Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          TGkPh4bjBwSLPJrum0C6NKzVAKn65yaEHQrJGrw/ZG4=
Subject key identifier:   59:3D:5B:46:B0:21:80:DB:DA:72:EF:7E:A4:3E:6A:AD:40:68:42:E8
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       51D900DB0DE1BC29AC5C300F2F12686C8035F685
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 31 May 2024 03:09:09 +0000
ROA not before:           Fri 31 May 2024 03:04:09 +0000
ROA not after:            Fri 30 May 2025 03:09:09 +0000
asID:                     834
IP address blocks:        64.253.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 01:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d9:00:db:0d:e1:bc:29:ac:5c:30:0f:2f:12:68:6c:80:35:f6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 31 03:04:09 2024 GMT
            Not After : May 30 03:09:09 2025 GMT
        Subject: CN=593D5B46B02180DBDA72EF7EA43E6AAD406842E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:a8:86:bc:b2:e9:75:16:08:a6:b8:93:90:
                    e5:31:25:90:cc:2f:fe:54:2a:fd:0b:d4:6f:47:60:
                    10:b8:e7:db:7f:b3:01:17:3b:91:fb:d5:88:7d:83:
                    05:1d:ee:6a:8c:c4:b5:bf:80:fe:9e:29:58:79:3b:
                    78:78:7c:38:87:bc:f1:d4:a3:c0:17:48:e2:8f:6b:
                    96:3d:0f:29:e4:96:af:b5:3e:23:bd:e7:d9:23:c6:
                    6e:d5:2a:cd:4a:8d:8d:be:e2:6b:d5:9a:12:09:cf:
                    39:6b:2a:a8:1c:29:65:c1:80:fa:ec:fe:1e:5d:c5:
                    14:8e:f1:c6:4f:7d:ad:a0:6a:c6:1b:f0:86:38:5e:
                    e6:fd:8e:ff:b3:14:ae:3c:b4:d5:67:56:04:8a:b7:
                    ef:2e:9a:06:e6:3e:90:87:bc:55:c5:25:26:d7:1d:
                    ff:8e:cf:0f:43:58:17:0b:29:94:01:87:f4:85:19:
                    cd:0a:bb:41:71:12:ea:1f:ab:0f:a9:dc:97:e7:42:
                    ec:e5:e1:68:83:86:a0:e7:06:e4:19:a6:12:64:93:
                    f3:5d:c7:3e:75:37:59:3f:6c:04:95:7c:90:b4:fd:
                    d6:f4:fe:0b:2e:45:a7:05:e0:e3:e4:91:cc:8a:3b:
                    55:9c:1b:7f:ef:0a:e6:97:6b:e3:25:0c:14:03:db:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:5B:46:B0:21:80:DB:DA:72:EF:7E:A4:3E:6A:AD:40:68:42:E8
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:ed:03:f6:a2:35:71:c5:46:c6:6a:ba:f1:e1:1d:9a:03:
         a7:51:e8:13:7e:fc:b7:4a:c7:a4:b7:b0:42:95:9d:65:7e:b4:
         75:2a:61:06:30:c4:9d:0d:c9:87:20:4c:63:2b:6f:ff:16:6a:
         80:70:be:05:0f:4c:2e:88:e7:be:9a:95:2b:ee:48:45:e0:7c:
         05:85:db:62:41:69:ee:04:65:a5:69:af:86:2f:89:b3:2c:56:
         a2:95:74:e1:f4:eb:c3:25:ed:71:17:c0:c0:9c:3e:c6:18:a7:
         11:5a:bc:67:55:96:b0:63:2f:29:2b:ca:b0:1a:a5:eb:e1:2c:
         5f:28:a6:31:b8:4d:79:ef:dc:74:a0:5f:b3:08:61:3b:83:d6:
         75:28:3f:15:42:29:0f:32:a2:5c:0d:20:28:39:2a:31:bf:20:
         94:d7:fd:30:51:93:73:05:8b:56:66:dc:dd:e6:3a:00:2d:99:
         5d:45:21:04:4d:bd:1c:ba:17:b0:a3:1d:70:6a:1a:da:fb:52:
         bf:56:2c:cf:10:d5:64:ec:9a:1a:d5:f3:6b:d3:08:06:45:7a:
         06:ca:90:1b:7c:cb:fc:dd:df:8b:d5:f6:77:82:b9:09:57:bd:
         65:52:b8:fe:b3:2e:19:9c:19:60:7d:73:49:99:5b:1a:c9:af:
         76:23:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----