Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399571.roa
File:                     AS399571.roa (raw, json)
Hash identifier:          2T3xd4w9j4Xi3hFguplQ6vqKgSn0otwHD+Ai8WooPIk=
Subject key identifier:   62:E3:18:20:76:01:D0:8B:4B:55:49:D0:20:0C:33:F2:D1:4C:22:CA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       09EF5B17499BE83D6B5DD9D59DD84B208C193C50
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399571.roa
Signing time:             Sun 29 Oct 2023 15:35:28 +0000
ROA not before:           Sun 29 Oct 2023 15:30:28 +0000
ROA not after:            Sun 27 Oct 2024 15:35:28 +0000
asID:                     399571
IP address blocks:        104.234.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 Nov 2023 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ef:5b:17:49:9b:e8:3d:6b:5d:d9:d5:9d:d8:4b:20:8c:19:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 29 15:30:28 2023 GMT
            Not After : Oct 27 15:35:28 2024 GMT
        Subject: CN=62E318207601D08B4B5549D0200C33F2D14C22CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:b7:8f:3f:6d:78:42:04:1c:5c:db:da:cb:
                    ff:c6:8e:8d:0e:ce:58:cb:da:00:54:7f:5f:96:ac:
                    30:a5:9c:bc:06:1b:5b:70:77:17:50:74:50:1f:1b:
                    5d:1c:b7:6e:19:01:a2:0b:b1:be:b0:3a:0c:26:1c:
                    9e:85:c5:05:8a:45:e9:9c:32:d9:40:73:c2:4b:99:
                    a3:9b:88:60:80:fd:e7:9d:01:bf:e4:4c:97:a4:93:
                    5e:3d:dd:56:ed:93:73:70:a5:3c:9d:98:7c:17:11:
                    9c:c0:f0:c9:24:1f:76:85:94:17:8c:de:ed:e8:74:
                    96:d5:94:3f:ac:0a:cc:98:8b:4c:e9:52:b6:56:c7:
                    e2:55:3a:a3:1c:17:8c:be:de:f7:60:68:90:a3:4d:
                    a5:51:98:ed:4b:13:2c:f1:d3:22:1e:29:da:f9:e1:
                    c0:b6:69:a2:94:8c:de:4c:af:f4:4a:e0:25:08:48:
                    c5:d6:1f:44:c1:0b:fd:21:9b:b1:57:90:3c:3d:27:
                    e3:39:97:ee:c1:fd:f2:6f:26:4c:e2:f3:b1:f4:f2:
                    31:ec:42:47:a2:9b:ec:05:b4:16:7d:df:bf:2a:81:
                    36:c3:b8:77:14:78:21:4c:8e:11:0d:53:3b:38:bb:
                    7f:e1:2f:c6:b2:5c:7c:8d:f6:c2:a5:c5:81:b3:a9:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:18:20:76:01:D0:8B:4B:55:49:D0:20:0C:33:F2:D1:4C:22:CA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399571.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:36:95:97:e1:0b:82:a2:0f:33:b1:40:28:ad:e4:f2:30:cb:
         3d:f4:ba:28:ad:37:1c:c2:08:cd:2c:7b:38:78:13:4a:57:ee:
         d2:2d:3a:a0:b4:5d:3d:04:69:61:1d:5d:a4:1d:3a:c5:b2:7b:
         6f:3c:39:9b:9e:c4:0c:d8:d2:15:fa:56:3c:b8:d7:10:d3:a6:
         68:70:bc:92:90:81:4a:40:be:ef:d9:bb:f8:14:d8:02:55:f7:
         b3:62:20:d8:17:af:d9:a1:6b:25:1a:5e:e4:4e:b7:9b:84:68:
         dc:eb:15:9b:06:e1:59:7f:db:f7:33:ef:66:d2:6e:f3:84:a2:
         b4:29:12:05:34:1c:8c:77:0b:78:1f:39:93:97:d6:20:81:3d:
         a7:18:b8:43:bf:b7:9a:49:80:57:3b:79:61:87:4b:18:32:8d:
         07:5d:f8:16:7b:85:72:9c:2f:21:96:8d:68:20:45:d9:00:7b:
         67:73:a3:8b:e3:49:7c:0d:6b:33:2a:72:0c:ff:db:d1:4f:16:
         29:1b:c7:f3:29:02:a1:df:a2:32:99:7d:6c:5a:54:95:61:c3:
         62:a1:0c:06:80:79:ca:be:45:d7:56:82:50:f8:67:2c:6e:21:
         fd:2b:43:c1:a6:db:ee:1d:b5:4d:2b:87:32:37:66:56:46:8b:
         79:7c:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----