Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151604.roa
File:                     AS151604.roa (raw, json)
Hash identifier:          4rBKaCXIZqHB7Q+NOh6VRrOtpTKtZV4h9Try9RT46So=
Subject key identifier:   9C:6C:3A:51:8A:CC:14:C0:79:24:0B:CE:AF:06:53:61:43:B9:A7:44
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7602D6C35FDEA6A8BD01F5F979DB1E0BB983F38E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151604.roa
Signing time:             Thu 19 Oct 2023 08:36:17 +0000
ROA not before:           Thu 19 Oct 2023 08:31:17 +0000
ROA not after:            Thu 17 Oct 2024 08:36:17 +0000
asID:                     151604
IP address blocks:        104.234.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 Nov 2023 06:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:02:d6:c3:5f:de:a6:a8:bd:01:f5:f9:79:db:1e:0b:b9:83:f3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 19 08:31:17 2023 GMT
            Not After : Oct 17 08:36:17 2024 GMT
        Subject: CN=9C6C3A518ACC14C079240BCEAF06536143B9A744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:46:3b:c3:62:f3:b8:e0:4c:ef:d9:23:cc:
                    36:02:f7:5f:a3:cc:0f:0a:9d:1d:d2:2d:23:15:86:
                    49:62:e3:4b:82:69:e5:6a:97:c6:e5:43:a1:f3:1c:
                    d9:b8:c4:3c:4c:d8:6b:1b:7d:67:f2:23:0b:a5:57:
                    e7:77:b3:21:db:75:ed:7d:a4:b7:87:75:90:ea:22:
                    85:4a:b1:38:85:0c:a7:58:42:90:de:99:e5:e8:95:
                    81:93:3d:d7:1c:13:1c:a3:f1:b6:bc:ed:dc:62:4f:
                    41:5f:17:84:00:10:6d:63:5d:10:86:73:af:66:50:
                    2f:8d:ff:89:c3:80:52:25:4e:2d:52:17:73:e6:9e:
                    bb:3a:1f:eb:c4:97:48:79:5e:67:4b:18:12:38:28:
                    5c:5d:17:85:63:b4:9a:72:5c:c9:42:a2:0a:92:2c:
                    2f:c9:7c:c6:11:1a:6d:b1:8e:85:62:77:31:9f:9c:
                    98:62:1c:fe:b9:09:ce:1d:57:7b:d9:f2:d1:d3:7f:
                    8a:31:c9:8a:43:e5:42:d5:e3:51:ea:48:0b:2e:ec:
                    67:1a:91:f4:2d:ab:1d:79:39:91:dc:75:7d:16:f2:
                    ed:a6:fd:87:56:0e:56:f7:96:95:09:0f:0c:88:13:
                    26:24:ac:1a:5e:f1:1f:93:ae:99:c1:3b:12:89:6d:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:3A:51:8A:CC:14:C0:79:24:0B:CE:AF:06:53:61:43:B9:A7:44
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:96:27:b8:bf:e1:6c:bf:58:20:27:12:23:c9:15:8d:95:ff:
         5c:85:01:21:dc:69:ef:f7:00:7b:b5:b5:c1:ff:58:65:53:12:
         50:f3:cb:e1:1d:4e:73:2d:0f:87:d7:58:ea:9e:b7:ca:95:86:
         08:6d:c5:cb:48:c3:c7:84:8b:c8:b5:69:cc:23:ac:2c:20:1b:
         9b:1a:c4:43:38:b9:71:8c:f2:7a:54:e0:e3:f1:ea:f8:b5:7f:
         72:96:8a:2b:8b:f3:e6:bc:5d:b3:b0:15:38:ed:f1:d2:e3:fd:
         24:e2:42:fe:98:a5:54:ab:e6:80:9e:52:df:16:96:ba:03:56:
         b8:c9:56:52:11:7b:22:6c:33:85:6e:1a:2b:94:cd:5a:67:0d:
         1b:a2:98:bc:05:08:07:76:69:99:84:1e:b1:7c:b1:52:81:3b:
         df:a9:6e:d1:80:2e:a8:e2:a6:87:2d:4c:1b:e1:cd:19:0e:d6:
         9a:ab:ee:37:52:b2:b0:7e:1c:e1:da:f3:b4:35:ff:b3:0c:90:
         9f:29:fd:7d:47:0a:0e:dc:9f:c3:22:80:77:f5:72:a1:d6:47:
         d3:d7:9a:05:4f:8f:02:71:84:b1:33:30:8a:3b:c6:08:7f:6b:
         1c:67:dc:0c:1e:ab:b5:fd:43:33:c7:33:86:8f:a9:76:ee:3f:
         a1:50:fd:fe
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUdgLWw1/epqi9AfX5edseC7mD844wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMDE5MDgzMTE3WhcNMjQxMDE3MDgzNjE3
WjAzMTEwLwYDVQQDEyg5QzZDM0E1MThBQ0MxNEMwNzkyNDBCQ0VBRjA2NTM2MTQz
QjlBNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0pGO8Ni87jg
TO/ZI8w2Avdfo8wPCp0d0i0jFYZJYuNLgmnlapfG5UOh8xzZuMQ8TNhrG31n8iML
pVfnd7Mh23XtfaS3h3WQ6iKFSrE4hQynWEKQ3pnl6JWBkz3XHBMco/G2vO3cYk9B
XxeEABBtY10QhnOvZlAvjf+Jw4BSJU4tUhdz5p67Oh/rxJdIeV5nSxgSOChcXReF
Y7SaclzJQqIKkiwvyXzGERptsY6FYncxn5yYYhz+uQnOHVd72fLR03+KMcmKQ+VC
1eNR6kgLLuxnGpH0LasdeTmR3HV9FvLtpv2HVg5W95aVCQ8MiBMmJKwaXvEfk66Z
wTsSiW3vEwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJxsOlGKzBTAeSQLzq8GU2FD
uadEMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE1MTYwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjquDANBgkqhkiG9w0BAQsFAAOC
AQEAJ5YnuL/hbL9YICcSI8kVjZX/XIUBIdxp7/cAe7W1wf9YZVMSUPPL4R1Ocy0P
h9dY6p63ypWGCG3Fy0jDx4SLyLVpzCOsLCAbmxrEQzi5cYzyelTg4/Hq+LV/cpaK
K4vz5rxds7AVOO3x0uP9JOJC/pilVKvmgJ5S3xaWugNWuMlWUhF7ImwzhW4aK5TN
WmcNG6KYvAUIB3ZpmYQesXyxUoE736lu0YAuqOKmhy1MG+HNGQ7WmqvuN1KysH4c
4drztDX/swyQnyn9fUcKDtyfwyKAd/VyodZH09eaBU+PAnGEsTMwijvGCH9rHGfc
DB6rtf1DM8czho+pdu4/oVD9/g==
-----END CERTIFICATE-----