Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3132382e302f31392d3234203d3e2037303239.roa
File:                     34302e3138332e3132382e302f31392d3234203d3e2037303239.roa (raw, json)
Hash identifier:          vjbOlmF3L2ypjH32Ngcwk/SX4gWxeFwKJaZnlFpOeg4=
Subject key identifier:   65:24:20:F9:53:6E:67:75:CE:08:DA:99:52:69:D2:29:B7:DA:58:B5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       120689FA1186AC369DCA4CFCCA828149BB42136B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3132382e302f31392d3234203d3e2037303239.roa
Signing time:             Thu 28 Mar 2024 21:39:18 +0000
ROA not before:           Thu 28 Mar 2024 21:34:18 +0000
ROA not after:            Thu 27 Mar 2025 21:39:18 +0000
asID:                     7029
IP address blocks:        40.183.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:89:fa:11:86:ac:36:9d:ca:4c:fc:ca:82:81:49:bb:42:13:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 28 21:34:18 2024 GMT
            Not After : Mar 27 21:39:18 2025 GMT
        Subject: CN=652420F9536E6775CE08DA995269D229B7DA58B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:78:5b:30:f0:12:11:87:3c:e9:bc:7c:24:
                    ef:50:8f:7f:29:a5:5f:2b:e7:05:5d:a9:0c:b8:1c:
                    b3:07:60:21:e7:1c:5c:64:42:f3:e3:30:a2:65:68:
                    f4:cd:31:ce:36:a6:ff:af:6a:90:d4:aa:72:1d:05:
                    b7:87:dd:fc:8c:f0:c3:3d:e2:a7:65:c9:41:a4:fc:
                    d5:e9:9e:d4:36:26:1d:7a:ba:a1:b4:d0:16:79:c1:
                    01:98:0a:3c:ba:cb:6a:f7:d5:f7:42:2d:01:3c:26:
                    62:60:a5:d9:d3:ca:e3:4b:05:e9:fa:d9:13:7c:01:
                    e4:f3:2d:ef:0c:15:40:bf:b4:79:70:2b:15:70:ca:
                    a0:18:fe:08:45:a3:28:8b:be:6f:1d:db:80:2f:ea:
                    13:87:60:84:a5:2b:03:b6:c9:2f:6e:77:49:8d:3a:
                    fe:9e:60:a7:b8:df:4b:db:c2:0f:60:72:eb:df:70:
                    69:17:97:11:86:54:ff:af:1c:aa:95:76:72:bf:9e:
                    c1:7b:df:54:a9:c3:63:1f:bc:cb:99:eb:dd:44:c3:
                    4c:5e:a5:67:e9:93:22:f6:42:bd:81:78:7b:79:68:
                    b4:73:44:59:b9:d0:12:6c:ed:aa:e4:f2:e8:1c:88:
                    9e:a0:6f:d9:92:a1:3a:53:cb:c8:67:bd:87:b6:f4:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:20:F9:53:6E:67:75:CE:08:DA:99:52:69:D2:29:B7:DA:58:B5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3132382e302f31392d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:a2:9e:53:4c:07:ea:43:b3:f8:cd:9c:31:f6:c7:17:03:
         3d:98:91:86:1f:f7:90:49:ee:f1:d8:09:bd:de:87:bc:bc:7d:
         43:48:e4:f0:c0:3f:9e:1d:c9:16:2b:5c:78:4e:c4:c6:f2:81:
         c3:78:69:9f:1f:46:ff:dc:15:92:3d:04:f2:57:92:81:d1:6a:
         38:0a:e6:94:bd:52:cc:d0:9b:f9:00:48:09:1c:48:9f:ab:ef:
         24:e2:7e:57:d5:67:50:0e:ff:c0:8a:57:d1:7c:a1:14:7a:64:
         b5:1c:e7:f6:cc:d5:34:d8:c9:9d:71:b5:33:bd:7e:7a:71:57:
         cd:c4:0e:15:f2:94:6f:63:b2:f3:b8:e3:9d:4b:b8:8e:92:42:
         cc:50:1a:50:5f:b8:d6:d5:fa:f0:ea:77:e9:82:d0:d0:8a:a3:
         6f:0c:08:24:38:d5:9d:35:c9:38:cb:09:99:9f:44:85:8d:e9:
         ea:b6:af:ba:9a:63:f6:e8:a9:58:02:4a:2f:90:72:bd:22:1c:
         de:6f:df:57:d9:f3:8b:9d:24:e4:e0:1e:66:43:ce:a2:86:b1:
         04:c0:37:56:d6:08:75:13:0d:a0:93:ff:c7:eb:5d:9f:68:36:
         ae:42:4d:a5:da:57:e3:77:8d:18:5b:dd:c1:0e:8b:20:f9:ae:
         24:c3:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----