Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f31392d3234203d3e20383334.roa
File:                     34302e3138332e36342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          Ugkv+4ff0/KpFZKk9cqrGUry05wNS0hV+LdSAkN2ezw=
Subject key identifier:   47:76:C2:15:1E:2C:76:EF:74:BA:4B:15:B1:7F:BB:17:59:D4:28:68
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3911AF05E12DD32F40E62EC01F2928DD04585371
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f31392d3234203d3e20383334.roa
Signing time:             Thu 31 Aug 2023 15:09:29 +0000
ROA not before:           Thu 31 Aug 2023 15:04:29 +0000
ROA not after:            Thu 29 Aug 2024 15:09:29 +0000
asID:                     834
IP address blocks:        40.183.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 01:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:af:05:e1:2d:d3:2f:40:e6:2e:c0:1f:29:28:dd:04:58:53:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 31 15:04:29 2023 GMT
            Not After : Aug 29 15:09:29 2024 GMT
        Subject: CN=4776C2151E2C76EF74BA4B15B17FBB1759D42868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:b5:71:b0:7b:ae:e2:77:36:a0:4e:ed:47:
                    58:64:bd:41:14:ba:d3:66:fc:98:de:20:6b:98:25:
                    ab:15:60:a8:7e:b7:37:6c:61:ca:9c:d4:45:2c:18:
                    94:00:95:f6:25:1c:a2:e5:d6:79:0a:0b:54:f9:3c:
                    19:32:2b:81:02:fe:49:96:44:a5:ed:b9:27:be:65:
                    ea:60:7f:15:4f:6d:75:6d:1a:86:2f:b5:f2:61:86:
                    b5:e0:f2:37:e2:2f:cb:f8:bb:8c:5b:34:15:0b:a1:
                    dc:3e:7f:d4:f5:85:48:0e:54:4b:a7:18:3b:d9:6f:
                    61:f3:dd:62:ee:d8:02:02:7b:ba:b8:42:da:45:2d:
                    b8:c5:26:e4:cb:6f:d5:06:8e:88:b5:c1:c4:c6:74:
                    cf:e8:da:f9:01:0d:d3:f5:e8:b7:2a:7c:14:48:36:
                    a5:5f:95:bc:dc:51:29:15:c0:b1:b8:3e:0f:a5:57:
                    68:9c:00:7d:5b:49:97:43:7a:21:28:0b:65:80:ff:
                    4e:91:39:18:ac:9a:9f:b8:53:f8:e0:e2:57:84:e1:
                    a1:f3:fc:01:5e:fe:78:85:60:9c:7e:a7:c4:d2:a4:
                    21:3c:08:c2:67:68:2c:92:8a:4e:61:1c:75:d9:30:
                    f1:ac:6e:e8:df:a9:d3:ad:c3:53:a5:c5:69:cd:a5:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:C2:15:1E:2C:76:EF:74:BA:4B:15:B1:7F:BB:17:59:D4:28:68
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:8f:d1:0b:4d:00:3d:c8:c1:90:55:9c:2f:b1:4f:d2:1a:
         eb:d2:e6:b1:34:0a:58:f6:77:16:ea:57:ef:a4:e5:9a:01:c7:
         06:9b:46:08:67:1a:4d:2b:25:5d:50:ee:b1:29:73:73:0c:0e:
         8b:9f:e6:f5:b0:ec:18:54:f3:fd:82:8a:c8:f2:35:21:36:c7:
         40:f9:5b:44:5c:58:a1:a0:dc:3b:91:f8:c1:68:1f:ec:b7:32:
         ca:d8:76:27:4c:ea:6b:ac:7e:5b:d4:3e:fb:13:51:3c:e8:78:
         98:be:85:a6:83:cb:56:6d:e7:09:4d:d4:3c:66:26:3f:aa:0e:
         2e:89:ac:d2:a2:d6:47:56:66:c5:ee:14:d8:f8:9f:45:09:4c:
         59:75:1d:e4:68:01:26:de:e6:d1:00:ac:f1:df:ba:92:b8:e9:
         32:d9:ca:0b:27:d7:92:d2:8d:99:f6:df:f1:92:cd:5c:5d:83:
         c1:02:3e:69:98:c6:17:c5:14:78:8f:08:be:39:7c:a3:88:48:
         68:4d:b5:89:ce:fc:6b:e3:25:a2:a7:f8:4b:b2:64:39:e2:e9:
         fd:70:12:c9:54:85:ff:18:d2:66:7c:07:85:95:65:16:e5:90:
         84:7a:06:3e:67:38:64:3c:c7:f4:8e:55:c8:64:c8:28:c0:23:
         82:2e:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----