Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS201670.roa
File:                     AS201670.roa (raw, json)
Hash identifier:          eU/4wMytdux19SGWWbGbckQCbRFLOi8k37haZZCyzk0=
Subject key identifier:   8E:98:43:51:CA:FB:11:10:91:B6:0A:12:0F:4D:7D:4D:A1:3B:43:C9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       324578EFD87DF87F136929CF868555CC7D1B8056
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS201670.roa
Signing time:             Wed 26 Jul 2023 14:25:41 +0000
ROA not before:           Wed 26 Jul 2023 14:20:41 +0000
ROA not after:            Wed 24 Jul 2024 14:25:41 +0000
asID:                     201670
IP address blocks:        205.234.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Sep 2023 11:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:45:78:ef:d8:7d:f8:7f:13:69:29:cf:86:85:55:cc:7d:1b:80:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 26 14:20:41 2023 GMT
            Not After : Jul 24 14:25:41 2024 GMT
        Subject: CN=8E984351CAFB111091B60A120F4D7D4DA13B43C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:fd:9a:e0:44:41:d0:d2:db:d9:9d:28:4e:
                    a5:c0:8b:4a:d4:59:9d:73:f3:b7:d8:c1:3c:b7:43:
                    c2:72:a2:79:18:81:20:8c:c6:fc:58:eb:06:2d:5a:
                    4b:21:a1:80:25:fb:fd:ee:8b:5f:8d:5a:3d:f4:35:
                    f3:08:34:ff:93:d5:c8:b0:74:45:46:14:31:dd:e3:
                    e7:d4:c1:f5:b3:4c:04:cc:4a:89:7d:85:0e:35:39:
                    43:c3:75:0d:cf:1b:5d:38:33:7e:74:7b:13:02:21:
                    25:51:b6:fb:71:18:ae:9d:6e:fd:25:34:8d:fc:0f:
                    a8:6b:a9:02:f9:3f:a8:75:0a:6c:02:74:cd:dc:cb:
                    53:32:c4:fc:4e:0e:be:20:3f:7a:d1:0a:b0:ec:fb:
                    b8:45:83:b2:d9:db:11:7e:43:78:fe:d4:c5:92:8a:
                    7f:b0:02:96:32:b3:2b:92:c1:71:1e:a6:15:42:6b:
                    3b:0c:4a:89:0f:03:e9:9e:84:49:d6:72:00:72:ff:
                    d6:93:17:ac:c8:d0:7d:5f:c4:22:0a:78:af:1e:08:
                    33:7d:39:51:3e:45:b6:6c:2e:78:50:11:30:96:93:
                    c7:6b:aa:fb:2c:24:e4:f6:90:b8:65:2d:d8:5a:90:
                    f6:80:5f:a0:85:74:89:e4:07:84:71:5f:6b:e8:56:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:43:51:CA:FB:11:10:91:B6:0A:12:0F:4D:7D:4D:A1:3B:43:C9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS201670.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:53:36:b1:53:6e:1f:1d:3d:4a:9a:03:70:d1:b2:87:0d:86:
         d0:6b:91:7a:da:65:16:d5:6b:69:d8:09:38:be:3d:cf:e7:13:
         9c:71:c2:5b:88:8b:e8:5b:99:00:b6:6c:7b:a1:41:ec:db:25:
         4c:99:76:11:82:ff:63:36:58:33:12:cf:a8:5c:01:f1:a4:0e:
         48:5a:28:bc:71:f2:cb:11:31:39:85:bc:1c:d8:a0:d0:d2:45:
         7d:23:78:05:20:19:bf:8f:3a:9f:8e:ad:91:3c:ea:55:dd:3f:
         46:7f:ee:57:56:33:bd:89:7e:d5:4b:c9:35:87:76:ee:e9:3c:
         d7:3c:a9:d3:1c:0b:f3:de:2e:ce:68:39:65:4a:46:78:fb:63:
         22:4f:fa:5b:38:c7:4a:b8:85:01:01:0a:16:85:4a:fe:8e:6d:
         62:36:35:d5:6c:bb:e7:5f:6f:71:d3:e6:24:b0:4d:90:2d:78:
         39:4f:3c:07:b8:5a:71:6f:77:32:18:5a:01:00:a6:1f:93:93:
         82:4c:b0:cc:1e:0d:da:6a:5a:61:3a:7e:55:6b:dc:93:c8:97:
         0f:88:33:ba:fb:0e:b3:50:8d:45:9f:d7:68:30:23:49:21:8c:
         58:75:24:bf:bf:2e:88:86:d2:30:ae:b2:49:a2:06:5c:62:6a:
         a9:cd:eb:9c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUMkV479h9+H8TaSnPhoVVzH0bgFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNzI2MTQyMDQxWhcNMjQwNzI0MTQyNTQx
WjAzMTEwLwYDVQQDEyg4RTk4NDM1MUNBRkIxMTEwOTFCNjBBMTIwRjREN0Q0REEx
M0I0M0M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWb9muBEQdDS
29mdKE6lwItK1Fmdc/O32ME8t0PCcqJ5GIEgjMb8WOsGLVpLIaGAJfv97otfjVo9
9DXzCDT/k9XIsHRFRhQx3ePn1MH1s0wEzEqJfYUONTlDw3UNzxtdODN+dHsTAiEl
Ubb7cRiunW79JTSN/A+oa6kC+T+odQpsAnTN3MtTMsT8Tg6+ID960Qqw7Pu4RYOy
2dsRfkN4/tTFkop/sAKWMrMrksFxHqYVQms7DEqJDwPpnoRJ1nIAcv/WkxesyNB9
X8QiCnivHggzfTlRPkW2bC54UBEwlpPHa6r7LCTk9pC4ZS3YWpD2gF+ghXSJ5AeE
cV9r6FZJ4QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFI6YQ1HK+xEQkbYKEg9NfU2h
O0PJMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzIwMTY3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM3q7zANBgkqhkiG9w0BAQsFAAOC
AQEAR1M2sVNuHx09SpoDcNGyhw2G0GuRetplFtVradgJOL49z+cTnHHCW4iL6FuZ
ALZse6FB7NslTJl2EYL/YzZYMxLPqFwB8aQOSFoovHHyyxExOYW8HNig0NJFfSN4
BSAZv486n46tkTzqVd0/Rn/uV1YzvYl+1UvJNYd27uk81zyp0xwL894uzmg5ZUpG
ePtjIk/6WzjHSriFAQEKFoVK/o5tYjY11Wy7519vcdPmJLBNkC14OU88B7hacW93
MhhaAQCmH5OTgkywzB4N2mpaYTp+VWvck8iXD4gzuvsOs1CNRZ/XaDAjSSGMWHUk
v78uiIbSMK6ySaIGXGJqqc3rnA==
-----END CERTIFICATE-----