Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa
File:                     34302e3138332e39362e302f31392d3234203d3e20313734.roa (raw, json)
Hash identifier:          BH7ZZny6QvwXIjqGmsaDWvuQiQNUGOZJWpk8raBJwUw=
Subject key identifier:   E2:2D:31:39:52:98:F2:27:ED:B9:9A:DC:BA:D0:DA:B2:C3:E3:36:47
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6319559151A6FD8DEF7B02A8AFF3525FF467B775
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa
Signing time:             Fri 16 Aug 2024 14:48:59 +0000
ROA not before:           Fri 16 Aug 2024 14:43:59 +0000
ROA not after:            Fri 15 Aug 2025 14:48:59 +0000
asID:                     174
IP address blocks:        40.183.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:19:55:91:51:a6:fd:8d:ef:7b:02:a8:af:f3:52:5f:f4:67:b7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 16 14:43:59 2024 GMT
            Not After : Aug 15 14:48:59 2025 GMT
        Subject: CN=E22D31395298F227EDB99ADCBAD0DAB2C3E33647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:2b:96:c2:9b:d7:00:55:4b:a4:f0:0b:cc:
                    6f:71:60:12:45:2b:68:de:09:61:7c:09:ef:85:4e:
                    5a:cf:f9:c2:f7:54:a1:cb:81:08:07:a3:21:4b:ba:
                    ca:f5:6d:fe:ad:5e:04:70:4a:a4:71:1f:31:2f:a2:
                    8d:a3:a7:82:16:42:3c:a3:95:b4:05:46:22:26:82:
                    17:37:7d:9d:92:3f:f3:bd:71:d6:b3:c1:9b:64:42:
                    8d:48:6f:4b:76:d6:a8:ad:c3:f3:5a:5d:87:ae:88:
                    a3:f7:b1:80:de:e0:39:bd:27:49:d5:1e:bf:9b:a4:
                    76:0f:a1:3b:9c:a0:03:92:8c:de:36:29:4a:b3:f6:
                    df:cb:5e:5c:e1:56:90:d0:13:fd:fe:2e:9c:a1:4a:
                    8e:82:f5:cc:e2:aa:e1:85:7e:9e:35:4c:92:f2:e9:
                    cf:5c:43:87:39:29:ba:8d:53:65:b1:9e:34:bc:37:
                    77:5e:de:c5:2c:7f:d3:83:61:86:cb:0c:91:ed:08:
                    ac:cc:e4:82:7e:4e:83:d3:4b:f0:7b:aa:bf:1b:7c:
                    eb:86:14:dd:25:bb:b4:cf:a2:84:3a:5a:62:6f:f3:
                    57:f1:95:29:72:e0:9f:b3:bf:b1:f4:d8:9a:e8:cf:
                    33:4c:4d:75:9e:95:00:b1:8a:71:8c:48:11:b2:07:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2D:31:39:52:98:F2:27:ED:B9:9A:DC:BA:D0:DA:B2:C3:E3:36:47
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:8a:af:20:de:a1:59:fb:76:78:49:05:80:4a:2f:ea:ba:
         ca:60:26:72:6c:30:11:b5:23:f2:16:2d:0f:27:39:0e:cc:bf:
         45:7a:0b:7b:93:fd:ba:1c:26:36:cd:67:bd:c6:c1:23:4b:33:
         bd:df:1c:45:18:a8:d8:2d:09:33:d5:81:1c:06:0c:34:20:30:
         a1:c7:e9:bb:bb:0a:14:f8:38:3d:64:48:84:b5:c8:ae:b3:71:
         59:33:bf:e0:0a:6d:9b:a3:4c:81:25:f9:8c:e4:b3:aa:3e:80:
         3b:8e:7e:ac:c0:86:bb:f7:bd:b9:7a:49:88:c8:c2:a0:fc:cc:
         87:f5:85:1a:7b:c1:f3:fb:45:2f:0d:fa:f2:72:65:98:ae:43:
         13:0e:3c:3d:57:16:a7:4c:0e:18:08:0e:8d:8f:00:2e:23:9c:
         13:4b:e6:34:e8:02:54:45:d5:f7:06:fa:5f:a3:97:cf:a0:5e:
         e5:02:2b:aa:cd:52:bb:d0:bc:8e:f9:a7:6c:df:10:f5:7d:e0:
         31:73:1d:fa:12:5b:d5:11:c6:de:cf:e0:a5:7f:21:eb:f6:2e:
         b0:d2:86:7b:fd:70:01:44:89:5a:65:66:89:8f:68:28:f2:f6:
         d8:f9:e5:7d:6e:15:7b:3b:96:69:aa:07:dc:1f:07:65:33:c8:
         61:b1:8b:51
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUYxlVkVGm/Y3vewKor/NSX/Rnt3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjQwODE2MTQ0MzU5WhcNMjUwODE1MTQ0ODU5
WjAzMTEwLwYDVQQDEyhFMjJEMzEzOTUyOThGMjI3RURCOTlBRENCQUQwREFCMkMz
RTMzNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhArlsKb1wBV
S6TwC8xvcWASRSto3glhfAnvhU5az/nC91Shy4EIB6MhS7rK9W3+rV4EcEqkcR8x
L6KNo6eCFkI8o5W0BUYiJoIXN32dkj/zvXHWs8GbZEKNSG9LdtaorcPzWl2Hroij
97GA3uA5vSdJ1R6/m6R2D6E7nKADkozeNilKs/bfy15c4VaQ0BP9/i6coUqOgvXM
4qrhhX6eNUyS8unPXEOHOSm6jVNlsZ40vDd3Xt7FLH/Tg2GGywyR7QiszOSCfk6D
00vwe6q/G3zrhhTdJbu0z6KEOlpib/NX8ZUpcuCfs7+x9Nia6M8zTE11npUAsYpx
jEgRsgeAvQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOItMTlSmPIn7bma3LrQ2rLD
4zZHMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzEzODMzMmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIw
M2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKLdgMA0GCSqGSIb3DQEBCwUAA4IBAQCm
M4qvIN6hWft2eEkFgEov6rrKYCZybDARtSPyFi0PJzkOzL9Fegt7k/26HCY2zWe9
xsEjSzO93xxFGKjYLQkz1YEcBgw0IDChx+m7uwoU+Dg9ZEiEtcius3FZM7/gCm2b
o0yBJfmM5LOqPoA7jn6swIa79725ekmIyMKg/MyH9YUae8Hz+0UvDfrycmWYrkMT
Djw9VxanTA4YCA6NjwAuI5wTS+Y06AJURdX3Bvpfo5fPoF7lAiuqzVK70LyO+ads
3xD1feAxcx36ElvVEcbez+ClfyHr9i6w0oZ7/XABRIlaZWaJj2go8vbY+eV9bhV7
O5ZpqgfcHwdlM8hhsYtR
-----END CERTIFICATE-----