Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63902.roa
File:                     AS63902.roa (raw, json)
Hash identifier:          1MZwM8oTh/2IcTaz0286EyBoZDyhicjIqcHpqe6s5L4=
Subject key identifier:   0C:9B:E3:DF:B6:DF:BD:FF:4B:7D:6A:79:3D:7D:DA:7F:50:C6:09:B1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6B4EEF4DB39F1A3C344DFC619D197A882C95687C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63902.roa
Signing time:             Tue 18 Jun 2024 07:14:41 +0000
ROA not before:           Tue 18 Jun 2024 07:09:41 +0000
ROA not after:            Tue 17 Jun 2025 07:14:41 +0000
asID:                     63902
IP address blocks:        104.234.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 00:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4e:ef:4d:b3:9f:1a:3c:34:4d:fc:61:9d:19:7a:88:2c:95:68:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 18 07:09:41 2024 GMT
            Not After : Jun 17 07:14:41 2025 GMT
        Subject: CN=0C9BE3DFB6DFBDFF4B7D6A793D7DDA7F50C609B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:d0:6a:ab:ac:5a:a8:67:7b:83:39:16:e4:
                    81:c7:e3:ab:fe:d3:f3:a2:1c:41:65:04:bb:80:a5:
                    8f:34:3b:a6:44:46:fc:bc:71:8f:f7:ba:1c:f5:0a:
                    78:e7:be:c4:48:ef:6a:00:5a:04:51:d3:f3:29:bc:
                    47:e8:f2:6e:fc:dd:f9:ef:c0:8b:8d:6d:a5:01:be:
                    87:76:06:b9:74:ae:01:47:95:fd:8e:6c:b2:98:97:
                    69:0f:88:53:4d:e5:1d:29:bd:88:a5:e2:d2:86:15:
                    f5:8c:88:e9:e9:6f:f2:fb:77:07:26:c3:bc:84:ba:
                    4f:48:88:65:37:03:e1:00:b7:02:28:97:d2:cd:33:
                    70:75:a2:bd:bc:c7:a8:f1:c9:79:26:0a:80:63:0c:
                    a5:61:30:71:b2:c6:a3:64:0e:67:e6:25:f9:80:7b:
                    e1:c8:bd:94:10:bf:3e:b1:5c:60:10:8c:de:9b:0e:
                    c4:94:89:cd:31:a6:9f:17:7d:7a:dc:16:df:c9:b1:
                    e4:2f:47:98:9e:e6:19:58:f5:cc:2e:59:ef:cf:8e:
                    12:c2:fb:15:12:95:17:62:b3:e8:3f:75:e3:e6:ae:
                    b4:ee:7b:55:ea:63:f4:4f:0b:15:8a:6a:2d:eb:e3:
                    f1:5d:17:3b:fa:b6:2c:41:1c:51:62:f0:80:00:3d:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:E3:DF:B6:DF:BD:FF:4B:7D:6A:79:3D:7D:DA:7F:50:C6:09:B1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:3b:65:38:6f:34:79:86:b9:ee:cb:81:aa:2a:8d:4b:5d:
         1b:bf:ee:e4:91:72:a2:29:1e:b4:05:75:65:d5:f5:98:0d:57:
         bb:e7:00:b4:49:f0:ca:86:a8:36:61:86:7d:eb:6e:24:ed:7d:
         ba:3b:b1:a9:df:23:be:14:d4:d4:4e:84:3e:37:b8:4b:72:7a:
         59:67:7a:71:1a:85:4b:c6:a0:04:6e:a8:5f:9d:3e:63:0e:a7:
         6b:e1:20:c1:6b:da:f2:46:4a:e4:0d:d7:df:81:ac:a9:d1:75:
         f0:ad:46:b6:26:e8:d3:9a:45:8a:41:85:ea:d5:98:e5:c4:55:
         be:96:fe:4a:86:06:fc:f3:8a:4f:fa:93:f2:0a:2f:a4:3c:d4:
         0a:fa:86:10:b1:74:f1:47:0f:99:21:84:4d:34:29:7e:e4:9a:
         33:e0:40:28:71:c0:ec:ea:14:54:f3:a0:de:b7:e5:f2:32:dd:
         68:5b:56:2e:56:a3:c2:49:ea:27:cb:2e:c9:a3:6c:a8:07:75:
         fb:76:eb:8d:f8:ce:dd:c5:29:27:f2:08:1e:d8:f0:b6:16:03:
         fe:40:71:b6:94:ec:1e:85:4f:06:05:a5:05:93:74:f7:86:d6:
         25:be:3f:b3:92:59:c4:cb:92:e1:3c:ad:44:5d:46:c8:4c:db:
         75:f8:3b:4d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUa07vTbOfGjw0TfxhnRl6iCyVaHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNjE4MDcwOTQxWhcNMjUwNjE3MDcxNDQx
WjAzMTEwLwYDVQQDEygwQzlCRTNERkI2REZCREZGNEI3RDZBNzkzRDdEREE3RjUw
QzYwOUIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjDQaqusWqhn
e4M5FuSBx+Or/tPzohxBZQS7gKWPNDumREb8vHGP97oc9Qp4577ESO9qAFoEUdPz
KbxH6PJu/N3578CLjW2lAb6Hdga5dK4BR5X9jmyymJdpD4hTTeUdKb2IpeLShhX1
jIjp6W/y+3cHJsO8hLpPSIhlNwPhALcCKJfSzTNwdaK9vMeo8cl5JgqAYwylYTBx
ssajZA5n5iX5gHvhyL2UEL8+sVxgEIzemw7ElInNMaafF3163BbfybHkL0eYnuYZ
WPXMLlnvz44SwvsVEpUXYrPoP3Xj5q607ntV6mP0TwsVimot6+PxXRc7+rYsQRxR
YvCAAD0swQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAyb49+2373/S31qeT192n9Q
xgmxMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYzOTAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqdMA0GCSqGSIb3DQEBCwUAA4IB
AQBZ+DtlOG80eYa57suBqiqNS10bv+7kkXKiKR60BXVl1fWYDVe75wC0SfDKhqg2
YYZ9624k7X26O7Gp3yO+FNTUToQ+N7hLcnpZZ3pxGoVLxqAEbqhfnT5jDqdr4SDB
a9ryRkrkDdffgayp0XXwrUa2JujTmkWKQYXq1ZjlxFW+lv5Khgb884pP+pPyCi+k
PNQK+oYQsXTxRw+ZIYRNNCl+5Joz4EAoccDs6hRU86Det+XyMt1oW1YuVqPCSeon
yy7Jo2yoB3X7duuN+M7dxSkn8gge2PC2FgP+QHG2lOwehU8GBaUFk3T3htYlvj+z
klnEy5LhPK1EXUbITNt1+DtN
-----END CERTIFICATE-----