Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS148996.roa
File:                     AS148996.roa (raw, json)
Hash identifier:          58jkfJgF3VBDUzEarPDOLuGhbKen9i9yoHGqvkiO+aU=
Subject key identifier:   87:A4:F0:C7:56:24:E6:74:C0:17:45:2A:48:A6:63:5E:07:11:FE:13
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       29ED9F0797344AF407157D2398503B53D76D27A2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS148996.roa
Signing time:             Tue 16 Jul 2024 14:21:53 +0000
ROA not before:           Tue 16 Jul 2024 14:16:53 +0000
ROA not after:            Tue 15 Jul 2025 14:21:53 +0000
asID:                     148996
IP address blocks:        104.234.206.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:9f:07:97:34:4a:f4:07:15:7d:23:98:50:3b:53:d7:6d:27:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 16 14:16:53 2024 GMT
            Not After : Jul 15 14:21:53 2025 GMT
        Subject: CN=87A4F0C75624E674C017452A48A6635E0711FE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:e1:c7:e4:f4:6a:ee:8b:79:76:d3:17:2b:
                    13:60:de:b6:be:90:5d:0c:a0:b6:df:cf:36:d5:76:
                    d1:51:7a:b0:0f:a9:e8:bb:6b:25:99:cd:d1:5b:80:
                    30:9e:4a:f6:c7:45:0b:c5:38:38:0d:c6:32:6e:82:
                    3d:89:c2:d8:79:0b:21:21:25:77:12:65:0e:f1:53:
                    5e:d5:5a:b7:1b:75:d8:98:f0:15:2b:95:33:cd:23:
                    55:25:d8:83:4b:e7:32:53:15:38:f8:c8:ef:3d:cb:
                    30:a8:a0:e5:11:0a:80:43:09:1c:c3:6c:5d:ae:e7:
                    a6:e3:1d:ab:fb:d4:04:15:ed:fb:09:e7:e8:61:17:
                    96:4b:c0:c5:0f:ec:48:61:d4:44:8c:34:8c:11:6b:
                    64:6c:f7:e3:a2:85:f4:46:fa:33:b3:f5:b0:ef:b7:
                    4f:7b:2e:ae:bc:9e:57:0a:d2:07:03:f8:a5:42:88:
                    9a:0f:f8:9f:5b:90:a8:dd:99:97:02:d2:d4:cf:ac:
                    87:d3:dc:77:14:57:a0:13:32:61:f8:bf:5b:3f:3d:
                    cb:fe:a4:06:22:22:60:f6:ab:a1:af:73:99:f8:0e:
                    4c:95:ca:d6:ee:40:52:7c:4f:5b:d7:b9:00:db:9a:
                    96:82:04:4d:2e:0d:6d:70:9d:18:62:25:80:f8:bb:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:F0:C7:56:24:E6:74:C0:17:45:2A:48:A6:63:5E:07:11:FE:13
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS148996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:09:e5:22:58:11:83:b4:a7:d4:23:8a:28:9f:48:a9:d1:ba:
         51:a0:26:ff:c0:96:09:89:94:d6:a2:06:cf:84:5c:84:5d:0f:
         23:b4:33:bb:9e:e5:f8:41:f3:19:84:78:7d:c1:ec:31:36:8d:
         d5:d3:d7:54:01:01:54:4a:ee:89:58:32:00:ef:5f:69:91:4d:
         c9:58:bd:3a:ce:0e:25:90:c7:44:c1:62:eb:71:39:cf:e9:86:
         da:74:37:0b:63:20:0c:11:54:68:9e:85:5c:12:30:6b:28:28:
         2c:60:62:77:3c:df:38:cd:d4:98:f8:b3:1e:d7:d1:40:57:24:
         a6:8f:fa:b2:51:ae:05:c6:64:e0:ba:84:af:3e:8a:ba:c7:34:
         a4:26:1d:8b:00:10:25:92:02:3d:3e:b2:16:71:0a:9b:57:5e:
         61:3a:d6:b2:7e:eb:8a:6e:9b:70:36:65:47:fa:b8:8c:a3:bc:
         60:c5:dd:71:a3:f6:d8:15:9e:07:98:6a:c9:06:b0:8e:e9:44:
         0a:fc:06:25:67:2a:af:a3:5c:66:6b:2d:fe:a6:86:eb:1b:ed:
         da:c6:f8:bd:d6:4e:15:20:27:0a:ed:fb:31:6f:38:23:6f:87:
         bc:7a:78:8c:55:0c:05:87:28:0f:74:ef:9d:29:0f:e3:98:f8:
         de:2b:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----