Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa
File:                     AS62904.roa (raw, json)
Hash identifier:          ZiQxNZruzboqERakJMt0Y0Cr98BrnWXL9fsXpRXvliw=
Subject key identifier:   12:39:EF:5C:07:7D:25:51:80:18:F3:44:09:FE:D9:7D:DA:64:2A:BA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3E7D526E0B7B3C0A6B9C27D588304715DDB1D980
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa
Signing time:             Wed 19 Jun 2024 16:48:59 +0000
ROA not before:           Wed 19 Jun 2024 16:43:59 +0000
ROA not after:            Wed 18 Jun 2025 16:48:59 +0000
asID:                     62904
IP address blocks:        216.246.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:52:6e:0b:7b:3c:0a:6b:9c:27:d5:88:30:47:15:dd:b1:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 19 16:43:59 2024 GMT
            Not After : Jun 18 16:48:59 2025 GMT
        Subject: CN=1239EF5C077D25518018F34409FED97DDA642ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:f2:bd:44:8e:12:5a:0c:fd:c4:81:15:c8:
                    22:98:4a:9b:81:8f:40:fc:50:4c:fc:5c:c2:88:01:
                    e7:13:cc:2a:8e:d2:80:0a:56:fb:50:ad:fc:2d:f5:
                    77:d5:f8:da:3f:c3:c2:4f:42:8b:cb:7a:38:dc:f4:
                    ef:7b:eb:90:a7:11:d2:e9:de:33:fc:ec:31:a2:8c:
                    d5:a3:7b:a2:49:4d:77:b2:42:71:ba:58:ad:e8:45:
                    07:94:64:46:50:37:1d:43:48:45:38:50:6b:08:f6:
                    cc:32:4e:68:9a:73:f9:1c:46:8b:79:d7:30:f7:93:
                    7d:d5:03:c3:5f:7c:71:cd:6b:bb:62:da:e2:85:64:
                    29:96:d3:10:37:e3:22:10:ca:b1:f7:e6:01:fc:48:
                    56:dc:78:be:27:c5:3e:4c:d3:3e:a3:93:2f:93:6f:
                    cb:5c:d0:29:2c:5a:24:67:23:36:15:4f:fd:2e:b6:
                    82:b0:a8:db:41:e8:76:49:f5:06:42:a6:b8:98:49:
                    6c:77:c0:19:bc:42:27:d3:71:23:9c:e7:91:ef:5d:
                    60:d2:72:32:ee:7a:32:3a:1b:97:6d:03:f5:e7:1f:
                    06:fc:32:ed:7d:9e:cc:95:4d:f8:3b:50:9b:11:19:
                    a8:9f:3e:f9:24:d7:e0:7b:f4:6f:5a:7a:9a:ca:d0:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:EF:5C:07:7D:25:51:80:18:F3:44:09:FE:D9:7D:DA:64:2A:BA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS62904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:18:69:5f:3f:b2:2f:27:fd:65:af:f1:aa:dd:9d:1f:2c:c3:
         d9:78:87:6c:cc:89:93:58:3b:1e:cc:0c:73:26:ae:e7:aa:ab:
         be:72:c1:e2:74:ee:63:40:36:6f:25:ac:e3:db:fa:5b:88:59:
         a5:1e:06:4e:f0:f6:ff:e5:1f:a6:c7:0e:bd:bf:dc:32:a2:44:
         88:3c:08:d0:6e:bb:2d:6e:ed:79:01:b7:79:3c:be:84:ac:0a:
         49:0e:d7:c5:f3:53:05:17:15:03:3b:c5:d5:12:a6:28:73:6a:
         bb:c5:f5:09:b8:7e:37:98:fc:83:9c:f7:b7:f2:4b:53:6a:27:
         f0:45:05:69:d5:91:a4:d7:3f:6b:5c:d1:fd:fb:28:3c:26:90:
         19:5a:ec:63:54:a4:29:a2:d4:96:53:7d:0a:21:cf:a9:57:1c:
         7b:3a:1a:7d:b3:ea:0c:8c:e1:31:fe:a2:c3:49:8a:6e:0e:19:
         a1:2d:91:71:6b:04:54:cf:3c:10:1d:bc:3e:6d:fa:20:5d:d8:
         d1:3a:8c:58:3a:f7:88:fa:a4:fa:af:ff:96:ac:45:18:ca:18:
         9e:55:d2:de:ee:05:b3:51:46:c5:6d:1f:b1:ed:bc:bb:22:e0:
         3b:61:50:8a:f7:fc:f1:0c:37:8c:f2:16:66:eb:66:87:f1:3c:
         94:5b:31:55
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUPn1Sbgt7PAprnCfViDBHFd2x2YAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQwNjE5MTY0MzU5WhcNMjUwNjE4MTY0ODU5
WjAzMTEwLwYDVQQDEygxMjM5RUY1QzA3N0QyNTUxODAxOEYzNDQwOUZFRDk3RERB
NjQyQUJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ryvUSOEloM
/cSBFcgimEqbgY9A/FBM/FzCiAHnE8wqjtKAClb7UK38LfV31fjaP8PCT0KLy3o4
3PTve+uQpxHS6d4z/OwxoozVo3uiSU13skJxulit6EUHlGRGUDcdQ0hFOFBrCPbM
Mk5omnP5HEaLedcw95N91QPDX3xxzWu7YtrihWQpltMQN+MiEMqx9+YB/EhW3Hi+
J8U+TNM+o5Mvk2/LXNApLFokZyM2FU/9LraCsKjbQeh2SfUGQqa4mElsd8AZvEIn
03EjnOeR711g0nIy7noyOhuXbQP15x8G/DLtfZ7MlU34O1CbERmonz75JNfge/Rv
WnqaytC/JQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBI571wHfSVRgBjzRAn+2X3a
ZCq6MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzYyOTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PY6MA0GCSqGSIb3DQEBCwUAA4IB
AQCsGGlfP7IvJ/1lr/Gq3Z0fLMPZeIdszImTWDsezAxzJq7nqqu+csHidO5jQDZv
Jazj2/pbiFmlHgZO8Pb/5R+mxw69v9wyokSIPAjQbrstbu15Abd5PL6ErApJDtfF
81MFFxUDO8XVEqYoc2q7xfUJuH43mPyDnPe38ktTaifwRQVp1ZGk1z9rXNH9+yg8
JpAZWuxjVKQpotSWU30KIc+pVxx7Ohp9s+oMjOEx/qLDSYpuDhmhLZFxawRUzzwQ
Hbw+bfogXdjROoxYOveI+qT6r/+WrEUYyhieVdLe7gWzUUbFbR+x7by7IuA7YVCK
9/zxDDeM8hZm62aH8TyUWzFV
-----END CERTIFICATE-----