Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212027.roa
File:                     AS212027.roa (raw, json)
Hash identifier:          MrbWvXkwMHwL4VPUOJrzRJ2WlNafNwBt2eWqLY/HhcY=
Subject key identifier:   53:6E:AA:7B:98:FB:5A:8E:F7:80:77:65:5A:49:3B:AA:B2:63:5E:82
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7B0CA1399173EDC82CAC9C648A94733AC1E44240
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212027.roa
Signing time:             Tue 20 Jun 2023 07:18:46 +0000
ROA not before:           Tue 20 Jun 2023 07:13:46 +0000
ROA not after:            Tue 18 Jun 2024 07:18:46 +0000
asID:                     212027
IP address blocks:        216.246.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 20 Aug 2023 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0c:a1:39:91:73:ed:c8:2c:ac:9c:64:8a:94:73:3a:c1:e4:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 20 07:13:46 2023 GMT
            Not After : Jun 18 07:18:46 2024 GMT
        Subject: CN=536EAA7B98FB5A8EF78077655A493BAAB2635E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:2d:cc:d4:c7:8a:4d:41:93:2e:91:6c:1b:
                    6c:1f:f2:20:98:e2:fb:1e:8f:3f:11:ea:53:1d:ea:
                    84:3e:19:a0:4d:e0:e3:c9:49:77:fc:09:85:8a:a4:
                    a3:31:18:c7:3c:5e:86:45:90:33:ea:02:c7:26:61:
                    89:21:42:05:9a:85:af:ff:b5:f0:cd:d3:c0:9d:0a:
                    b2:49:76:22:63:61:1b:60:a5:ba:a3:39:54:b6:9d:
                    c9:1d:e6:64:4b:fb:e4:d4:dd:56:e9:45:df:b6:5b:
                    9d:04:de:76:2c:65:76:ba:fa:d5:c0:5f:ce:b5:35:
                    9d:68:65:99:80:14:87:35:a6:79:3d:1a:7e:75:d0:
                    c4:c2:78:a8:a5:72:d4:a0:9f:6c:66:1e:47:20:e5:
                    e9:3a:cf:2a:b4:7b:03:b6:3e:f3:b6:2c:a4:45:d8:
                    e3:57:b9:b3:8f:e5:a4:08:ac:3c:92:5f:5a:4a:fb:
                    d2:f6:10:e0:52:16:c2:81:52:bf:b2:8b:6e:0f:4f:
                    2b:b8:4f:c3:dc:b0:0c:c6:1e:03:a5:7f:0e:b4:ab:
                    55:e0:f6:da:18:95:66:23:79:0f:f9:bd:4d:0f:32:
                    3e:e2:33:73:56:1d:13:ab:3b:f0:23:66:0d:a0:79:
                    92:4a:81:f1:f1:94:fe:a7:7e:d5:d9:81:ae:5d:24:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:AA:7B:98:FB:5A:8E:F7:80:77:65:5A:49:3B:AA:B2:63:5E:82
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:70:5f:4d:0e:58:43:d2:ed:f2:cb:80:e6:d5:a1:20:10:e6:
         07:4e:d8:e3:c2:6a:88:5d:52:18:d4:5d:11:2d:14:41:d3:96:
         f8:c6:3d:7e:fc:29:ee:3e:0c:34:8b:43:7c:ff:80:b7:ef:c6:
         fd:f6:67:25:06:e3:26:28:3c:44:8c:69:de:6a:98:1f:f7:fd:
         04:46:e5:e3:7d:9b:93:eb:53:b1:4b:e5:58:a3:e6:f6:93:f2:
         8d:dd:33:a7:8d:a0:38:f5:b5:1d:0a:76:5c:e2:0e:fd:f5:a3:
         b9:82:43:6e:0f:72:3f:91:b9:2f:75:83:5e:bf:43:46:58:69:
         8a:4b:9e:97:57:04:d5:7d:b4:82:6f:84:c0:8d:90:09:3b:ea:
         aa:9d:44:22:01:5e:eb:16:10:c4:89:b6:65:4c:a5:7c:8e:d3:
         81:23:d3:2c:4e:3a:08:84:9e:4d:93:5b:6a:63:0d:7b:5b:d7:
         e2:ed:14:2e:e9:41:69:1f:81:d4:f3:63:91:29:4c:36:c5:9b:
         23:25:ef:4c:e7:41:7b:bb:aa:73:6a:b2:3f:67:c9:dc:46:90:
         c4:38:17:b5:4e:d1:0c:68:57:06:d3:1a:c0:d0:7c:07:44:33:
         1a:a0:54:84:5d:07:a6:7e:14:42:da:c7:00:c5:72:f2:34:d7:
         0e:04:97:24
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUewyhOZFz7cgsrJxkipRzOsHkQkAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNjIwMDcxMzQ2WhcNMjQwNjE4MDcxODQ2
WjAzMTEwLwYDVQQDEyg1MzZFQUE3Qjk4RkI1QThFRjc4MDc3NjU1QTQ5M0JBQUIy
NjM1RTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJYtzNTHik1B
ky6RbBtsH/IgmOL7Ho8/EepTHeqEPhmgTeDjyUl3/AmFiqSjMRjHPF6GRZAz6gLH
JmGJIUIFmoWv/7XwzdPAnQqySXYiY2EbYKW6ozlUtp3JHeZkS/vk1N1W6UXftlud
BN52LGV2uvrVwF/OtTWdaGWZgBSHNaZ5PRp+ddDEwniopXLUoJ9sZh5HIOXpOs8q
tHsDtj7ztiykRdjjV7mzj+WkCKw8kl9aSvvS9hDgUhbCgVK/sotuD08ruE/D3LAM
xh4DpX8OtKtV4PbaGJVmI3kP+b1NDzI+4jNzVh0TqzvwI2YNoHmSSoHx8ZT+p37V
2YGuXSQcRwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFNuqnuY+1qO94B3ZVpJO6qy
Y16CMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzIxMjAyNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2WjANBgkqhkiG9w0BAQsFAAOC
AQEAKHBfTQ5YQ9Lt8suA5tWhIBDmB07Y48JqiF1SGNRdES0UQdOW+MY9fvwp7j4M
NItDfP+At+/G/fZnJQbjJig8RIxp3mqYH/f9BEbl432bk+tTsUvlWKPm9pPyjd0z
p42gOPW1HQp2XOIO/fWjuYJDbg9yP5G5L3WDXr9DRlhpikuel1cE1X20gm+EwI2Q
CTvqqp1EIgFe6xYQxIm2ZUylfI7TgSPTLE46CISeTZNbamMNe1vX4u0ULulBaR+B
1PNjkSlMNsWbIyXvTOdBe7uqc2qyP2fJ3EaQxDgXtU7RDGhXBtMawNB8B0QzGqBU
hF0Hpn4UQtrHAMVy8jTXDgSXJA==
-----END CERTIFICATE-----