Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          i6s167T3HMWVW3pkf3XL5Y+8kwK82w03BA7RhdPbRUA=
Subject key identifier:   30:E2:3C:81:53:F1:2B:CB:58:C2:1E:0C:A1:A5:37:CD:57:F4:D7:10
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       49C07B9734583C7E2A7AEF38BAF44B3BA68BF10E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa
Signing time:             Fri 15 Sep 2023 10:08:07 +0000
ROA not before:           Fri 15 Sep 2023 10:03:07 +0000
ROA not after:            Fri 13 Sep 2024 10:08:07 +0000
asID:                     49981
IP address blocks:        104.234.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Oct 2023 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:7b:97:34:58:3c:7e:2a:7a:ef:38:ba:f4:4b:3b:a6:8b:f1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 15 10:03:07 2023 GMT
            Not After : Sep 13 10:08:07 2024 GMT
        Subject: CN=30E23C8153F12BCB58C21E0CA1A537CD57F4D710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:bc:ed:d3:de:bb:56:a5:23:f1:d6:c0:53:
                    cf:5a:f4:c7:f8:e9:ce:c0:76:b4:33:3a:83:d8:1b:
                    c6:d6:6e:bd:58:5a:c2:e1:f7:e0:ca:b9:c1:23:bd:
                    2f:78:cd:da:0c:4a:8e:7a:50:04:a9:90:bf:3e:48:
                    c9:31:50:0e:1c:94:44:24:2a:4c:eb:6e:85:cc:dd:
                    55:15:ea:80:7d:e1:85:a3:97:d9:a0:3e:ad:b3:6f:
                    5f:b3:a3:5c:85:7a:78:2a:78:3a:05:7c:de:82:44:
                    16:20:59:8f:e4:00:b8:99:02:8c:9f:97:7b:c6:c0:
                    9f:29:4d:5a:f1:54:01:10:53:49:7c:07:29:15:dd:
                    91:61:29:e5:19:07:85:7f:8c:8f:1f:02:d3:28:45:
                    80:5a:6b:b1:a6:9b:d8:8d:08:da:71:27:e0:78:97:
                    8e:69:18:1a:22:32:78:05:24:1b:76:4e:51:ec:94:
                    1f:d0:6c:3e:03:7f:87:e9:99:66:a0:33:fe:8b:91:
                    da:2a:14:bc:00:d9:e9:71:c3:fa:ec:09:de:66:fd:
                    a5:95:5d:cd:9d:19:57:d8:10:40:f7:89:3a:58:3f:
                    f1:40:10:df:6a:42:18:83:09:7c:15:d8:4b:c6:ba:
                    36:b5:24:c5:af:bd:e6:c7:a5:a6:f4:7b:0c:58:d2:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:3C:81:53:F1:2B:CB:58:C2:1E:0C:A1:A5:37:CD:57:F4:D7:10
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:41:6c:ab:5f:51:e0:7e:04:81:04:e6:47:0b:d6:62:e0:f7:
         e5:70:d9:cb:2f:24:35:a6:ac:dc:65:fb:07:95:36:6c:45:1a:
         e4:42:4b:c7:94:25:65:94:be:25:e3:c3:ee:53:01:cf:b2:05:
         26:fd:a6:fe:97:6c:b0:cc:70:39:81:30:f0:83:ce:b5:5f:08:
         62:66:1f:c4:ff:75:0f:2c:ba:3e:1d:f2:36:39:86:f4:07:1e:
         ac:19:b7:58:0d:4a:87:7d:96:7c:7a:d1:3a:7a:e7:c8:ce:f7:
         44:e2:c9:f9:07:4f:75:6f:e7:2b:39:4e:27:f2:24:81:1c:12:
         e5:63:a2:ad:2e:ff:8f:3a:12:c1:7d:df:e4:59:4b:b1:81:c5:
         32:6f:9b:9d:a3:fe:fc:40:07:63:6d:f2:9a:2d:53:07:a9:5d:
         ae:48:9c:a7:f2:29:e6:93:88:6b:b4:2b:1a:55:ef:7e:e0:2a:
         0a:ef:86:e3:2f:23:9e:35:6d:5c:f8:a9:8a:b2:1a:78:96:41:
         31:67:62:64:b6:8c:10:92:cf:12:03:ed:95:6e:24:34:8e:c4:
         b1:14:b8:12:fe:03:0d:23:99:61:4f:82:ac:8c:de:c6:07:ff:
         dd:cc:97:01:73:54:3b:99:01:2a:3f:f4:d3:16:a8:9f:4d:44:
         69:ba:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----