Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30644.roa
File:                     AS30644.roa (raw, json)
Hash identifier:          pz/L3Pndc8q0gy/XyzIWB8iB+XK9Gy1LGIYVvohasLg=
Subject key identifier:   AA:8F:89:A4:CF:C7:0E:75:5A:B9:57:18:E6:75:B2:03:80:18:80:63
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3856C7DFC92F93166977E2529EB047B36651D4B1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30644.roa
Signing time:             Tue 23 Jan 2024 18:01:12 +0000
ROA not before:           Tue 23 Jan 2024 17:56:12 +0000
ROA not after:            Tue 21 Jan 2025 18:01:12 +0000
asID:                     30644
IP address blocks:        104.234.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:56:c7:df:c9:2f:93:16:69:77:e2:52:9e:b0:47:b3:66:51:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 23 17:56:12 2024 GMT
            Not After : Jan 21 18:01:12 2025 GMT
        Subject: CN=AA8F89A4CFC70E755AB95718E675B20380188063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:87:98:9e:bf:1f:4b:89:09:17:24:43:be:
                    78:29:22:61:75:4c:1f:34:cf:d5:a5:5c:8b:62:ae:
                    05:49:3b:96:c5:7d:2a:8d:a5:37:8d:1a:d0:fe:3d:
                    c5:f9:fa:2d:04:03:2e:ce:c5:66:e0:c7:3b:71:bc:
                    47:06:71:5c:3f:a4:f4:83:97:04:7a:b0:fa:3d:38:
                    f9:d0:25:9c:2d:b6:ef:3f:c2:b2:7b:2c:4f:2f:a7:
                    f5:b4:2c:23:f2:21:56:b8:cf:38:62:75:14:b3:3c:
                    c0:51:e2:bd:0b:b6:df:4f:d5:85:3e:3d:26:9c:c4:
                    99:0d:73:56:c9:94:0f:14:1a:f0:4f:ce:31:31:9b:
                    ca:5e:94:a0:92:40:8a:6a:60:1f:b8:3e:53:0a:6e:
                    f9:cf:86:07:99:e9:32:17:53:44:4a:14:b8:2a:08:
                    fa:03:12:12:15:f6:b6:b2:7c:a1:54:01:0a:e8:75:
                    0e:15:31:01:48:d4:e1:73:d7:dc:6e:5e:ac:04:1a:
                    97:fa:97:21:91:25:33:ed:9a:b6:9c:fb:7d:3b:98:
                    2d:6a:86:cb:eb:a4:c1:50:56:fe:1a:db:c9:55:67:
                    bd:8f:f8:b6:24:18:7c:7e:9b:ff:77:57:dc:39:67:
                    00:91:ea:e4:2f:c9:77:70:b7:68:c9:7d:1d:e0:d7:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:89:A4:CF:C7:0E:75:5A:B9:57:18:E6:75:B2:03:80:18:80:63
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30644.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:cb:37:7a:81:99:92:17:7f:32:93:c0:d7:28:96:5e:17:
         b2:26:21:1c:90:cf:d4:6f:67:ae:10:68:ed:31:6d:21:5c:bb:
         c1:1f:dc:5f:f3:df:38:db:5d:1a:cb:3f:2f:74:10:95:b5:f6:
         4f:72:83:8e:e5:21:f5:92:f3:3b:ba:8f:91:dd:aa:fc:ab:d9:
         60:20:68:30:a7:46:50:20:7f:aa:13:ac:b1:bf:27:d9:f2:2a:
         02:e4:f1:a6:f8:13:80:0a:78:d4:49:ea:54:bd:eb:80:cc:56:
         fa:c4:3b:a2:ee:cb:b1:5f:64:f7:c9:9b:1d:c6:34:d3:c6:3b:
         58:2d:63:cd:11:c8:00:b0:62:1a:82:8a:48:2c:46:2f:bb:f1:
         06:ca:6f:e0:74:8e:9e:cd:0f:8a:f5:12:32:37:eb:63:1d:4a:
         f0:43:26:f2:c0:e8:97:d0:dc:45:d5:66:ee:cc:d7:89:d1:16:
         45:ae:b7:a4:01:40:39:fc:15:da:9e:56:e2:1b:46:10:3b:5b:
         1c:f0:10:54:bd:b0:57:b0:17:a6:ee:3a:8e:8e:d1:0e:41:59:
         b1:57:a5:15:f5:fd:af:90:30:23:b6:fd:79:c2:31:f5:2b:17:
         d6:ad:dc:f2:3d:46:81:c8:9e:57:92:7e:3b:d1:be:95:ef:2d:
         00:ec:42:dd
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUOFbH38kvkxZpd+JSnrBHs2ZR1LEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMTIzMTc1NjEyWhcNMjUwMTIxMTgwMTEy
WjAzMTEwLwYDVQQDEyhBQThGODlBNENGQzcwRTc1NUFCOTU3MThFNjc1QjIwMzgw
MTg4MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigOHmJ6/H0uJ
CRckQ754KSJhdUwfNM/VpVyLYq4FSTuWxX0qjaU3jRrQ/j3F+fotBAMuzsVm4Mc7
cbxHBnFcP6T0g5cEerD6PTj50CWcLbbvP8KyeyxPL6f1tCwj8iFWuM84YnUUszzA
UeK9C7bfT9WFPj0mnMSZDXNWyZQPFBrwT84xMZvKXpSgkkCKamAfuD5TCm75z4YH
mekyF1NEShS4Kgj6AxISFfa2snyhVAEK6HUOFTEBSNThc9fcbl6sBBqX+pchkSUz
7Zq2nPt9O5gtaobL66TBUFb+GtvJVWe9j/i2JBh8fpv/d1fcOWcAkerkL8l3cLdo
yX0d4Ne0iwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKqPiaTPxw51WrlXGOZ1sgOA
GIBjMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzMwNjQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOoCMA0GCSqGSIb3DQEBCwUAA4IB
AQAqNMs3eoGZkhd/MpPA1yiWXheyJiEckM/Ub2euEGjtMW0hXLvBH9xf8984210a
yz8vdBCVtfZPcoOO5SH1kvM7uo+R3ar8q9lgIGgwp0ZQIH+qE6yxvyfZ8ioC5PGm
+BOACnjUSepUveuAzFb6xDui7suxX2T3yZsdxjTTxjtYLWPNEcgAsGIagopILEYv
u/EGym/gdI6ezQ+K9RIyN+tjHUrwQybywOiX0NxF1WbuzNeJ0RZFrrekAUA5/BXa
nlbiG0YQO1sc8BBUvbBXsBem7jqOjtEOQVmxV6UV9f2vkDAjtv15wjH1KxfWrdzy
PUaByJ5Xkn470b6V7y0A7ELd
-----END CERTIFICATE-----