Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138997.roa
File:                     AS138997.roa (raw, json)
Hash identifier:          UKVRKw5FzGm+2fgpQ2ovf2e3Fw/JlKPnTHLq8YDn0vo=
Subject key identifier:   13:F4:79:79:ED:A7:5B:C2:D8:C9:62:F7:A2:0D:D3:FD:47:F4:86:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       580CC5DD2B393A7D7D7D1A0BF211FEACA7202DBE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138997.roa
Signing time:             Tue 16 Jul 2024 14:01:16 +0000
ROA not before:           Tue 16 Jul 2024 13:56:16 +0000
ROA not after:            Tue 15 Jul 2025 14:01:16 +0000
asID:                     138997
IP address blocks:        104.234.206.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:c5:dd:2b:39:3a:7d:7d:7d:1a:0b:f2:11:fe:ac:a7:20:2d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 16 13:56:16 2024 GMT
            Not After : Jul 15 14:01:16 2025 GMT
        Subject: CN=13F47979EDA75BC2D8C962F7A20DD3FD47F48623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:6e:d8:1f:ad:3e:8e:95:c9:27:62:69:7e:
                    0f:c5:d5:18:0b:8c:0b:ae:4a:b8:88:29:ce:4a:31:
                    eb:bc:b6:da:88:30:13:1d:78:cc:d7:0f:1f:11:8a:
                    d6:4f:6e:73:e6:4a:01:f3:e6:8d:18:51:f2:86:b9:
                    e0:96:8a:84:86:c4:c7:cb:01:1d:5b:b0:8f:3a:e5:
                    f5:e6:6e:88:91:93:95:b9:cb:fc:9a:1a:43:d5:d1:
                    50:a0:bf:4f:b2:d0:be:d5:e7:89:f8:a0:7b:ae:22:
                    8f:3f:4e:81:e9:be:5d:d4:07:22:35:b6:c7:18:4f:
                    32:4c:aa:0b:1a:f3:82:08:fe:34:a9:6f:c8:5a:75:
                    30:d9:21:e1:de:94:58:39:93:72:ba:bd:5a:45:13:
                    de:5d:af:62:e9:5d:0e:85:cf:b9:fb:25:69:97:b0:
                    2d:ce:12:38:25:20:bf:28:de:65:25:ed:a6:a7:97:
                    5c:73:7f:2e:dc:22:85:e5:a6:47:e2:24:d1:08:81:
                    69:57:43:68:5d:89:87:52:17:c4:2b:a2:78:84:58:
                    65:60:64:13:37:d0:3c:83:56:a8:26:ac:f1:38:16:
                    4f:e5:cf:68:fe:4d:66:00:84:cb:b1:52:ac:63:e3:
                    6f:bd:b9:33:58:9e:7c:fc:0b:9b:02:c6:a9:45:b7:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:79:79:ED:A7:5B:C2:D8:C9:62:F7:A2:0D:D3:FD:47:F4:86:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:26:f2:d6:e5:e3:2f:8b:41:a6:b6:3d:d3:aa:31:3a:06:44:
         85:34:73:30:ad:5a:7c:b6:1a:34:59:24:20:2c:a9:35:8f:ae:
         f0:20:4c:55:d7:3a:e9:ef:d0:ca:cb:6b:85:5c:d4:11:3b:b3:
         6b:b4:d6:53:20:bb:2c:fb:e7:ea:0c:3e:b4:ee:99:6b:59:2e:
         6a:09:fe:63:0e:4a:7b:28:98:aa:f7:bb:fc:f4:1c:81:50:45:
         95:09:f1:79:02:c8:9b:0a:03:17:c3:a6:23:ca:55:63:c6:44:
         80:e9:02:b7:c4:ed:71:2b:cf:06:a0:4c:d0:cf:5f:1c:0f:44:
         1d:a2:7d:b8:f7:ec:b5:6b:d8:80:02:60:4c:60:7a:bf:b8:70:
         11:87:7b:df:33:6d:fc:16:83:4d:58:99:3c:0f:0a:33:6e:b5:
         eb:35:87:3b:90:da:87:f0:89:9e:ed:18:bf:04:72:5b:7f:c2:
         d1:ea:d0:ba:26:06:8e:58:c7:05:28:78:56:7e:8c:a0:f2:7f:
         0f:7d:d3:a8:b7:08:a2:21:80:ea:96:7d:80:89:7c:b2:87:df:
         07:81:49:60:3f:da:7a:28:e6:4d:62:1e:90:55:2b:48:b6:ae:
         a3:cd:3c:4d:1f:7d:cc:c9:d1:17:cc:6a:25:8b:9a:da:49:1b:
         0a:1e:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----