Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          fxFEM8F80h1XIxc3u0DUEwYF/jixuDRZ8ksG9Wrb8SM=
Subject key identifier:   0B:EF:18:7A:4F:C2:6E:C3:4E:D7:96:AC:B7:99:81:43:F8:F7:AC:CC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       44A6E76FE74A99A4D737B469666C10AA82794F75
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS0.roa
Signing time:             Mon 14 Aug 2023 14:04:13 +0000
ROA not before:           Mon 14 Aug 2023 13:59:13 +0000
ROA not after:            Mon 12 Aug 2024 14:04:13 +0000
asID:                     0
IP address blocks:        104.234.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Sep 2023 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a6:e7:6f:e7:4a:99:a4:d7:37:b4:69:66:6c:10:aa:82:79:4f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 14 13:59:13 2023 GMT
            Not After : Aug 12 14:04:13 2024 GMT
        Subject: CN=0BEF187A4FC26EC34ED796ACB7998143F8F7ACCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:63:e4:0a:93:98:a7:6b:54:6a:b6:b3:1c:
                    6c:8a:88:fa:33:22:1d:04:0a:e2:0c:44:0e:25:2c:
                    29:f2:f4:8b:b2:09:36:d9:fe:25:b0:04:88:dc:e4:
                    01:62:27:53:b1:09:3f:ef:f8:74:48:ce:54:d3:ef:
                    7d:46:d5:87:0a:25:e9:39:07:e8:65:0f:18:2a:2b:
                    7b:48:d7:e2:b3:b5:0e:08:6c:4b:39:b9:d6:e1:9b:
                    c0:f7:2a:3c:84:6d:b9:c6:59:a7:c3:c1:d6:28:7f:
                    62:44:38:65:f6:25:ae:74:f9:ef:40:65:23:62:d3:
                    dc:cd:d9:19:5b:1f:05:9e:7d:3e:12:98:32:85:f7:
                    b9:ee:c2:12:e9:0b:f4:ad:a7:8e:9a:f5:09:ba:7f:
                    ed:c3:c0:85:d9:2a:8a:3e:1c:24:5b:40:a9:90:89:
                    fe:b2:cb:83:2d:46:79:d4:05:37:f8:c3:eb:f9:66:
                    ad:36:7d:ce:f3:4c:dd:aa:ee:dd:fc:62:48:af:42:
                    29:f2:a7:e4:99:5f:5e:50:c3:42:31:42:89:94:c2:
                    12:b2:ea:89:a2:67:29:ff:db:c4:fe:74:8c:d6:65:
                    1b:db:be:fe:ea:a0:a2:db:6a:ce:8b:ab:85:6e:a5:
                    1b:25:cf:cc:4e:f4:ef:7a:00:16:4e:8a:80:d0:a8:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EF:18:7A:4F:C2:6E:C3:4E:D7:96:AC:B7:99:81:43:F8:F7:AC:CC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:59:b7:52:af:2d:11:12:b7:d3:e7:45:ab:15:8e:18:c5:bf:
         0b:a7:22:16:b9:7e:63:d9:0d:34:83:6a:e4:10:c5:13:9a:f3:
         94:3d:ae:ea:48:4d:cb:71:f2:33:b3:61:a2:8f:30:ea:ba:53:
         64:1c:46:44:cd:28:6c:7b:1b:5e:00:a1:ba:f1:2e:04:1e:bf:
         54:d6:10:4a:be:d2:ed:0b:be:be:13:13:25:84:8b:fa:bb:ee:
         10:d2:08:e9:f2:19:e3:9f:48:91:f3:b9:2f:18:a8:1d:98:ff:
         cc:0a:60:64:64:ee:7e:cb:30:44:55:38:db:19:e7:e1:66:4f:
         e8:f0:b0:bc:37:40:f0:38:fd:d1:e0:45:3c:09:95:4c:a5:63:
         bb:bb:99:83:c1:c9:b8:16:80:3c:48:89:9f:fc:6f:49:38:1c:
         9f:fd:5b:db:4f:a1:b8:7d:da:87:83:98:9b:49:dc:01:80:e8:
         14:1d:27:0f:d5:97:9c:e8:c0:e9:49:70:1b:e2:c9:7e:21:e6:
         51:95:4b:07:70:69:ac:5c:f8:c5:a0:bf:62:85:0e:47:bc:10:
         0c:c3:81:78:7f:f8:aa:d8:1e:46:7f:35:a8:af:9d:66:fa:a9:
         e4:3a:62:60:35:6b:74:85:a0:3c:43:a8:48:3c:eb:f1:28:57:
         9d:3c:e3:06
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIURKbnb+dKmaTXN7RpZmwQqoJ5T3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwODE0MTM1OTEzWhcNMjQwODEyMTQwNDEz
WjAzMTEwLwYDVQQDEygwQkVGMTg3QTRGQzI2RUMzNEVENzk2QUNCNzk5ODE0M0Y4
RjdBQ0NDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs49j5AqTmKdr
VGq2sxxsioj6MyIdBAriDEQOJSwp8vSLsgk22f4lsASI3OQBYidTsQk/7/h0SM5U
0+99RtWHCiXpOQfoZQ8YKit7SNfis7UOCGxLObnW4ZvA9yo8hG25xlmnw8HWKH9i
RDhl9iWudPnvQGUjYtPczdkZWx8Fnn0+Epgyhfe57sIS6Qv0raeOmvUJun/tw8CF
2SqKPhwkW0CpkIn+ssuDLUZ51AU3+MPr+WatNn3O80zdqu7d/GJIr0Ip8qfkmV9e
UMNCMUKJlMISsuqJomcp/9vE/nSM1mUb277+6qCi22rOi6uFbqUbJc/MTvTvegAW
ToqA0KgtjwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFAvvGHpPwm7DTteWrLeZgUP4
96zMMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABo6qQwDQYJKoZIhvcNAQELBQADggEBAAhZ
t1KvLRESt9PnRasVjhjFvwunIha5fmPZDTSDauQQxROa85Q9rupITctx8jOzYaKP
MOq6U2QcRkTNKGx7G14AobrxLgQev1TWEEq+0u0Lvr4TEyWEi/q77hDSCOnyGeOf
SJHzuS8YqB2Y/8wKYGRk7n7LMERVONsZ5+FmT+jwsLw3QPA4/dHgRTwJlUylY7u7
mYPBybgWgDxIiZ/8b0k4HJ/9W9tPobh92oeDmJtJ3AGA6BQdJw/Vl5zowOlJcBvi
yX4h5lGVSwdwaaxc+MWgv2KFDke8EAzDgXh/+KrYHkZ/NaivnWb6qeQ6YmA1a3SF
oDxDqEg86/EoV5084wY=
-----END CERTIFICATE-----