Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3232342e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          VXufj697JSn4VRtNPyB8KbrHZ2wlN6pm8Wg8miZPz7A=
Subject key identifier:   85:94:9A:D4:64:DC:27:3A:C2:91:A9:B3:F8:68:6B:4B:05:0E:A4:C8
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6240F3D9DA4A49B7161A16B8762693F00B500005
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
Signing time:             Thu 31 Aug 2023 15:09:31 +0000
ROA not before:           Thu 31 Aug 2023 15:04:31 +0000
ROA not after:            Thu 29 Aug 2024 15:09:31 +0000
asID:                     29802
IP address blocks:        40.183.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Jun 2024 15:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:40:f3:d9:da:4a:49:b7:16:1a:16:b8:76:26:93:f0:0b:50:00:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 31 15:04:31 2023 GMT
            Not After : Aug 29 15:09:31 2024 GMT
        Subject: CN=85949AD464DC273AC291A9B3F8686B4B050EA4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:25:f4:8d:78:d1:cc:f3:b8:49:3c:b5:9e:
                    84:ee:83:8a:59:cd:5c:18:22:df:e9:62:ae:7a:b8:
                    ed:ab:96:37:b6:c5:b8:e4:29:03:ff:45:52:af:fa:
                    c4:72:b9:8c:33:6a:bd:6e:6d:e7:b9:37:01:84:27:
                    f6:a6:34:54:05:70:0d:1c:07:b4:dd:94:51:ad:91:
                    c1:ce:c8:8d:80:44:01:8a:30:bd:5c:bb:49:73:55:
                    15:4a:04:81:e9:62:36:5b:ba:97:07:c4:6c:fa:8d:
                    14:2c:2f:37:42:a7:b0:c6:bd:51:ca:9c:ba:95:b5:
                    8d:be:42:00:73:93:47:7e:be:cc:5c:45:82:f5:71:
                    8d:f6:37:99:4c:c7:eb:09:b0:7d:e7:0c:42:7a:25:
                    e6:be:eb:84:47:e7:09:cd:1d:b1:e2:57:17:12:cc:
                    8f:14:89:10:5c:4c:e6:fb:10:52:12:ad:fc:37:aa:
                    05:bb:f4:34:1f:35:7f:09:53:19:19:66:43:fa:14:
                    3f:a7:aa:2f:c8:b3:27:6b:27:9e:85:16:41:eb:2d:
                    bc:66:e6:83:c5:74:60:77:d8:5c:94:5a:72:61:69:
                    d5:f7:72:77:b4:36:47:91:cf:ae:20:0f:78:ba:12:
                    3c:97:16:de:b4:99:98:92:bd:fe:6b:50:be:04:f6:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:94:9A:D4:64:DC:27:3A:C2:91:A9:B3:F8:68:6B:4B:05:0E:A4:C8
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:00:24:39:20:d1:c9:84:f7:24:93:51:fe:b7:8d:6a:bf:a7:
         40:e0:6c:d2:7b:a5:2b:4e:26:fc:1d:23:d6:96:cc:7e:4f:08:
         5e:cc:03:fc:56:41:51:08:e5:dc:34:cb:92:8e:2c:da:80:6d:
         70:f7:fd:cd:04:c4:46:34:a6:ae:3a:a3:bc:3f:84:58:0a:98:
         22:5b:0b:00:55:8c:c7:41:78:7c:64:86:d9:5a:d2:80:02:6e:
         f7:20:ff:09:9d:c0:06:c1:34:b7:68:33:6a:62:eb:0d:31:cf:
         f8:00:d7:fb:9b:37:7b:ed:fe:8d:dd:e3:cd:59:13:ed:0e:5f:
         29:bf:3f:2f:f5:31:1e:40:27:4f:6a:39:42:36:21:9b:f4:61:
         3a:0d:9e:72:f6:73:39:b0:c2:20:9d:ab:3f:df:d4:ba:0c:45:
         45:66:1e:ce:2c:20:3f:4c:88:72:4b:87:7f:55:2a:87:e5:27:
         34:9d:42:9a:04:40:3f:dc:1f:e6:7d:7a:75:96:a5:78:af:bf:
         5d:2c:54:d2:72:c7:fc:95:66:e1:16:34:2a:c9:d0:8f:5c:e2:
         a4:d4:0a:8b:47:bd:c0:fb:2f:78:5c:a4:9b:d6:15:1a:95:36:
         87:8b:53:44:7e:8c:9f:43:cd:0f:77:20:47:7a:4d:cf:60:88:
         c9:aa:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----