Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216023.roa
File:                     AS216023.roa (raw, json)
Hash identifier:          /Frq68dhQJLMK9TaicrqJ/TCRs79QzZSOBzy0Hgs9g0=
Subject key identifier:   1D:44:48:EB:89:48:96:3C:02:F6:F5:7D:E8:D9:AB:00:3B:F5:E2:DE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       08C5FB0E77FF707E6B64F159306D0708F06A0C12
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216023.roa
Signing time:             Tue 13 Feb 2024 01:58:34 +0000
ROA not before:           Tue 13 Feb 2024 01:53:34 +0000
ROA not after:            Tue 11 Feb 2025 01:58:34 +0000
asID:                     216023
IP address blocks:        104.234.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 13:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c5:fb:0e:77:ff:70:7e:6b:64:f1:59:30:6d:07:08:f0:6a:0c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 13 01:53:34 2024 GMT
            Not After : Feb 11 01:58:34 2025 GMT
        Subject: CN=1D4448EB8948963C02F6F57DE8D9AB003BF5E2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:3d:05:e5:03:ae:be:6a:14:f4:08:da:82:
                    70:0c:ce:a5:4a:56:21:27:a1:56:7a:57:35:ec:83:
                    90:e7:67:ba:01:84:4d:99:1d:0a:11:20:dc:2e:71:
                    ca:f5:56:7e:47:a4:66:eb:7c:13:ce:12:26:f3:15:
                    98:72:78:51:1b:5d:f7:ce:97:96:9f:b7:49:7e:ba:
                    ca:b1:8d:cf:57:7c:97:0b:7e:c2:7b:45:af:b1:fa:
                    2d:cd:15:4a:61:cc:94:e3:91:46:55:3c:29:10:ad:
                    e0:cb:5b:06:37:aa:a6:b1:bf:f1:7b:06:d2:6c:9b:
                    14:d4:4e:a9:06:e3:90:fd:78:38:53:f6:a2:36:2e:
                    35:18:b0:e1:04:c9:07:bf:c0:ee:7a:54:68:f4:8e:
                    67:14:d2:e0:26:ed:a8:18:8d:6d:86:b3:12:b7:1c:
                    65:e8:42:87:03:59:b1:eb:63:a1:32:06:46:13:52:
                    9c:2d:0f:8b:c5:30:bc:e3:44:fe:10:b0:bd:57:b9:
                    d1:ad:1f:3e:61:45:33:da:14:52:2d:5a:a3:9b:22:
                    7d:fd:84:46:51:5a:ec:a1:93:b2:64:43:d0:21:b4:
                    d2:dc:3d:6e:9b:a7:59:a8:91:bc:e1:6d:3e:be:e9:
                    a4:c3:80:61:31:13:37:5c:29:35:ca:73:e7:2d:c6:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:48:EB:89:48:96:3C:02:F6:F5:7D:E8:D9:AB:00:3B:F5:E2:DE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:11:12:b8:8c:ed:31:62:11:f5:5b:66:23:67:0d:ae:47:
         9d:5c:ac:5c:ef:c4:62:63:f9:1c:2c:1c:70:5c:27:53:e6:ae:
         3f:e5:e6:38:e9:f6:5a:ed:e8:7a:88:c3:81:1e:30:73:1d:77:
         7e:de:9c:0c:70:4b:04:a0:fd:f8:ba:6e:eb:bc:29:8f:34:13:
         1e:e4:ac:e0:71:1f:77:8b:59:37:00:d6:97:62:7c:71:3a:df:
         c9:26:93:08:1f:de:d0:3d:03:ab:07:3e:33:58:e3:75:2c:de:
         d6:47:30:50:2a:46:09:1b:1c:a1:50:b8:35:15:03:76:e6:0e:
         5c:68:eb:3d:54:ca:f8:d5:56:fa:2c:31:4d:40:13:0c:e0:ff:
         84:bb:5b:af:d7:2d:9a:cb:9f:63:ec:cb:3c:c0:1c:0a:d9:94:
         45:5e:8b:aa:ba:0a:f4:2d:1b:21:40:e9:59:fd:0b:11:bd:95:
         c1:60:ed:0b:d7:43:8f:76:2d:7a:26:2c:8c:ef:25:01:c7:31:
         52:84:1a:4b:df:23:ee:de:26:7d:b5:72:62:6a:02:f2:c7:fb:
         02:4d:21:aa:83:61:af:72:15:c1:af:96:c9:6c:c6:22:dc:2e:
         43:d7:93:88:59:a8:74:c9:4f:f4:cc:64:34:47:e3:7e:b1:45:
         bb:0f:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----