Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400860.roa
File:                     AS400860.roa (raw, json)
Hash identifier:          iY+001DlZi45kAcsm5mq+TDetJLq6p6RnO/teJlNxlI=
Subject key identifier:   FA:2D:33:90:B1:C5:30:7B:8B:C3:15:05:8B:5C:2E:26:41:DB:FC:A6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0B60D4CA502043F7EBADEC3F2D7310A526E9A72E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400860.roa
Signing time:             Tue 13 Jun 2023 13:31:45 +0000
ROA not before:           Tue 13 Jun 2023 13:26:45 +0000
ROA not after:            Tue 11 Jun 2024 13:31:45 +0000
asID:                     400860
IP address blocks:        104.234.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:60:d4:ca:50:20:43:f7:eb:ad:ec:3f:2d:73:10:a5:26:e9:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 13 13:26:45 2023 GMT
            Not After : Jun 11 13:31:45 2024 GMT
        Subject: CN=FA2D3390B1C5307B8BC315058B5C2E2641DBFCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:80:cf:65:3c:b1:81:e5:f1:08:68:83:77:
                    58:b0:70:23:ed:72:8e:15:ba:17:a2:82:bf:77:a7:
                    f2:a0:d5:f5:4b:8e:d0:b4:09:0a:7c:94:bd:e8:8f:
                    db:9f:33:4b:7a:fa:01:6d:dc:5a:32:4a:ef:59:24:
                    ac:d0:33:fd:a6:41:72:e5:20:34:29:cd:d8:20:33:
                    a5:0b:23:31:13:43:94:91:d9:c3:8f:bb:fb:35:16:
                    76:2f:5f:8f:d6:41:eb:0a:b5:de:b6:8f:3f:44:21:
                    46:92:0c:c0:e3:df:9f:a1:bc:6c:68:92:56:29:2a:
                    dc:8c:a1:1c:5d:29:ea:66:04:75:1b:f2:e8:4d:ea:
                    63:a6:9d:c4:73:ca:45:bf:56:63:62:1d:f8:f2:e8:
                    b7:f3:ee:c6:36:00:c7:7c:2f:7d:4e:43:75:22:98:
                    b5:4f:ec:4f:f5:33:b8:84:dc:0e:a6:5a:28:81:50:
                    94:19:bf:4c:6a:22:c5:e4:70:dd:57:6c:04:18:f3:
                    bf:a3:6a:53:2f:ab:8c:31:cb:3e:14:c6:ba:dc:65:
                    f6:91:a5:a5:9a:af:d8:9c:da:0d:b2:98:3a:d3:cf:
                    6e:b7:16:af:a2:d3:de:db:a9:47:b9:f0:1e:63:ca:
                    82:53:7a:3f:ce:ed:03:18:1e:6c:49:c6:a0:50:b7:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2D:33:90:B1:C5:30:7B:8B:C3:15:05:8B:5C:2E:26:41:DB:FC:A6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400860.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:71:f1:5e:8f:64:73:cf:d8:f9:de:21:a7:fa:53:c1:c8:
         59:ef:1c:f5:57:d4:a6:45:9a:ab:eb:0e:13:56:95:c5:6c:c6:
         a2:a0:f3:a6:aa:69:83:1b:6e:f2:20:22:63:55:be:c1:bb:d6:
         4e:ca:3e:c0:74:31:09:e8:2c:5b:f3:11:6d:7a:74:4b:a8:6b:
         62:ba:d9:92:77:b0:7f:60:ee:eb:2e:8e:3f:c0:2a:1e:65:c4:
         7c:79:9e:60:27:f4:a3:4b:1a:20:4e:52:fd:de:b9:df:51:c1:
         42:e2:71:be:e6:63:2b:c0:72:ae:31:c2:05:65:c1:d5:17:00:
         40:8a:13:30:67:9c:01:50:ea:9d:71:1b:c0:01:32:2b:c1:f7:
         e3:65:58:d5:61:4d:38:3c:5b:9b:3d:d5:7b:1b:9e:1c:3d:20:
         11:8b:f5:67:a9:01:73:e8:41:80:63:d3:e5:c6:dc:4f:b4:ae:
         e1:d2:8f:34:ed:57:95:c2:dd:c1:f9:db:73:d3:39:26:5a:9f:
         40:a6:8f:e5:ba:df:3c:93:51:76:22:91:f5:8e:f8:84:32:d6:
         03:4f:4b:81:82:6e:6d:cb:d8:e0:81:66:58:b1:c9:c7:dc:3b:
         c7:88:02:e8:e6:73:5b:16:b9:61:96:3c:5f:57:da:0d:05:6f:
         8d:a2:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----