Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS205320.roa
File:                     AS205320.roa (raw, json)
Hash identifier:          1+IhgyWCQ9cR4Vd5SFZ+oGIinZN9+zaNuVnYhm1fyek=
Subject key identifier:   25:F7:9E:6C:22:07:55:53:8C:A2:6F:0D:B8:3C:10:E1:11:E7:07:BE
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       691114A3A2B7E8C001C74A68817AFC33FEB14571
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS205320.roa
Signing time:             Mon 14 Aug 2023 12:00:06 +0000
ROA not before:           Mon 14 Aug 2023 11:55:06 +0000
ROA not after:            Mon 12 Aug 2024 12:00:06 +0000
asID:                     205320
IP address blocks:        216.246.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:11:14:a3:a2:b7:e8:c0:01:c7:4a:68:81:7a:fc:33:fe:b1:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 14 11:55:06 2023 GMT
            Not After : Aug 12 12:00:06 2024 GMT
        Subject: CN=25F79E6C220755538CA26F0DB83C10E111E707BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:49:bb:16:06:21:90:2c:b3:ae:23:b5:40:
                    81:62:36:1c:e5:b3:e9:0b:7a:58:76:78:b0:2a:90:
                    a4:e2:c3:5d:74:e9:5e:26:ca:af:83:f1:2f:2b:db:
                    22:12:f7:36:d1:ae:64:b1:4a:58:0d:20:b4:58:b3:
                    77:ec:06:a0:ab:7c:f4:d4:e1:75:cc:0e:0b:2e:a5:
                    7d:fe:bb:ed:db:ab:80:9e:f9:30:1b:50:d1:b3:0f:
                    36:80:10:31:92:77:63:04:4b:5b:0e:eb:e8:a4:fd:
                    7e:4e:1b:6e:6b:e3:9d:18:a3:51:89:f1:4c:37:cc:
                    47:69:41:86:5d:63:8e:5d:42:82:6b:b1:2e:d8:df:
                    68:1e:c3:6e:5e:2b:fe:73:1b:37:fb:3b:94:cc:09:
                    5b:7d:1f:70:e8:ed:54:c8:2c:3b:f8:23:eb:39:ea:
                    70:dc:0d:b5:a8:7f:a4:8b:e1:0d:dc:18:45:57:59:
                    59:8a:b0:fb:ea:8f:e3:70:c6:be:f2:bb:bc:b4:88:
                    d8:86:16:8e:75:45:a8:a9:07:e0:37:ed:53:3d:7c:
                    e4:cf:8b:ad:69:9e:b5:d1:21:a4:b0:f5:18:6b:17:
                    67:34:b4:51:d5:fd:e3:71:64:f7:97:cb:bf:92:8a:
                    47:e2:14:05:54:d3:2e:13:bf:90:85:df:6e:a3:c3:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:9E:6C:22:07:55:53:8C:A2:6F:0D:B8:3C:10:E1:11:E7:07:BE
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS205320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:73:27:f7:ce:e8:69:a3:3b:19:95:0b:f3:e8:a5:32:0d:
         fe:36:18:f4:5b:c0:61:ea:5c:33:c7:a7:4e:d9:f1:b5:30:e2:
         68:e4:91:83:54:88:b6:1c:3b:7a:ad:16:f3:b3:f5:d5:d5:81:
         bf:44:0d:36:72:97:ab:ea:38:a1:95:8d:48:d6:68:40:f0:89:
         23:ed:37:a9:0f:84:0e:98:53:53:ab:5c:8b:33:48:33:b6:45:
         3d:09:6a:a5:18:50:29:b4:9d:fc:d0:6e:17:18:68:a1:a1:0e:
         17:a0:3a:c0:80:1a:a3:6f:cb:b6:5d:fe:de:68:e1:9e:d5:ca:
         66:f3:f5:f2:85:cf:98:60:42:30:55:f3:53:5b:9f:84:26:ee:
         d9:f1:c3:23:42:8a:58:b4:ef:2f:ad:94:10:78:0e:e0:d5:b8:
         67:1a:b9:ac:0c:f4:f3:75:3c:39:77:62:23:2d:54:f3:74:2f:
         e2:52:e3:16:4d:4b:a2:e2:e7:11:cb:b7:80:b5:a3:48:63:c7:
         81:fc:5a:37:b5:78:48:49:ee:86:30:48:d4:a5:45:5b:a7:19:
         77:42:b1:ad:39:2f:7f:7e:d7:1d:75:eb:d3:63:f2:23:46:91:
         2b:d9:c3:a2:67:ce:c6:2a:23:37:db:e0:3e:32:fc:0e:34:89:
         1e:b7:be:54
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUaREUo6K36MABx0pogXr8M/6xRXEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwODE0MTE1NTA2WhcNMjQwODEyMTIwMDA2
WjAzMTEwLwYDVQQDEygyNUY3OUU2QzIyMDc1NTUzOENBMjZGMERCODNDMTBFMTEx
RTcwN0JFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHdJuxYGIZAs
s64jtUCBYjYc5bPpC3pYdniwKpCk4sNddOleJsqvg/EvK9siEvc20a5ksUpYDSC0
WLN37Aagq3z01OF1zA4LLqV9/rvt26uAnvkwG1DRsw82gBAxkndjBEtbDuvopP1+
Thtua+OdGKNRifFMN8xHaUGGXWOOXUKCa7Eu2N9oHsNuXiv+cxs3+zuUzAlbfR9w
6O1UyCw7+CPrOepw3A21qH+ki+EN3BhFV1lZirD76o/jcMa+8ru8tIjYhhaOdUWo
qQfgN+1TPXzkz4utaZ610SGksPUYaxdnNLRR1f3jcWT3l8u/kopH4hQFVNMuE7+Q
hd9uo8NPbwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCX3nmwiB1VTjKJvDbg8EOER
5we+MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzIwNTMyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2GDANBgkqhkiG9w0BAQsFAAOC
AQEAmM1zJ/fO6GmjOxmVC/PopTIN/jYY9FvAYepcM8enTtnxtTDiaOSRg1SIthw7
eq0W87P11dWBv0QNNnKXq+o4oZWNSNZoQPCJI+03qQ+EDphTU6tcizNIM7ZFPQlq
pRhQKbSd/NBuFxhooaEOF6A6wIAao2/Ltl3+3mjhntXKZvP18oXPmGBCMFXzU1uf
hCbu2fHDI0KKWLTvL62UEHgO4NW4Zxq5rAz083U8OXdiIy1U83Qv4lLjFk1LouLn
Ecu3gLWjSGPHgfxaN7V4SEnuhjBI1KVFW6cZd0KxrTkvf37XHXXr02PyI0aRK9nD
omfOxiojN9vgPjL8DjSJHre+VA==
-----END CERTIFICATE-----