Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          QU2ucnnO5zIXD2ZdTW03Hfd5F5lbK/aBHTV9nJYS+1M=
Subject key identifier:   55:C8:FE:02:26:5C:11:6E:41:89:9D:01:AD:29:02:EA:77:24:FE:EF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1A7E981010A62E58E6F557A45D61C8B9DC3B36BA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa
Signing time:             Mon 17 Jul 2023 12:30:07 +0000
ROA not before:           Mon 17 Jul 2023 12:25:07 +0000
ROA not after:            Mon 15 Jul 2024 12:30:07 +0000
asID:                     61138
IP address blocks:        104.234.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7e:98:10:10:a6:2e:58:e6:f5:57:a4:5d:61:c8:b9:dc:3b:36:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 17 12:25:07 2023 GMT
            Not After : Jul 15 12:30:07 2024 GMT
        Subject: CN=55C8FE02265C116E41899D01AD2902EA7724FEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:a8:ec:54:ca:a0:8b:e8:9e:41:2b:de:4e:
                    42:05:72:ca:d5:bb:33:3e:d3:98:fa:0e:a0:e5:46:
                    49:90:f3:2f:fc:c1:68:8a:09:78:f6:85:a9:f3:11:
                    f9:5a:5a:8d:e9:f6:b1:77:35:0e:57:cd:bf:8b:94:
                    ec:3e:48:de:80:27:1e:bc:4e:06:5a:6e:13:fb:8b:
                    77:cb:19:73:b6:cb:ce:e8:c5:c0:4c:23:d9:85:a2:
                    89:36:81:3a:6f:ab:45:27:b3:c7:f8:5a:7b:08:15:
                    f2:da:d0:f9:04:9a:24:f6:b8:02:79:69:9f:df:8e:
                    fb:b7:4d:7e:ef:0c:12:77:d2:82:42:84:a4:d1:87:
                    ee:44:9f:93:07:4f:33:bf:94:55:ce:93:7e:f9:77:
                    c1:1a:2b:22:07:e5:53:9d:e8:1b:a3:75:04:9e:8f:
                    05:99:50:5c:53:da:fc:f0:21:a9:e8:18:25:fb:56:
                    10:7a:50:8b:10:e6:75:39:d4:b7:3a:05:b6:08:36:
                    36:6e:7b:96:08:ed:30:69:7d:8b:ae:bf:21:ad:62:
                    82:49:a1:e7:40:f3:e6:b6:64:96:56:e8:6b:a8:4c:
                    a8:5a:47:57:3a:c9:9b:10:5b:e7:bb:88:04:a1:19:
                    48:ff:a6:0e:9d:bc:9b:ce:1b:6a:76:bf:34:ec:77:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:FE:02:26:5C:11:6E:41:89:9D:01:AD:29:02:EA:77:24:FE:EF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:53:8a:ed:68:4b:15:a9:19:d4:c6:79:2b:2f:15:24:56:0f:
         81:21:77:4d:dd:ad:11:05:67:4b:93:0c:10:c7:10:9e:1f:bb:
         94:23:64:2a:56:fc:e1:46:6c:91:94:e4:20:d7:06:b1:97:eb:
         eb:48:8e:fd:ec:9e:3c:3a:a9:32:7e:67:04:37:26:10:e3:3b:
         32:15:ef:c2:f3:7a:74:27:d5:c1:36:94:ab:1c:35:7f:53:d7:
         6b:fa:92:97:19:3e:dd:9b:a3:43:b7:e4:93:72:22:72:fc:ce:
         bb:ea:17:c9:51:e3:e6:02:fd:ad:a7:f4:e0:f4:8a:21:b6:bb:
         d1:9b:e4:b3:33:14:06:5c:70:ad:0f:52:88:c7:4d:7f:c4:13:
         64:09:03:c8:14:08:3b:04:4f:87:9e:cf:8f:6b:77:31:bf:ef:
         62:fc:76:81:89:8f:2b:2b:69:43:34:41:41:c5:22:dc:e8:70:
         30:52:4d:d3:4f:d0:c7:cb:f1:be:2d:f1:62:09:34:77:56:d0:
         c4:9b:aa:b7:e9:93:1b:af:05:f0:09:a6:fa:2a:e6:e7:59:df:
         9e:d1:2c:ef:de:30:29:76:7f:23:6a:be:4f:3d:62:c6:8b:0c:
         14:23:47:a1:a0:e0:38:01:ea:53:2a:ac:43:6f:ee:48:ac:22:
         10:ed:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----