Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS146943.roa
File:                     AS146943.roa (raw, json)
Hash identifier:          vg/DXQmaiFZfGcRyOPK91+pVK0e8Svgj93/DmJLWx4M=
Subject key identifier:   AC:4F:72:69:43:14:30:44:45:AF:F4:A6:E4:27:A4:D0:F1:32:89:8E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1B3DB38D65176B8CAB0D4B481F19785DEA1E6DEE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS146943.roa
Signing time:             Mon 17 Jul 2023 12:23:52 +0000
ROA not before:           Mon 17 Jul 2023 12:18:52 +0000
ROA not after:            Mon 15 Jul 2024 12:23:52 +0000
asID:                     146943
IP address blocks:        104.234.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:b3:8d:65:17:6b:8c:ab:0d:4b:48:1f:19:78:5d:ea:1e:6d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 17 12:18:52 2023 GMT
            Not After : Jul 15 12:23:52 2024 GMT
        Subject: CN=AC4F72694314304445AFF4A6E427A4D0F132898E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:8f:ae:67:fc:ba:cb:8f:0e:f2:bd:8f:74:
                    ed:98:58:28:c1:dc:bb:0c:ce:06:4e:c5:e4:02:be:
                    4a:71:09:16:bb:27:31:0e:3a:19:bd:c3:b5:8c:38:
                    8d:8a:83:2e:4c:a9:7a:9d:04:8c:49:52:8d:ab:66:
                    06:4c:4d:85:b5:1e:2d:14:93:b1:2e:1e:f9:97:d5:
                    ea:ce:7e:dc:9c:c3:3e:92:9b:f6:fe:aa:5c:a4:fd:
                    00:46:8c:33:4d:36:ea:7a:f9:7e:29:48:52:31:80:
                    8f:dd:9a:96:43:a3:6b:15:8b:54:fb:f6:bb:24:fa:
                    84:db:ed:3f:7e:6e:a9:5c:75:7c:c2:a3:eb:ed:e1:
                    1f:77:53:d9:ae:e3:25:9c:b6:de:4d:94:6f:ad:a9:
                    4a:17:82:74:ba:9d:65:ea:c9:bf:d7:52:89:60:a2:
                    c4:f3:9a:38:50:ee:94:26:76:3e:a4:f3:9a:1c:76:
                    04:6f:35:1f:b7:3c:df:7a:3a:83:5e:02:14:00:38:
                    24:31:60:42:b2:8a:fe:a0:0b:3b:f7:df:7e:89:8f:
                    bc:e6:fd:04:e2:d4:b4:50:97:3b:c1:46:d1:32:5a:
                    58:e6:2a:27:5a:6b:13:37:3d:47:ae:8c:54:73:5d:
                    01:a4:34:c6:de:8d:d0:ac:f2:53:eb:c0:5d:0f:5e:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:72:69:43:14:30:44:45:AF:F4:A6:E4:27:A4:D0:F1:32:89:8E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS146943.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:2e:7e:3f:db:99:9d:34:95:fd:3e:bb:c4:e1:11:87:0d:82:
         ca:58:56:4f:95:3b:2a:bd:d8:90:d7:ff:9a:bb:8e:2d:7a:a2:
         22:dc:e8:fb:2f:2e:0b:01:67:12:bf:83:8d:91:3b:a4:56:50:
         21:31:04:ab:a6:ab:ae:f6:f5:96:3e:c1:53:9e:b1:54:93:80:
         57:72:73:3c:de:29:3a:f4:63:24:9d:e3:f4:0e:a1:96:4a:28:
         da:33:86:0f:fa:aa:1e:fa:6b:30:72:ea:d5:fc:d3:38:cc:a4:
         b9:a9:8a:d7:73:57:2a:af:71:59:f4:a7:80:6d:c9:64:21:e7:
         d5:68:ce:94:50:fa:2f:ab:02:c1:c7:8d:41:39:d4:d6:3c:c6:
         29:34:13:b1:6f:15:d2:28:73:35:81:73:a8:c8:32:e5:e8:3f:
         22:96:c8:37:da:8c:11:96:f9:32:31:23:12:84:e2:72:fb:e4:
         1d:fb:9a:49:25:9f:29:68:4e:0f:ff:ba:c4:cb:3e:ad:5f:5b:
         6c:b1:f8:76:f9:02:b9:cf:99:22:2f:67:85:65:26:bd:c1:e5:
         25:67:8a:1c:2c:58:0f:de:e2:df:c8:20:0f:61:d9:3f:af:86:
         4b:23:35:8e:d7:28:bc:89:45:c0:d5:12:a4:e7:ec:2e:49:d4:
         53:99:dd:78
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUGz2zjWUXa4yrDUtIHxl4Xeoebe4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwNzE3MTIxODUyWhcNMjQwNzE1MTIyMzUy
WjAzMTEwLwYDVQQDEyhBQzRGNzI2OTQzMTQzMDQ0NDVBRkY0QTZFNDI3QTREMEYx
MzI4OThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MaPrmf8usuP
DvK9j3TtmFgowdy7DM4GTsXkAr5KcQkWuycxDjoZvcO1jDiNioMuTKl6nQSMSVKN
q2YGTE2FtR4tFJOxLh75l9Xqzn7cnMM+kpv2/qpcpP0ARowzTTbqevl+KUhSMYCP
3ZqWQ6NrFYtU+/a7JPqE2+0/fm6pXHV8wqPr7eEfd1PZruMlnLbeTZRvralKF4J0
up1l6sm/11KJYKLE85o4UO6UJnY+pPOaHHYEbzUftzzfejqDXgIUADgkMWBCsor+
oAs7999+iY+85v0E4tS0UJc7wUbRMlpY5ionWmsTNz1HroxUc10BpDTG3o3QrPJT
68BdD15SJwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKxPcmlDFDBERa/0puQnpNDx
MomOMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE0Njk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq2zANBgkqhkiG9w0BAQsFAAOC
AQEApy5+P9uZnTSV/T67xOERhw2CylhWT5U7Kr3YkNf/mruOLXqiItzo+y8uCwFn
Er+DjZE7pFZQITEEq6arrvb1lj7BU56xVJOAV3JzPN4pOvRjJJ3j9A6hlkoo2jOG
D/qqHvprMHLq1fzTOMykuamK13NXKq9xWfSngG3JZCHn1WjOlFD6L6sCwceNQTnU
1jzGKTQTsW8V0ihzNYFzqMgy5eg/IpbIN9qMEZb5MjEjEoTicvvkHfuaSSWfKWhO
D/+6xMs+rV9bbLH4dvkCuc+ZIi9nhWUmvcHlJWeKHCxYD97i38ggD2HZP6+GSyM1
jtcovIlFwNUSpOfsLknUU5ndeA==
-----END CERTIFICATE-----