Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3136302e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          Hp0FGjf+uCE8QNt40aa4prWcBfDGeaSR7e46oGEk+2w=
Subject key identifier:   EB:D6:CF:19:08:21:2F:6C:03:23:8C:FA:E7:78:28:B0:56:98:86:F8
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3DB6CEE80FC6176232942458015E3617C4969FD2
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa
Signing time:             Thu 31 Aug 2023 15:20:10 +0000
ROA not before:           Thu 31 Aug 2023 15:15:10 +0000
ROA not after:            Thu 29 Aug 2024 15:20:10 +0000
asID:                     29802
IP address blocks:        40.183.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 08:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b6:ce:e8:0f:c6:17:62:32:94:24:58:01:5e:36:17:c4:96:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 31 15:15:10 2023 GMT
            Not After : Aug 29 15:20:10 2024 GMT
        Subject: CN=EBD6CF1908212F6C03238CFAE77828B0569886F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:52:57:84:52:32:d3:f8:71:2d:d0:e9:f3:
                    b2:d2:c5:8d:b0:b2:06:53:36:e1:e7:64:5d:49:64:
                    a9:ee:dc:91:e7:de:c2:4f:da:b5:ec:d6:16:8f:ad:
                    38:86:75:61:a8:78:a0:17:e3:e9:42:8b:c1:75:05:
                    b2:f3:82:41:a9:17:09:db:23:34:2b:16:00:05:05:
                    78:03:e7:89:27:40:53:97:03:4c:9f:45:60:03:e2:
                    00:3b:be:eb:b0:16:32:46:13:bf:28:8a:b3:f9:f1:
                    b0:ed:99:db:0b:6d:c3:84:2c:05:59:95:b4:a9:23:
                    58:f7:28:4d:50:29:32:e8:6d:6b:0d:f9:f7:e8:7e:
                    6d:62:ae:52:91:08:9b:1b:aa:49:bf:5e:8c:b1:d5:
                    49:47:39:76:7b:9d:ef:cb:11:2e:ab:d9:ee:2f:a0:
                    1c:6f:0f:5e:d9:d3:1b:e4:39:af:b4:eb:94:48:15:
                    ee:83:8f:eb:69:d3:f0:09:7b:17:b9:ed:10:32:93:
                    cc:72:e9:16:0a:0c:e1:b4:e7:94:57:38:99:27:a5:
                    9c:aa:2c:1e:f6:15:15:83:fc:18:ee:13:1a:55:8e:
                    0c:ff:6b:5d:7d:77:0d:c6:3f:f5:b8:26:cc:57:92:
                    6f:97:cd:33:8f:6c:18:d3:79:8c:1f:a1:04:77:ee:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D6:CF:19:08:21:2F:6C:03:23:8C:FA:E7:78:28:B0:56:98:86:F8
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:60:02:c1:5b:b7:35:9b:e0:86:2e:c1:d0:0f:ed:bb:9d:
         54:b5:5e:e4:9c:39:8d:c1:ef:27:e1:f3:0d:9f:91:64:a9:78:
         ab:2e:33:be:76:62:38:d5:8c:76:ad:bc:db:3c:ab:33:75:f7:
         cc:1f:c4:f8:a6:d1:9e:ef:cc:32:b1:93:c2:c4:70:4b:37:7f:
         c5:30:27:79:4f:34:66:67:de:8f:d5:cd:9d:e6:6e:cd:5f:0e:
         e6:71:54:d7:08:78:86:92:21:7f:93:74:f9:7b:a2:65:d2:6d:
         3e:8f:51:49:e9:03:c4:a3:44:d3:9e:d5:a2:a5:3a:18:71:6d:
         a4:bd:f3:d5:1d:8f:d5:1b:16:73:dd:48:d7:28:7b:e2:52:40:
         35:75:48:d9:c3:b8:1e:59:b7:76:b4:57:c6:ef:fd:1a:43:c6:
         ed:e6:2b:36:0e:e5:8e:3d:fd:e5:b0:dc:09:86:d4:ec:95:32:
         f1:60:cc:96:7b:73:5e:27:f9:0f:9d:0e:38:5d:e2:f4:82:f7:
         48:6d:3a:bb:c5:b9:a8:ec:5b:1b:20:a1:bd:ce:c6:e9:c8:c8:
         bf:82:4b:cb:a1:00:36:20:25:a3:72:ec:75:8d:1f:68:0e:ae:
         08:1e:bd:5b:9d:8b:34:90:46:61:7b:5f:4f:fb:e6:f4:07:9c:
         02:a4:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----