Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61218.roa
File:                     AS61218.roa (raw, json)
Hash identifier:          xvuQV32xUEOlax/3RDLKJ4Y5N9vxoE1rU42iwOMX3iQ=
Subject key identifier:   69:91:36:C7:10:79:63:84:E4:0E:8C:13:DA:C5:2E:4F:5B:A9:30:BB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5DB9A6FE326463DCEE344652A5A1226AD1BE0933
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61218.roa
Signing time:             Wed 20 Dec 2023 18:01:11 +0000
ROA not before:           Wed 20 Dec 2023 17:56:11 +0000
ROA not after:            Wed 18 Dec 2024 18:01:11 +0000
asID:                     61218
IP address blocks:        104.234.128.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 12:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b9:a6:fe:32:64:63:dc:ee:34:46:52:a5:a1:22:6a:d1:be:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:11 2023 GMT
            Not After : Dec 18 18:01:11 2024 GMT
        Subject: CN=699136C710796384E40E8C13DAC52E4F5BA930BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:85:a5:31:40:2e:5c:81:23:8a:65:a0:34:
                    92:45:37:7d:d3:74:41:50:f8:42:b3:62:79:e2:72:
                    8c:ad:9f:a4:7c:e8:b6:cc:8d:1e:2b:c0:57:1b:f8:
                    ae:c0:ef:df:3a:a3:9e:30:ae:f1:27:e7:88:27:4a:
                    6c:f5:fe:b0:45:f3:a9:ab:b1:b8:2b:b0:32:21:a8:
                    29:8e:d3:09:5c:4c:9d:06:9d:1a:66:4f:33:7a:76:
                    5a:51:f9:f3:69:ea:00:99:a9:1d:5f:47:8d:45:cd:
                    9e:e0:48:a9:f3:08:86:dc:db:fa:ec:79:71:69:e1:
                    c8:05:36:91:b5:75:cc:9e:cd:14:7d:64:56:3e:3a:
                    c9:90:db:6c:56:3f:eb:81:20:05:69:3f:fd:e5:61:
                    69:bc:88:c6:ac:aa:1f:d5:20:25:30:5d:db:e0:21:
                    d3:c7:eb:07:ff:3f:75:47:5c:a1:b9:f0:c6:70:aa:
                    0d:0a:a8:c3:c5:f8:ee:7a:39:95:e0:1b:70:37:73:
                    2c:2f:b3:24:c4:29:f3:4a:0a:96:66:db:3c:6a:71:
                    45:1c:67:01:44:29:cf:e0:68:33:5d:61:78:47:10:
                    dd:f5:59:64:5e:ef:d3:bd:8f:ca:6c:2e:0c:8b:37:
                    c6:9d:85:ab:1a:49:9a:2d:08:52:fe:b5:aa:dd:6e:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:36:C7:10:79:63:84:E4:0E:8C:13:DA:C5:2E:4F:5B:A9:30:BB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:d7:d5:9f:03:76:a2:1a:25:75:3f:ce:d2:f9:bf:ea:7e:
         34:ce:1f:c2:54:19:17:b2:c7:31:c3:06:d3:64:08:1f:f0:ab:
         c3:31:5b:87:7c:61:f9:e1:60:78:91:f4:fa:48:f8:ad:a8:85:
         d6:ca:39:c0:66:ca:99:88:a9:3a:fb:23:98:7a:04:c9:44:f5:
         0e:24:b6:9c:d2:89:46:7b:b1:62:8f:f3:03:aa:9f:a6:2e:1a:
         8e:c9:56:bb:12:51:f4:28:dd:0d:2f:49:7d:7c:4a:e7:c7:5c:
         91:61:5e:2b:9f:72:9c:1e:54:f7:11:62:18:29:dd:eb:13:8d:
         fe:51:a9:50:74:23:89:e8:5d:76:42:08:07:52:07:b5:35:08:
         b7:71:93:1f:d3:ca:bd:87:2a:d8:16:06:32:b5:85:a2:41:2e:
         56:6c:75:4b:64:4f:c2:23:8f:b3:cc:91:36:4d:91:d6:6d:27:
         5a:30:f7:01:f9:b8:e2:2e:d6:71:19:42:3b:41:e5:6c:63:4d:
         10:85:8a:10:c7:f5:e0:f0:c8:a6:7b:c4:fe:fc:33:df:f5:e8:
         91:54:31:8d:ba:ed:c6:ba:0c:0e:43:22:04:e2:57:ea:f5:88:
         b9:8e:83:77:f0:97:64:79:5f:38:af:38:9c:86:9b:63:cb:aa:
         5b:a5:f0:3a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUXbmm/jJkY9zuNEZSpaEiatG+CTMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMjIwMTc1NjExWhcNMjQxMjE4MTgwMTEx
WjAzMTEwLwYDVQQDEyg2OTkxMzZDNzEwNzk2Mzg0RTQwRThDMTNEQUM1MkU0RjVC
QTkzMEJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0CFpTFALlyB
I4ploDSSRTd903RBUPhCs2J54nKMrZ+kfOi2zI0eK8BXG/iuwO/fOqOeMK7xJ+eI
J0ps9f6wRfOpq7G4K7AyIagpjtMJXEydBp0aZk8zenZaUfnzaeoAmakdX0eNRc2e
4Eip8wiG3Nv67HlxaeHIBTaRtXXMns0UfWRWPjrJkNtsVj/rgSAFaT/95WFpvIjG
rKof1SAlMF3b4CHTx+sH/z91R1yhufDGcKoNCqjDxfjuejmV4BtwN3MsL7MkxCnz
SgqWZts8anFFHGcBRCnP4GgzXWF4RxDd9VlkXu/TvY/KbC4MizfGnYWrGkmaLQhS
/rWq3W5wywIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGmRNscQeWOE5A6ME9rFLk9b
qTC7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYxMjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOqAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/VNfVnwN2oholdT/O0vm/6n40zh/CVBkXsscxwwbTZAgf8KvDMVuHfGH54WB4
kfT6SPitqIXWyjnAZsqZiKk6+yOYegTJRPUOJLac0olGe7Fij/MDqp+mLhqOyVa7
ElH0KN0NL0l9fErnx1yRYV4rn3KcHlT3EWIYKd3rE43+UalQdCOJ6F12QggHUge1
NQi3cZMf08q9hyrYFgYytYWiQS5WbHVLZE/CI4+zzJE2TZHWbSdaMPcB+bjiLtZx
GUI7QeVsY00QhYoQx/Xg8Mime8T+/DPf9eiRVDGNuu3GugwOQyIE4lfq9Yi5joN3
8JdkeV84rzichptjy6pbpfA6
-----END CERTIFICATE-----