Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          2dWTRuoztrDiMUXJ/dRiUNsdQ0TPvtKEiU9lFLxR9MU=
Subject key identifier:   9A:EB:10:F8:4E:00:C4:AC:C9:17:52:B9:19:32:4F:C6:0B:25:43:00
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       51C0A1AED276F72DDCFF99673D43191CC048FA66
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
Signing time:             Thu 25 Jan 2024 17:08:39 +0000
ROA not before:           Thu 25 Jan 2024 17:03:39 +0000
ROA not after:            Thu 23 Jan 2025 17:08:39 +0000
asID:                     7029
IP address blocks:        104.234.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 21:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c0:a1:ae:d2:76:f7:2d:dc:ff:99:67:3d:43:19:1c:c0:48:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 25 17:03:39 2024 GMT
            Not After : Jan 23 17:08:39 2025 GMT
        Subject: CN=9AEB10F84E00C4ACC91752B919324FC60B254300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:22:b2:9a:b8:40:07:57:98:2f:95:f0:a4:
                    d0:89:30:1a:f7:44:74:d4:c8:7e:f0:e7:b5:41:36:
                    90:61:3c:44:2b:32:d2:d7:b1:94:7b:d2:82:a2:2a:
                    58:e8:c2:2f:2a:cf:90:14:39:ae:f1:c2:55:bd:4b:
                    51:2d:f8:84:ab:46:7f:2f:b3:4b:a1:7b:7c:6b:41:
                    33:87:fb:5d:9b:3f:ac:7a:6c:3a:62:bc:61:91:11:
                    30:e1:42:3f:9c:94:ec:b6:7a:46:a6:20:81:24:94:
                    d5:2f:86:3c:60:f5:9d:21:6c:98:bd:82:7b:9b:5a:
                    c4:52:9a:e9:91:3a:48:37:c5:9c:20:68:6a:2f:40:
                    7f:38:c1:0d:ea:13:4c:dd:8c:ea:16:4d:4b:39:12:
                    43:28:2a:8e:96:89:db:01:e9:58:06:e1:59:5d:62:
                    00:b6:33:5f:6b:2e:46:ed:0e:13:07:a9:b1:d9:c8:
                    73:05:cd:12:8f:d7:f9:df:3b:71:2d:52:6b:a3:74:
                    3e:c2:8b:0b:9f:9b:c8:df:2b:7b:29:7f:43:09:e9:
                    58:8b:10:bc:a0:28:06:29:de:ab:99:98:5f:99:0c:
                    b9:d1:f0:d4:1c:64:22:f7:bc:88:93:07:78:e6:df:
                    81:76:f9:7d:d0:87:cc:34:3d:71:0b:71:34:01:b6:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:10:F8:4E:00:C4:AC:C9:17:52:B9:19:32:4F:C6:0B:25:43:00
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:ec:e5:c0:48:ed:ff:82:57:c4:b1:15:33:98:0c:de:88:
         11:9b:41:06:1c:64:cd:ad:0e:4f:a1:15:e2:a5:ec:fd:ef:08:
         31:62:0b:1b:9c:4f:53:c4:6a:43:c2:68:c4:5a:13:e0:e7:8c:
         52:05:72:1e:48:4f:72:7a:dc:8c:7e:af:c9:1d:79:c4:2a:c6:
         8b:7c:0a:9c:dd:d3:fb:b1:8d:dd:00:2c:82:8c:ad:97:92:72:
         80:e0:0b:7d:a2:89:9f:ec:47:19:0a:ee:26:b4:a5:a8:87:50:
         e7:4a:e0:ea:a8:cb:6a:d8:b4:11:13:b5:a8:89:fb:12:07:43:
         c1:15:fb:f3:75:1b:b3:23:25:41:ff:68:5b:23:17:03:c3:5b:
         83:4a:09:6b:3b:8f:5d:1c:d3:4e:d5:1a:01:b4:7e:39:21:7e:
         12:19:a5:b3:e5:cc:88:61:70:48:47:c3:51:05:8f:04:59:23:
         06:2c:ae:82:07:24:9b:93:87:b7:9c:8b:1d:ac:e9:a1:4b:1d:
         11:4c:ed:4d:45:26:06:27:db:f8:65:2e:e0:54:ba:76:06:49:
         05:4a:b9:73:9f:2d:20:99:87:51:4e:ce:f2:e0:73:7e:6a:62:
         d7:ad:58:d2:36:c1:b5:7e:82:31:0b:6f:7b:68:9d:d8:71:8c:
         7e:b1:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----