Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400866.roa
File:                     AS400866.roa (raw, json)
Hash identifier:          kqDIOU07nA96LXoghiTRZAVzS5tIZfs1gn4mt/TyOpc=
Subject key identifier:   44:A0:92:46:65:3B:61:46:AB:3E:DD:9F:A3:90:3A:4D:44:36:D8:6D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       58E571E1634C4E3F25013CB476B3A6C6EAE785BB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400866.roa
Signing time:             Sun 16 Jun 2024 23:51:07 +0000
ROA not before:           Sun 16 Jun 2024 23:46:07 +0000
ROA not after:            Sun 15 Jun 2025 23:51:07 +0000
asID:                     400866
IP address blocks:        205.234.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:71:e1:63:4c:4e:3f:25:01:3c:b4:76:b3:a6:c6:ea:e7:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 16 23:46:07 2024 GMT
            Not After : Jun 15 23:51:07 2025 GMT
        Subject: CN=44A09246653B6146AB3EDD9FA3903A4D4436D86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:40:af:b1:6d:0c:38:e0:03:5d:97:05:0d:
                    4e:20:4d:8e:d8:29:27:d7:d3:55:af:4b:96:e8:13:
                    9f:01:35:64:76:ee:a5:ae:cb:01:13:61:37:cf:7d:
                    c4:c6:e0:80:8f:15:e9:d5:08:a8:b6:46:62:b3:40:
                    e0:d1:de:b0:73:f5:e8:96:71:07:be:f0:5a:f2:31:
                    f7:48:45:64:b1:8c:71:bc:0f:23:8d:8c:2f:5d:b0:
                    79:6c:62:e2:27:71:24:a1:30:ae:bb:14:0d:b2:eb:
                    a2:83:6d:1d:57:1e:20:4b:00:1a:23:8b:b0:53:ce:
                    e6:ae:dc:69:07:55:97:dc:bd:b9:bc:f6:b2:c8:3e:
                    54:9b:b4:ad:6c:15:80:d7:72:ce:d9:45:a8:f1:16:
                    36:a2:88:88:51:4a:ff:3c:e7:a1:9f:4b:c6:41:ed:
                    a3:07:7a:ff:44:a2:aa:2c:19:24:6c:85:79:85:7f:
                    b4:c2:fd:ce:64:09:06:67:88:35:cd:f3:50:21:d6:
                    7a:94:c2:22:e9:7c:7e:79:bd:cb:2b:61:53:74:00:
                    fd:03:9d:2a:c1:8f:9e:fd:45:7f:6a:e0:60:6b:82:
                    00:1e:32:26:05:b3:4c:ea:da:f7:cd:d5:56:fa:88:
                    e4:8d:7a:78:a0:f6:1e:89:29:46:dc:3c:f2:e4:4b:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A0:92:46:65:3B:61:46:AB:3E:DD:9F:A3:90:3A:4D:44:36:D8:6D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS400866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:62:3f:2b:5d:ee:e6:31:10:de:74:06:4b:f7:fd:10:73:80:
         0c:41:43:f4:e9:ad:6c:63:a1:45:f8:8c:37:cf:7b:a0:3f:a9:
         86:75:f6:ea:81:be:4d:e4:4b:ee:9d:eb:13:9b:78:95:fc:57:
         14:f4:14:4e:3a:83:a5:f1:28:07:e8:8c:ad:77:15:92:13:65:
         8c:02:c2:86:66:dd:4e:6e:8c:5f:0c:0e:34:6c:db:cd:92:14:
         73:55:b6:2a:9d:d4:5e:e3:f7:f9:6f:07:f2:bf:e9:d7:4a:43:
         74:ce:9b:58:24:1e:6b:44:47:09:60:c1:17:ad:fa:d2:5e:af:
         7b:2d:40:08:0a:11:d0:1f:2f:96:7f:a5:73:d2:68:b8:1d:8a:
         b0:d4:16:7b:9c:9b:99:80:6a:c1:12:8a:af:99:cf:09:09:15:
         3d:3c:63:df:f6:7e:c4:f7:d2:78:7f:a6:56:48:2b:cd:5b:85:
         b2:78:26:8f:3c:c9:a2:8a:9d:bc:69:dd:cc:2a:db:3a:e9:db:
         0a:aa:7f:dc:7e:97:10:20:9a:0f:03:a8:1e:f3:a2:f1:f8:ed:
         bb:76:c6:5a:4e:f7:60:62:af:4e:5e:9e:65:ec:ca:53:ab:03:
         15:4b:95:df:7c:64:19:75:de:37:f2:da:a0:ac:7a:63:0f:47:
         31:9c:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----