Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397270.roa
File:                     AS397270.roa (raw, json)
Hash identifier:          GFZUg5Hb5Z3lOzV2G4FA7abTl2CXCccSQaaEVWHXq6Q=
Subject key identifier:   F2:40:60:4B:E3:4D:5F:D0:F9:9A:09:74:6E:F9:39:37:97:00:A4:2C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4664AD9B316A9F56A521412D80A2638A5762DA76
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397270.roa
Signing time:             Tue 28 Feb 2023 02:49:46 +0000
ROA not before:           Tue 28 Feb 2023 02:44:46 +0000
ROA not after:            Tue 27 Feb 2024 02:49:46 +0000
asID:                     397270
IP address blocks:        104.234.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:64:ad:9b:31:6a:9f:56:a5:21:41:2d:80:a2:63:8a:57:62:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 28 02:44:46 2023 GMT
            Not After : Feb 27 02:49:46 2024 GMT
        Subject: CN=F240604BE34D5FD0F99A09746EF939379700A42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fa:0f:c3:fb:c7:10:04:6f:8e:5b:d8:4a:0a:
                    a4:30:df:b2:16:3f:49:a4:e0:99:38:e8:bb:d8:87:
                    46:db:f6:24:62:ed:ec:9f:a1:d7:dd:f9:35:f3:d7:
                    ad:c1:65:96:e1:01:b0:bb:ac:b2:21:34:16:43:5d:
                    6c:44:7f:4e:1d:4e:52:2f:dc:30:66:f8:d9:bc:eb:
                    30:dd:62:69:f3:f7:a1:77:0b:e4:fc:ae:fe:d0:de:
                    26:13:32:ac:eb:63:52:44:ad:d3:29:9b:88:76:6f:
                    4a:58:57:02:18:08:08:91:80:b5:17:16:7b:ed:d8:
                    ae:c4:15:f2:0b:57:41:d2:2a:f1:2e:52:af:1d:d9:
                    e8:be:4a:73:a6:53:aa:2b:6f:b9:af:2d:b7:6f:23:
                    1e:25:45:49:b7:81:1e:90:f4:4a:74:95:d4:07:a3:
                    51:53:05:55:b0:c0:ad:16:f8:6e:a9:ab:4c:2a:6e:
                    ab:c1:aa:eb:3e:8a:d8:44:46:ce:2c:03:5f:db:45:
                    fe:75:44:be:f1:c0:0b:0e:1d:5a:62:2d:2d:10:80:
                    11:b6:aa:bc:a7:21:5b:e7:25:88:3a:e8:b1:ed:47:
                    3e:d0:09:3d:21:1b:d9:27:7e:06:42:70:1a:39:48:
                    75:ff:cc:63:49:b4:66:29:e5:2c:1c:60:0e:d6:64:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:60:4B:E3:4D:5F:D0:F9:9A:09:74:6E:F9:39:37:97:00:A4:2C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397270.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:c3:73:0e:e7:6e:9a:06:17:7b:4d:ba:0f:89:5e:04:20:
         19:17:04:c1:db:c6:c8:80:b3:aa:3a:94:8f:e8:ee:90:06:71:
         06:47:1f:0f:fc:21:63:4e:d8:4c:96:6c:ee:47:ba:26:8b:89:
         40:13:81:eb:d3:09:25:22:50:ca:e6:13:ad:3a:e3:10:cd:4f:
         b7:01:ab:f2:3c:9c:28:ba:c7:2c:dd:31:58:ef:58:39:b3:e1:
         5a:78:4d:cb:97:49:55:61:67:38:49:1d:13:95:e0:4e:40:13:
         6f:2f:6f:6f:d0:58:05:ef:52:6a:23:d8:8e:75:92:db:be:91:
         83:04:7d:83:df:78:3c:1a:0e:96:1b:2d:dd:6c:15:e1:93:e3:
         15:73:78:d4:fd:60:48:f6:96:76:12:5d:9f:94:2f:3f:53:e8:
         31:38:b1:42:50:9b:3e:49:b4:b7:40:43:ea:50:55:cf:08:62:
         ca:fa:42:fc:5e:65:d7:00:e9:12:10:a2:cb:f7:97:52:42:4f:
         6a:dc:b5:7c:d5:24:a6:6e:16:10:4f:1c:fa:c1:ea:d9:52:e4:
         ed:1e:ad:98:51:36:03:4f:42:ad:f8:60:a5:9b:2d:31:97:3b:
         dd:4e:b5:2e:2b:cc:dd:9b:86:5e:7c:7a:48:6f:29:17:e9:7d:
         29:7e:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----