Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS139482.roa
File:                     AS139482.roa (raw, json)
Hash identifier:          o9wH5k4nJ0BALAPV1JwqZD7vM8sOahaHEFatH8jd/pE=
Subject key identifier:   8F:43:1D:9D:E1:24:8C:4F:A5:A3:E7:08:8C:D4:3E:71:00:91:51:92
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0A654BF861D1B39371E1055356E0E219F5DBD905
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS139482.roa
Signing time:             Sat 28 Oct 2023 09:55:15 +0000
ROA not before:           Sat 28 Oct 2023 09:50:15 +0000
ROA not after:            Sat 26 Oct 2024 09:55:15 +0000
asID:                     139482
IP address blocks:        204.93.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 15:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:65:4b:f8:61:d1:b3:93:71:e1:05:53:56:e0:e2:19:f5:db:d9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Oct 28 09:50:15 2023 GMT
            Not After : Oct 26 09:55:15 2024 GMT
        Subject: CN=8F431D9DE1248C4FA5A3E7088CD43E7100915192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:3d:0c:9d:5d:1c:35:56:41:08:f0:fb:bb:
                    b3:9a:12:c6:ca:88:7e:4e:29:da:5f:6d:43:2b:81:
                    1a:31:e4:1d:79:e0:8e:5b:c7:f2:05:41:5e:04:96:
                    2a:b6:ab:3e:d1:85:62:40:49:1a:c1:20:12:fa:9d:
                    df:2a:5e:87:cf:11:03:54:2a:aa:fd:20:ae:55:10:
                    68:21:2a:5a:e5:c6:07:99:9c:b0:dd:15:8d:41:a8:
                    25:bd:4d:7c:26:bc:0c:29:8f:d6:8a:9f:25:38:d5:
                    39:1c:2f:1a:c5:b7:16:ae:cf:d5:79:7e:9e:cd:c5:
                    f1:49:f4:d0:9a:6b:df:ed:f4:32:dc:a5:a9:ab:fa:
                    11:b2:ba:f7:48:90:4b:d9:91:e6:c1:bf:38:95:ef:
                    a9:e8:e1:87:4a:90:ad:b4:fc:5f:df:ca:4c:59:67:
                    1c:98:96:c6:e4:c6:90:81:66:f7:16:1c:4c:aa:6b:
                    18:c9:6c:92:6b:37:4d:22:9b:6c:3d:ef:6d:5b:34:
                    4a:3c:fc:5d:92:71:37:b0:b7:ea:b9:05:80:fa:e2:
                    e1:b2:c9:f3:8b:d9:07:9b:80:2f:ff:94:fb:2b:2f:
                    8a:75:a6:0b:87:e8:07:b0:e9:ad:33:59:7e:7a:f5:
                    69:a5:bb:ad:e9:5d:5e:dd:47:e5:49:53:e0:2b:c2:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:1D:9D:E1:24:8C:4F:A5:A3:E7:08:8C:D4:3E:71:00:91:51:92
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS139482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:62:d2:eb:12:45:93:18:49:43:c1:a6:c2:2c:8a:d9:c5:
         b4:58:f5:7c:44:a1:d3:1b:18:1b:e6:cc:64:cf:a1:c3:04:1a:
         6b:d6:9f:13:49:1f:30:d0:8b:49:b2:d1:c2:9a:ad:c9:55:02:
         98:97:40:0e:da:2a:af:8e:01:c5:2a:40:a0:0f:d0:75:8d:26:
         7b:cc:b0:16:e3:0a:df:7c:dd:60:38:2e:c4:1b:8b:ec:d1:2b:
         8b:61:2d:1b:d8:bf:22:df:60:8e:20:86:64:40:45:99:23:91:
         26:36:b7:6f:4d:f9:ca:61:e7:83:39:91:d5:66:0a:58:c6:39:
         94:0f:5c:48:9a:1a:5f:33:af:44:2c:3e:b2:18:c5:26:07:1f:
         c5:50:d3:3b:af:14:67:30:9c:db:4c:dd:3f:6e:3c:fa:8c:31:
         33:7b:eb:c0:78:4d:6f:1a:ac:33:6f:f0:96:fb:03:94:4f:89:
         6d:0f:b2:1f:c8:b6:26:c0:39:89:fd:ed:a3:89:16:bd:d4:6d:
         70:f6:45:8a:a3:07:f1:eb:77:b5:b5:e6:7b:3e:dd:c0:ed:75:
         ff:29:f0:f9:ab:9f:84:07:dd:1d:69:c8:47:71:ac:90:0f:80:
         d6:b9:00:15:47:8b:7b:06:69:35:c2:d5:5b:76:df:1b:3e:03:
         70:5a:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----