Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20383334.roa
File:                     3230342e31302e31382e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier:          Wl460C6wWJpz5zTFJhtEkUg1mQ1K1+Aekx9glp/6afg=
Subject key identifier:   42:49:98:AE:8D:8D:FE:E4:EE:1A:BB:B3:12:79:15:31:50:88:1E:71
Certificate issuer:       /CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
Certificate serial:       1C1654087FE5CB2A54DA497D885898054111F4F6
Authority key identifier: 3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20383334.roa
Signing time:             Thu 29 Jun 2023 05:15:18 +0000
ROA not before:           Thu 29 Jun 2023 05:10:18 +0000
ROA not after:            Thu 27 Jun 2024 05:15:18 +0000
asID:                     834
IP address blocks:        204.10.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 02 Sep 2023 23:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:16:54:08:7f:e5:cb:2a:54:da:49:7d:88:58:98:05:41:11:f4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
        Validity
            Not Before: Jun 29 05:10:18 2023 GMT
            Not After : Jun 27 05:15:18 2024 GMT
        Subject: CN=424998AE8D8DFEE4EE1ABBB31279153150881E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:8f:d9:c6:f8:6d:5b:db:a4:78:bb:b4:81:
                    8e:21:4c:84:61:b6:b3:79:50:09:4f:94:b9:27:fd:
                    ec:7f:e7:b0:78:5a:b1:db:3c:74:b3:79:da:37:fb:
                    60:8d:f6:c7:77:84:67:49:f2:3c:02:e3:b5:a1:20:
                    34:5b:9d:76:66:7c:58:65:ef:b1:21:21:c6:3a:f5:
                    18:3e:99:c4:57:72:63:23:3d:66:12:fc:e2:43:31:
                    fb:6c:62:e4:14:eb:3b:f5:63:a0:8b:3b:0a:84:bd:
                    3b:7c:f9:22:f0:96:0e:27:a7:2b:9d:94:9e:6e:a4:
                    85:98:93:22:e3:ff:0c:57:a9:f4:9c:8b:0a:51:4e:
                    85:4a:ef:27:39:33:3e:07:56:1c:6b:f4:e8:1e:75:
                    b5:80:c9:0a:8d:78:dd:60:68:20:6c:6f:db:d1:ae:
                    d0:98:15:db:ad:d2:35:2f:45:f4:aa:2b:73:a1:a4:
                    9b:26:82:43:cf:62:bb:c4:1a:60:7a:3e:a6:8a:6b:
                    14:12:85:97:1c:32:44:bd:e8:79:6e:c7:f4:8c:6d:
                    ab:40:e0:3a:40:e0:5f:5b:0a:11:78:92:ab:12:d8:
                    e1:6e:cd:a0:b8:51:67:55:d1:f6:fa:88:83:fa:4f:
                    09:a2:2a:92:9e:d9:b3:3f:59:63:8d:5d:7c:94:1a:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:49:98:AE:8D:8D:FE:E4:EE:1A:BB:B3:12:79:15:31:50:88:1E:71
            X509v3 Authority Key Identifier:
                keyid:3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:53:a9:2d:3e:a8:b0:c9:4f:28:82:5f:04:26:4c:43:57:f3:
         b6:a0:a7:66:e7:93:9a:0d:cf:d6:3f:84:63:a4:cd:8a:6b:98:
         13:6f:32:1b:e5:b2:cd:61:44:49:da:07:9b:20:af:0d:25:96:
         cc:e7:19:cb:c9:33:76:20:f2:ca:0a:cd:a5:52:32:48:a0:e6:
         dd:ca:84:7c:1b:99:e1:5e:da:9c:50:4e:80:e6:29:e6:96:27:
         8a:66:61:51:7a:21:01:b3:15:56:45:ee:1e:89:74:4e:87:1e:
         7a:d9:a4:4f:21:fd:eb:3d:f0:f7:67:41:95:5d:a1:52:9f:7c:
         42:98:e4:01:d2:38:b2:37:f3:d2:9f:ee:b8:56:d3:ee:57:b3:
         53:ad:61:04:db:fd:48:5c:35:2f:e6:26:ab:84:d3:35:35:12:
         ce:9c:7a:3d:08:10:77:fd:ca:47:b4:dc:85:fe:36:27:6d:4e:
         69:f9:51:96:27:c2:3d:54:a9:1c:7d:ab:01:90:9c:6b:12:f6:
         2c:53:c4:5e:79:26:85:c8:43:54:74:00:c2:37:64:f3:0f:11:
         bb:dc:02:28:00:d1:01:d0:e3:f3:8d:9a:c1:d5:d2:a5:a1:d9:
         25:e8:eb:dd:54:1f:3d:8d:c3:98:5c:0f:df:7b:ce:76:88:57:
         67:c9:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----