQhpW2wk9pvJkM+bi5fgM
rW1fgbgQ3tI1Mvvyb70mftRaWFQ61scijEQ=
-----END CERTIFICATE-----