Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203233343730.roa
File:                     36342e3235332e39312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          JSq7tL1cqkq7QC5B5HSmdJuRmhtAud/M8w0QK3lEuvU=
Subject key identifier:   9D:20:8A:50:92:30:26:59:E5:DF:D7:F1:7F:0F:78:CF:92:B7:17:95
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7988DCDAB205FB0D7417DA16EFE42AD3E707D403
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203233343730.roa
Signing time:             Sat 18 Nov 2023 13:50:41 +0000
ROA not before:           Sat 18 Nov 2023 13:45:41 +0000
ROA not after:            Sat 16 Nov 2024 13:50:41 +0000
asID:                     23470
IP address blocks:        64.253.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:88:dc:da:b2:05:fb:0d:74:17:da:16:ef:e4:2a:d3:e7:07:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 18 13:45:41 2023 GMT
            Not After : Nov 16 13:50:41 2024 GMT
        Subject: CN=9D208A5092302659E5DFD7F17F0F78CF92B71795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:74:bb:d9:b5:9f:ef:52:6b:b8:57:35:ac:
                    9e:7f:91:5b:0f:77:68:bb:c0:90:9e:54:b1:50:ae:
                    1b:49:1a:fa:28:d6:ac:95:bb:e6:d0:f8:28:fd:1f:
                    38:a9:25:3f:e4:1e:97:99:f7:d2:75:21:cb:80:06:
                    28:0a:33:97:6b:16:3f:86:dc:8e:22:f1:10:30:f0:
                    ee:d5:97:25:3d:0e:8d:84:30:32:93:b7:90:94:14:
                    9a:c9:6f:d6:e6:00:15:b8:e9:09:76:34:e0:95:1f:
                    da:62:f7:80:4d:d8:6d:d2:9d:a8:f4:3a:d5:7f:f7:
                    03:98:b3:7a:42:5f:48:58:e5:8a:27:f1:7a:ba:5a:
                    34:9e:60:1d:c8:d0:f7:66:19:8a:6e:56:0c:0c:8c:
                    51:a0:4d:a8:0c:47:14:f5:64:dc:72:fc:45:67:72:
                    03:5a:81:2a:19:8f:6b:91:86:3a:77:6b:64:22:12:
                    73:73:df:28:df:95:ba:b5:26:46:a1:7d:b4:7d:34:
                    7f:44:ef:ab:4d:2f:b1:3a:5e:2a:31:09:e2:e7:9a:
                    30:bf:9c:c0:f7:ad:1f:6c:49:0c:c3:4f:82:36:dd:
                    8e:23:c1:0a:85:8e:a4:df:89:30:28:fc:30:03:28:
                    50:c3:64:a5:e7:f2:0f:e3:04:d1:00:b0:b4:89:a6:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:8A:50:92:30:26:59:E5:DF:D7:F1:7F:0F:78:CF:92:B7:17:95
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:ed:e4:fc:19:8a:6e:0d:86:05:a8:db:ad:9b:5a:e4:80:
         4a:42:80:8e:4d:d0:1f:e0:65:b6:f5:cc:39:a8:ac:55:ec:a9:
         4b:7c:55:30:d6:87:50:45:90:ed:c9:b5:5c:d6:de:42:8e:3e:
         99:17:c6:db:0c:a2:1f:b4:2f:0d:95:50:c7:3e:5b:14:08:f1:
         43:8b:70:bf:d2:60:95:ae:fe:e4:d8:61:f2:d0:22:2c:0f:06:
         90:d3:00:f7:b3:9b:8c:24:28:9f:ed:38:6d:cb:23:e4:86:18:
         d2:1c:55:0a:09:23:48:1b:54:0b:a6:dc:5e:3c:fe:3b:31:bd:
         71:bf:c7:03:2e:4c:ac:df:7f:08:65:7d:4e:82:f9:b3:be:0d:
         52:bc:05:86:88:87:fe:4a:6b:41:c9:e6:0d:55:de:7e:f0:06:
         dc:6e:62:4c:12:7d:0d:06:a0:74:b5:4a:cb:15:83:eb:8c:c6:
         f1:b2:7a:ac:7b:c0:af:19:31:f2:97:1b:a8:68:4e:96:f1:ed:
         e6:54:fc:b0:15:92:51:07:c9:84:34:73:ff:b2:c5:e3:d7:ca:
         80:02:d0:ed:b0:e0:fe:fd:9c:12:76:41:ca:7d:e3:0a:bc:71:
         e4:48:cb:44:ea:f8:79:0b:82:b9:9e:5e:48:0f:c1:5f:ce:62:
         c2:d1:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----